last executing test programs: 24m50.803818249s ago: executing program 32 (id=139): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc000000000000000000000000000001ff020000000000000000000000000001000107144e230005000000003a000000eb2128175268a9dc901d30d7cdf7fcf93be51887225ee81de7ea1ea879ddb03364dde7860858942304d868582de7f0ae310117ff3a89d93cd97752ac33e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141444000000000000000000000000000004d46c000000ac14143b000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/233], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24f300ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c29b1ac1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f05111e9cedf5e0f21f1a8aeefa517ed1705ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de754596e9a07c7718adf0cbdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e069f42e87939d653b2c76eb3002d554d24190d68e", 0x200}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae256", 0x37}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c2528", 0x8}, {&(0x7f0000000380)="863df713b27092133340", 0xa}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7", 0x4a}, {&(0x7f0000001000)="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", 0x193}], 0x4}}], 0x3, 0x4004) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) 23m38.051809359s ago: executing program 33 (id=272): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x64c842, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000200)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x4000000) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0xfffffffd, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f00000002c0), 0x0, 0x0, 0x0, 0x3, r3}, 0x38) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, 0x0, 0x1) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) socket$kcm(0x2, 0x1, 0x0) getpriority(0x2, 0x0) 22m8.299262916s ago: executing program 34 (id=416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002240)=""/102400, 0x19000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40080d0) 21m16.824543946s ago: executing program 35 (id=479): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) 20m21.472600404s ago: executing program 36 (id=547): r0 = socket$inet(0x2, 0x800, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8004) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r3) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x29, 0x7, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, &(0x7f0000000600)) recvmsg$kcm(r4, &(0x7f0000000400)={&(0x7f00000002c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f00000003c0)}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r3, {0x8001}}, './file0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x20000, 0x30, 0x2}, 0x18) sendfile(r5, r5, 0x0, 0x200000) 19m1.431974618s ago: executing program 37 (id=628): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48}) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000180)) fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=@known='user.syz\x00', &(0x7f0000000dc0)=""/220, 0xdc) keyctl$set_timeout(0xf, 0x0, 0xfffff49f) accept(0xffffffffffffffff, &(0x7f0000000ec0)=@ax25={{0x3, @rose}, [@rose, @default, @netrom, @remote, @remote, @bcast, @null, @rose]}, &(0x7f0000000140)=0x80) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 15m31.054170479s ago: executing program 38 (id=894): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x12) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000024c0)) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x2208004, 0x0) 15m28.981438129s ago: executing program 39 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 14m8.650802179s ago: executing program 40 (id=987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) shmctl$SHM_STAT(0x0, 0xd, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 10m13.585539256s ago: executing program 41 (id=1449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) 10m10.377868497s ago: executing program 42 (id=1460): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 7m30.070554247s ago: executing program 43 (id=1815): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 6m15.138166906s ago: executing program 44 (id=1917): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5m55.844603804s ago: executing program 4 (id=1960): socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f00000000c0)="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", 0x1f0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 5m52.889816239s ago: executing program 1 (id=1967): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newtaction={0x18, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m52.178551208s ago: executing program 4 (id=1970): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r0, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) 5m50.760940862s ago: executing program 1 (id=1972): socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet(0xa, 0x801, 0x84) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 5m46.879586155s ago: executing program 4 (id=1979): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000200000050005000000000008000300010000004800018005000200000007ff0600010002000000080006000a000000080003"], 0x84}}, 0x0) 5m46.808123128s ago: executing program 1 (id=1981): creat(0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x400, 0x800, 0xff, 0x100, 0x1, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 5m43.313734942s ago: executing program 1 (id=1989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={0x40, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x40}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xfff9}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x1c}, @NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x40}}, 0x4000) 5m43.028018105s ago: executing program 4 (id=1990): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m40.767580111s ago: executing program 4 (id=1993): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x18}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) 5m40.720900672s ago: executing program 1 (id=1994): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000440)=0xf) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007400000000108001640"], 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x4048000) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 5m34.467800413s ago: executing program 1 (id=2001): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x800455cc, 0x5) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0x3) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) close(r6) 5m34.43619163s ago: executing program 4 (id=2002): r0 = getpgrp(0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7, 0x7, 0x2, r6}) close_range(r3, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 5m24.169991064s ago: executing program 45 (id=1991): socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet(0xa, 0x801, 0x84) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 5m19.299068784s ago: executing program 46 (id=2001): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x800455cc, 0x5) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0x3) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) close(r6) 5m18.907616826s ago: executing program 47 (id=2002): r0 = getpgrp(0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0xe5c, 0x80000) r7 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r7, 0x7, 0x2, r6}) close_range(r3, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 3m55.687243813s ago: executing program 0 (id=2173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x802) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, 0x0) splice(r5, &(0x7f0000000000)=0x6, r4, &(0x7f0000000040)=0x8, 0x57, 0x4) fsopen(0x0, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) io_cancel(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m50.106123835s ago: executing program 0 (id=2176): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x44040) 3m49.03154453s ago: executing program 0 (id=2180): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x38}}, 0x0) 3m46.734279374s ago: executing program 0 (id=2188): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "1a3952b5"}]}}, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m43.222969775s ago: executing program 0 (id=2195): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0x10000) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) 3m42.121814737s ago: executing program 0 (id=2198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000c010) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3m26.64090083s ago: executing program 3 (id=2214): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, 0x0, 0x0, 0x0, 0x1}) 3m26.356563182s ago: executing program 48 (id=2198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000c010) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3m25.59404169s ago: executing program 3 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000fedbdf251200000018000180140002006272696467655f736c6176655f3100000800070002000001080008"], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x4e040) 3m24.857055569s ago: executing program 8 (id=2220): socket$igmp(0x2, 0x3, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 3m24.550131292s ago: executing program 3 (id=2222): r0 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 3m23.714819237s ago: executing program 8 (id=2223): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) preadv2(r0, &(0x7f0000000100), 0x2000000000000066, 0x8, 0x6, 0x0) 3m22.640446837s ago: executing program 8 (id=2226): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) capset(&(0x7f0000000180)={0x20071026, r0}, &(0x7f0000000280)={0x101, 0x0, 0x800, 0x800, 0x5, 0x4}) 3m21.887597203s ago: executing program 8 (id=2229): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x10, 0x1000, 0x690, 0x384, 0x1000, 0x400, 0x10, 0x0, {0x0, 0x4, 0x1}, {0x0, 0x4}, {0x2, 0x5}, {0x10001, 0x4e1}, 0x0, 0x80, 0x3, 0x3, 0x0, 0x5, 0x10, 0x5, 0x0, 0x4, 0xc611, 0x40, 0x3, 0x0, 0x1, 0x9}) 3m21.094215024s ago: executing program 8 (id=2232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x35, &(0x7f0000000280)="aa012175", 0x4) 3m20.602507551s ago: executing program 3 (id=2233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x44040) 3m20.183811549s ago: executing program 8 (id=2234): socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 3m19.477447196s ago: executing program 3 (id=2236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) close_range(r0, 0xffffffffffffffff, 0x0) 3m17.950658216s ago: executing program 3 (id=2237): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1e0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) 3m3.403556931s ago: executing program 49 (id=2234): socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f36006e090890e0878f0e1ac6e7049b3341959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07480936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 3m1.595869259s ago: executing program 50 (id=2237): socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1e0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x4000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) 6.234864227s ago: executing program 2 (id=2743): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000003c0)={0x0, 0x15, 0x14, "b3b450a5a6c78d63f94881a40198644e5ab97ef0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.467591587s ago: executing program 6 (id=2748): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 5.373022185s ago: executing program 9 (id=2749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e6030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) 5.099993605s ago: executing program 2 (id=2751): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = open(0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 4.45207974s ago: executing program 9 (id=2752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000180), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.327339756s ago: executing program 5 (id=2754): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 4.323803879s ago: executing program 6 (id=2755): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}}], 0x1, 0x0) 4.171970138s ago: executing program 2 (id=2756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.774636393s ago: executing program 7 (id=2757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) gettid() 3.638621275s ago: executing program 5 (id=2758): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 3.588072961s ago: executing program 6 (id=2759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff0300100d690b98caa58c86dd6c", 0x0, 0xe60, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.020183658s ago: executing program 9 (id=2760): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r4}, 0xc) 3.019896157s ago: executing program 7 (id=2761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c", 0xd4d}], 0x1}, 0x0) 2.795255292s ago: executing program 5 (id=2762): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 2.376824792s ago: executing program 7 (id=2763): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.376413343s ago: executing program 9 (id=2764): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000880)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r0, 0x1, 0xc7, &(0x7f0000000080)=""/199) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000740)=ANY=[], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0x91, 0x82, 0x40, 0x6f8, 0x300c, 0x3964, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x49, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x319, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x0, {0x9, 0x21, 0x6, 0x74, 0x1, {0x22, 0xf99}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfa, 0x1, 0xfb}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0x6, 0x0, 0x3, 0x10, 0xc8}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "618f4a24c5af4ee3b59598fa674e0c57"}]}, 0x4, [{0x0, 0x0}, {0xb0, &(0x7f0000000280)=ANY=[@ANYBLOB]}, {0xb5, &(0x7f0000000340)=@string={0xb5, 0x3, "ead2c8d39bace58776f5fe1662bc5a01f16bc3bad3fded2483b002cf91bc8b17b7b12a6bfd18042884ddc76b9a0074ae8bb1fd19a57224e123cbb91c0916ea2db89980d8e0d75fe39db3590421cc7fdb63107ff59b5762686549f11564867c2a390fbb4c3a08992abedeec84bbccd5689c83fa6926f950f10567c70f4f39287384509d1ce8f741551096df97ff761a7a80879c23f042d7ff60dde19442d8b814c45bcb0a42e97c595728bdf780ef977a6cd745"}}, {0x38, &(0x7f00000004c0)=@string={0x38, 0x3, "e1ac2edb7e7746b18746b03aa1c88fca84b5477900cdf5fc929e0900000000000000d21e4ae903ff62d5796ae4f02bfae1a42b8308ce"}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002183b9220b11342"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe3, 0x8, 0x64, 0x10, 0xbda, 0xf179, 0xcfdf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001300)="92", 0x2) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000001140)={{0x12, 0x1, 0x110, 0x1e, 0x9a, 0x69, 0x8, 0x1608, 0x10, 0x4f88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd1, 0x1, 0x1, 0xff, 0x1, 0x12, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000c80)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000cc0)={0x84, &(0x7f0000000700)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.218100409s ago: executing program 6 (id=2765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x608, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.153777832s ago: executing program 5 (id=2766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r5}, 0x10) write$cgroup_int(r4, &(0x7f0000000200), 0x43451) 2.11425437s ago: executing program 2 (id=2767): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f030200", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x40840) 1.65183621s ago: executing program 7 (id=2768): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004012200a4e2000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1}, 0x38) 1.604083504s ago: executing program 2 (id=2769): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1}}], 0x1, 0x0) 1.46666693s ago: executing program 5 (id=2770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 991.140742ms ago: executing program 2 (id=2771): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='tlb_flush\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 912.609319ms ago: executing program 9 (id=2772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000300)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 912.210594ms ago: executing program 6 (id=2773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 911.833121ms ago: executing program 7 (id=2774): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x6f4, 0x1, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r1}, 0x4) 790.825215ms ago: executing program 5 (id=2775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) syz_io_uring_submit(r3, 0x0, 0x0) 304.186007ms ago: executing program 7 (id=2776): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@printk={@llu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 221.505777ms ago: executing program 6 (id=2777): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f00000003c0)="811e86492cd898013a3f97a8401a296c4aae8360844221841a232932fc2e37e315ce7776716e184d2bb82280", 0x2c}, {&(0x7f0000000640)}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704", 0x4b}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8906de55d53d4ef6cb26fb90479fa63a37d98b31cc593", 0x88}], 0x6}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee40", 0x1dd}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 9 (id=2778): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): T6927] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.863307][T14750] fido_id[14750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1508.934526][ T6927] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.977760][ T6927] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1509.336196][ T9448] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1509.625869][ T9448] usb 3-1: Using ep0 maxpacket: 16 [ 1509.660989][ T9448] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1509.669568][ T9448] usb 3-1: config 0 has no interface number 0 [ 1509.782214][ T9448] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1509.791768][ T9448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.800777][ T9448] usb 3-1: Product: syz [ 1509.805151][ T9448] usb 3-1: Manufacturer: syz [ 1509.810109][ T9448] usb 3-1: SerialNumber: syz [ 1509.967286][ T9448] usb 3-1: config 0 descriptor?? [ 1510.327862][T14772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2072'. [ 1510.389928][ T9448] usb 3-1: can't set config #0, error -71 [ 1510.470985][ T9448] usb 3-1: USB disconnect, device number 8 [ 1510.854035][ T8252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.862366][ T8252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.308935][ T8240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.317901][ T8240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.803353][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.811287][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.819075][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.830884][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.839266][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.847012][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.854566][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.862328][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.870072][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1512.877817][ T9448] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 1513.993794][ T9448] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1515.044608][T14811] fido_id[14811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1515.780117][ T6927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.788335][ T6927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.969863][T14830] IPVS: Error connecting to the multicast addr [ 1516.015921][T14516] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1516.026134][T14829] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2081'. [ 1516.193821][ T471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.202273][ T471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.233927][T14516] usb 4-1: Using ep0 maxpacket: 32 [ 1516.314019][T14516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.327375][T14516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.338102][T14516] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1516.347613][T14516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.569365][T14516] usb 4-1: config 0 descriptor?? [ 1516.611277][T14516] hub 4-1:0.0: USB hub found [ 1516.886139][T14516] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1517.479243][T14516] hid-generic 0003:046D:C31C.0021: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 1518.043457][T14826] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 1518.583868][T14516] usb 4-1: USB disconnect, device number 36 [ 1518.597491][T14826] usbhid 4-1:0.0: reset_resume error -19 [ 1518.701231][T14849] fido_id[14849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1519.150288][T14516] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1519.398249][T14516] usb 4-1: Using ep0 maxpacket: 16 [ 1519.470743][T14516] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1519.479262][T14516] usb 4-1: config 0 has no interface number 0 [ 1519.604823][T14516] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1519.617015][T14516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.625557][T14516] usb 4-1: Product: syz [ 1519.629927][T14516] usb 4-1: Manufacturer: syz [ 1519.634811][T14516] usb 4-1: SerialNumber: syz [ 1519.940830][T14516] usb 4-1: config 0 descriptor?? [ 1519.973518][T14871] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2092'. [ 1520.178142][ T8252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.186981][ T8252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.389564][T14516] usb 4-1: can't set config #0, error -71 [ 1520.517904][T14516] usb 4-1: USB disconnect, device number 37 [ 1520.806181][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.819568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.514666][T14908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2104'. [ 1525.303268][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1525.310313][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1525.719664][ T9448] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1526.026408][ T9448] usb 7-1: Using ep0 maxpacket: 8 [ 1526.069448][ T8266] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1526.219670][ T9448] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1526.228412][ T9448] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.238891][ T9448] usb 7-1: config 0 has no interface number 0 [ 1526.547113][ T8266] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 1526.561715][ T8266] usb 1-1: config 0 has no interface number 0 [ 1526.569813][ T8266] usb 1-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1526.581991][ T8266] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 1526.593591][ T8266] usb 1-1: config 0 interface 200 has no altsetting 0 [ 1526.732196][ T9448] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1526.741824][ T9448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.750552][ T9448] usb 7-1: Product: syz [ 1526.760770][ T9448] usb 7-1: Manufacturer: syz [ 1526.767377][ T9448] usb 7-1: SerialNumber: syz [ 1526.955615][ T9448] usb 7-1: config 0 descriptor?? [ 1527.092606][ T8266] usb 1-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1527.102102][ T8266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.110489][ T8266] usb 1-1: Product: syz [ 1527.114875][ T8266] usb 1-1: Manufacturer: syz [ 1527.123428][ T8266] usb 1-1: SerialNumber: syz [ 1527.147089][ T9448] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22 [ 1527.306440][ T8266] usb 1-1: config 0 descriptor?? [ 1527.657769][ T8266] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input51 [ 1527.674173][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.685627][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.695898][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.703793][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.713093][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.721933][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.731392][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.740590][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.749964][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.762899][ C0] usb 1-1: hanwang_irq - urb shutting down with status: -2 [ 1527.823072][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.831698][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.841066][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.850245][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.859476][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.873254][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.886597][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.896827][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.904557][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.915689][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.925674][ C0] usb 1-1: hanwang_irq - nonzero urb status received: -71 [ 1527.933367][ C0] usb 1-1: hanwang_irq - usb_submit_urb failed with result -1 [ 1528.048174][ T8266] usb 1-1: USB disconnect, device number 31 [ 1528.276911][T14470] udevd[14470]: setting mode of /dev/bus/usb/001/031 to 020664 failed: No such file or directory [ 1528.443155][T14470] udevd[14470]: setting owner of /dev/bus/usb/001/031 to uid=0, gid=0 failed: No such file or directory [ 1529.107743][T14933] Bluetooth: MGMT ver 1.23 [ 1529.264344][ T30] audit: type=1326 audit(1768727521.545:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.287894][ T30] audit: type=1326 audit(1768727521.555:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.310908][ T30] audit: type=1326 audit(1768727521.555:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.339208][ T30] audit: type=1326 audit(1768727521.555:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.364045][ T30] audit: type=1326 audit(1768727521.555:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.386984][ T30] audit: type=1326 audit(1768727521.555:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.409859][ T30] audit: type=1326 audit(1768727521.555:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.438080][ T30] audit: type=1326 audit(1768727521.555:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca5d58df90 code=0x7ffc0000 [ 1529.462637][ T30] audit: type=1326 audit(1768727521.555:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fca5d590f77 code=0x7ffc0000 [ 1529.485673][ T30] audit: type=1326 audit(1768727521.555:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14926 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca5d58f749 code=0x7ffc0000 [ 1529.951428][ T8266] usb 7-1: USB disconnect, device number 10 [ 1533.209441][T14957] loop9: detected capacity change from 0 to 7 [ 1533.220797][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.230078][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.238987][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.247767][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.257165][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.266190][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.274766][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.290658][T14957] ldm_validate_partition_table(): Disk read failed. [ 1533.298410][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.312448][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.324098][T14957] Buffer I/O error on dev loop9, logical block 0, async page read [ 1533.333261][T14957] Dev loop9: unable to read RDB block 0 [ 1533.340212][T14957] loop9: unable to read partition table [ 1533.356174][T14957] loop9: partition table beyond EOD, truncated [ 1533.362905][T14957] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1533.362905][T14957] ) failed (rc=-5) [ 1540.052542][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 1541.317424][ T8266] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1541.376141][ T794] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1541.525642][ T8266] usb 3-1: Using ep0 maxpacket: 32 [ 1541.568381][ T8266] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1541.582052][ T8266] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1541.591573][ T8266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.616964][ T794] usb 7-1: Using ep0 maxpacket: 16 [ 1541.682425][ T794] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1541.692124][ T794] usb 7-1: config 0 has no interface number 0 [ 1541.698719][ T794] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1541.820361][ T8266] usb 3-1: config 0 descriptor?? [ 1541.851084][ T8266] hub 3-1:0.0: bad descriptor, ignoring hub [ 1541.857361][ T8266] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1541.872904][ T8266] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1541.982573][ T794] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1541.992376][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.002769][ T794] usb 7-1: Product: syz [ 1542.007686][ T794] usb 7-1: Manufacturer: syz [ 1542.016570][ T794] usb 7-1: SerialNumber: syz [ 1542.171058][ T794] usb 7-1: config 0 descriptor?? [ 1542.449278][ T794] usbtouchscreen 7-1:0.214: Failed to read FW rev: 0 [ 1542.457633][ T794] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1544.444740][ T794] usb 7-1: USB disconnect, device number 11 [ 1544.451815][ T8266] usb 3-1: USB disconnect, device number 9 [ 1544.905754][ T8266] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1545.121373][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2134'. [ 1545.183954][ T8266] usb 9-1: Using ep0 maxpacket: 16 [ 1545.319204][ T8266] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.330578][ T8266] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.340840][ T8266] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1545.350233][ T8266] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.526039][ T8266] usb 9-1: config 0 descriptor?? [ 1545.990596][ T8266] hid_parser_main: 33 callbacks suppressed [ 1545.990703][ T8266] hid-picolcd 0003:04D8:F002.0022: unknown main item tag 0x0 [ 1546.014179][ T8266] hid-picolcd 0003:04D8:F002.0022: unknown main item tag 0x0 [ 1546.024220][ T8266] hid-picolcd 0003:04D8:F002.0022: unknown main item tag 0x0 [ 1546.032037][ T8266] hid-picolcd 0003:04D8:F002.0022: unknown main item tag 0x0 [ 1546.039965][ T8266] hid-picolcd 0003:04D8:F002.0022: global environment stack underflow [ 1546.048466][ T8266] hid-picolcd 0003:04D8:F002.0022: item 0 4 1 11 parsing failed [ 1546.327335][ T8266] hid-picolcd 0003:04D8:F002.0022: device report parse failed [ 1546.335919][ T8266] hid-picolcd 0003:04D8:F002.0022: probe with driver hid-picolcd failed with error -22 [ 1546.439084][ T8266] usb 9-1: USB disconnect, device number 10 [ 1549.437103][T15026] block nbd2: not configured, cannot reconfigure [ 1550.396164][ T8266] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1550.505581][ T9448] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1550.728560][ T8266] usb 9-1: Using ep0 maxpacket: 32 [ 1550.751702][ T8266] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1550.765957][ T8266] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1550.775257][ T8266] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.832602][ T9448] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1550.841148][ T9448] usb 7-1: config 0 has no interface number 0 [ 1550.971257][ T9448] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1550.981283][ T9448] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1550.989702][ T9448] usb 7-1: Product: syz [ 1550.994107][ T9448] usb 7-1: Manufacturer: syz [ 1550.999022][ T9448] usb 7-1: SerialNumber: syz [ 1551.019492][ T8266] usb 9-1: config 0 descriptor?? [ 1551.096096][ T8266] hub 9-1:0.0: bad descriptor, ignoring hub [ 1551.102419][ T8266] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1551.117477][ T8266] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1551.179834][ T9448] usb 7-1: config 0 descriptor?? [ 1552.162704][ T9448] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1552.202650][ T9448] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1552.214604][ T9448] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1552.223131][ T9448] usb 7-1: media controller created [ 1552.605550][ T9448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1552.926193][T12178] Bluetooth: hci0: command 0x0406 tx timeout [ 1553.763682][ T9448] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1553.926845][ T5891] usb 9-1: USB disconnect, device number 11 [ 1554.376511][ T5891] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1554.567326][ T9448] usb 7-1: USB disconnect, device number 12 [ 1554.626139][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 1554.689007][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.700409][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.716690][ T5891] usb 3-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1554.727903][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.946176][ T5891] usb 3-1: config 0 descriptor?? [ 1555.681645][ T5891] elecom 0003:056E:00FF.0023: collection stack underflow [ 1555.689222][ T5891] elecom 0003:056E:00FF.0023: item 0 1 0 12 parsing failed [ 1555.927472][ T5891] elecom 0003:056E:00FF.0023: probe with driver elecom failed with error -22 [ 1556.341760][ T5891] usb 3-1: USB disconnect, device number 10 [ 1558.487510][T15075] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 1558.711582][ T794] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1558.770489][T15084] netlink: 'syz.3.2159': attribute type 10 has an invalid length. [ 1558.921384][T15084] team0: Failed to send options change via netlink (err -105) [ 1558.929960][T15084] team0: Port device dummy0 added [ 1558.940629][ T794] usb 3-1: Using ep0 maxpacket: 16 [ 1558.954033][ T794] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1558.967620][ T794] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1559.029454][ T794] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1559.039405][ T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.047873][ T794] usb 3-1: Product: syz [ 1559.052249][ T794] usb 3-1: Manufacturer: syz [ 1559.057279][ T794] usb 3-1: SerialNumber: syz [ 1559.576996][ T794] usb 3-1: 0:2 : does not exist [ 1559.582197][ T794] usb 3-1: unit 9 not found! [ 1562.524640][ T794] usb 3-1: USB disconnect, device number 11 [ 1563.220655][T15113] Bluetooth: hci0: unsupported parameter 255 [ 1563.227215][T15113] Bluetooth: hci0: unsupported parameter 255 [ 1563.266069][ T5891] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1563.429906][T14611] udevd[14611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1563.520011][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 1563.539319][ T5891] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 1563.548655][ T5891] usb 4-1: config 0 has no interface number 0 [ 1563.700189][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1563.710692][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.719861][ T5891] usb 4-1: Product: syz [ 1563.724234][ T5891] usb 4-1: Manufacturer: syz [ 1563.736693][ T5891] usb 4-1: SerialNumber: syz [ 1564.006634][ T5891] usb 4-1: config 0 descriptor?? [ 1564.164591][ T5891] hub 4-1:0.145: bad descriptor, ignoring hub [ 1564.171581][ T5891] hub 4-1:0.145: probe with driver hub failed with error -5 [ 1564.278788][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input53 [ 1564.482459][ T5891] input: failed to attach handler mousedev to device input53, error: -2 [ 1570.495239][ T5863] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1570.747424][ T5863] usb 3-1: Using ep0 maxpacket: 8 [ 1571.181002][ T5863] usb 3-1: device descriptor read/all, error -71 [ 1571.386815][ T794] usb 4-1: USB disconnect, device number 38 [ 1571.686791][T15148] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1572.563185][T15158] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1572.598223][T15152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.608195][T15152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.943470][T15152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.973650][T15152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1573.661123][ T35] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.767594][ T4829] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.803602][ T4829] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.906195][ T1148] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.685745][ T5891] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1574.697359][T14516] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1574.866105][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 1574.914973][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.926581][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.927831][T14516] usb 3-1: Using ep0 maxpacket: 8 [ 1574.936741][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1574.937074][ T5891] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1574.964485][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.046077][T14516] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1575.054448][T14516] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.065241][T14516] usb 3-1: config 0 has no interface number 0 [ 1575.136837][T14516] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1575.146623][T14516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.154877][T14516] usb 3-1: Product: syz [ 1575.159810][T14516] usb 3-1: Manufacturer: syz [ 1575.164629][T14516] usb 3-1: SerialNumber: syz [ 1575.260242][T14516] usb 3-1: config 0 descriptor?? [ 1575.298823][T14516] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1575.306909][T14516] uvcvideo 3-1:0.31: No valid video chain found. [ 1575.370190][ T5891] usb 1-1: config 0 descriptor?? [ 1575.966734][ T5891] input: HID 0955:7214 Haptics as /devices/virtual/input/input54 [ 1576.057629][ T5891] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 1576.067575][ T5891] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1576.107723][T15179] random: crng reseeded on system resumption [ 1576.450352][ T8266] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1576.467281][ T5891] usb 1-1: USB disconnect, device number 32 [ 1576.512757][ T8266] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1576.529113][ T8266] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1576.543235][ T8266] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1577.753691][T14516] usb 3-1: USB disconnect, device number 14 [ 1578.284189][T15204] warning: `syz.2.2196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1578.351972][T15204] netlink: 'syz.2.2196': attribute type 10 has an invalid length. [ 1586.669744][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.676582][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1588.010279][ T5891] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1589.186143][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 1592.713783][ T5891] usb 4-1: unable to read config index 0 descriptor/all [ 1592.721323][ T5891] usb 4-1: can't read configurations, error -71 [ 1593.021895][ T8266] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1593.280659][ T8266] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.291298][ T8266] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1593.300591][ T8266] usb 9-1: config 1 has no interface number 0 [ 1593.307075][ T8266] usb 9-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1593.589434][ T8266] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1593.599205][ T8266] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.607592][ T8266] usb 9-1: Product: syz [ 1593.611968][ T8266] usb 9-1: Manufacturer: syz [ 1593.616929][ T8266] usb 9-1: SerialNumber: syz [ 1593.836183][ T8266] cdc_ncm 9-1:1.1: skipping garbage [ 1593.841652][ T8266] cdc_ncm 9-1:1.1: NCM or ECM functional descriptors missing [ 1593.849641][ T8266] cdc_ncm 9-1:1.1: bind() failure [ 1594.069165][ T8266] usb 9-1: USB disconnect, device number 12 [ 1596.425250][T15293] macvtap1: entered promiscuous mode [ 1596.431941][T15293] macvtap1: entered allmulticast mode [ 1596.437820][T15293] veth1_vlan: entered allmulticast mode [ 1596.519163][T15295] dvmrp8: entered allmulticast mode [ 1596.650331][T12178] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1596.677592][T12178] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1596.689767][T12178] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1596.710278][T12178] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1596.739225][T12178] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1597.096510][ T5863] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1597.422258][ T5863] usb 4-1: Using ep0 maxpacket: 8 [ 1597.483695][ T5863] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1597.492385][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.503317][ T5863] usb 4-1: config 0 has no interface number 0 [ 1597.603651][ T5863] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1597.613445][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.625095][ T5863] usb 4-1: Product: syz [ 1597.630485][ T5863] usb 4-1: Manufacturer: syz [ 1597.635458][ T5863] usb 4-1: SerialNumber: syz [ 1597.738393][T15309] veth0_virt_wifi: entered promiscuous mode [ 1597.786392][ T5863] usb 4-1: config 0 descriptor?? [ 1597.803355][ T5863] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1597.811093][ T5863] uvcvideo 4-1:0.31: No valid video chain found. [ 1598.044410][T15309] veth0_virt_wifi: left promiscuous mode [ 1598.886380][T12178] Bluetooth: hci8: command tx timeout [ 1600.067270][ T8266] usb 4-1: USB disconnect, device number 41 [ 1600.224233][T15298] chnl_net:caif_netlink_parms(): no params data found [ 1600.955954][T12178] Bluetooth: hci8: command tx timeout [ 1601.493005][ T8266] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 1601.755870][ T8266] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1601.756035][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1601.756207][ T8266] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1601.756366][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1601.756537][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1601.769257][ T8266] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1601.837978][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1601.838108][ T8266] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1601.838218][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1601.838405][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1602.590917][ T8266] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1602.591164][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1602.591480][ T8266] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1602.591640][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1602.591806][ T8266] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1602.706483][ T8266] usb 3-1: string descriptor 0 read error: -22 [ 1602.707046][ T8266] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1602.707198][ T8266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.898180][ T8266] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1603.068574][T12178] Bluetooth: hci8: command tx timeout [ 1604.155962][T12178] Bluetooth: hci5: command 0x0406 tx timeout [ 1605.115575][ T5804] Bluetooth: hci8: command tx timeout [ 1605.648778][T15298] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.656481][T15298] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.664666][T15298] bridge_slave_0: entered allmulticast mode [ 1605.674544][T15298] bridge_slave_0: entered promiscuous mode [ 1606.336957][T14516] usb 3-1: USB disconnect, device number 15 [ 1606.761930][T15298] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.769436][T15298] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.777627][T15298] bridge_slave_1: entered allmulticast mode [ 1606.787785][T15298] bridge_slave_1: entered promiscuous mode [ 1606.867227][T15364] netlink: 'syz.6.2239': attribute type 3 has an invalid length. [ 1606.875246][T15364] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2239'. [ 1607.598409][T15298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.799252][T15298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.517919][T15298] team0: Port device team_slave_0 added [ 1608.600557][T15298] team0: Port device team_slave_1 added [ 1608.894541][T14516] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1609.132771][T15298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.139981][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.166710][T15298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.206617][T12178] Bluetooth: hci6: command 0x0406 tx timeout [ 1609.270881][T15298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.278249][T15298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.307730][T15298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1609.363727][T14516] usb 3-1: Using ep0 maxpacket: 8 [ 1609.419121][T14516] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1609.427660][T14516] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.438177][T14516] usb 3-1: config 0 has no interface number 0 [ 1609.603093][T14516] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1609.612794][T14516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.621299][T14516] usb 3-1: Product: syz [ 1609.625800][T14516] usb 3-1: Manufacturer: syz [ 1609.630617][T14516] usb 3-1: SerialNumber: syz [ 1610.146519][T14516] usb 3-1: config 0 descriptor?? [ 1610.163502][ T8266] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1610.222972][T14516] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1610.230673][T14516] uvcvideo 3-1:0.31: No valid video chain found. [ 1610.424327][ T8266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.435818][ T8266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.446077][ T8266] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1610.459328][ T8266] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1610.468749][ T8266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.501737][ T4911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.693005][ T8266] usb 7-1: config 0 descriptor?? [ 1610.795731][ T4911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.047467][ T4911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.156377][T15298] hsr_slave_0: entered promiscuous mode [ 1611.167991][T15298] hsr_slave_1: entered promiscuous mode [ 1611.177410][T15298] debugfs: 'hsr0' already exists in 'hsr' [ 1611.183404][T15298] Cannot create hsr debugfs directory [ 1611.205668][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.213515][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.221413][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.229166][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.244731][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.253803][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.261563][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.269280][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.277006][ T8266] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 1611.377134][ T4911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.418060][ T8266] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1611.773444][ T8266] usb 3-1: USB disconnect, device number 16 [ 1612.406887][T15377] usb 7-1: string descriptor 0 read error: -2 [ 1612.588764][ T4911] bridge_slave_1: left allmulticast mode [ 1612.594652][ T4911] bridge_slave_1: left promiscuous mode [ 1612.601554][ T4911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.796383][ T4911] bridge_slave_0: left allmulticast mode [ 1612.802276][ T4911] bridge_slave_0: left promiscuous mode [ 1612.809564][ T4911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.328599][T14516] usb 7-1: USB disconnect, device number 13 [ 1613.980167][ T4911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.147546][ T4911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.192347][ T4911] bond0 (unregistering): Released all slaves [ 1615.119897][ T5891] libceph: connect (1)[c::]:6789 error -101 [ 1615.135253][ T5891] libceph: mon0 (1)[c::]:6789 connect error [ 1615.358548][T15395] ceph: No mds server is up or the cluster is laggy [ 1615.870216][ T4911] hsr_slave_0: left promiscuous mode [ 1615.879323][ T4911] hsr_slave_1: left promiscuous mode [ 1615.887855][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.895672][ T4911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.979174][ T4911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.986849][ T4911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1617.026607][ T4911] veth1_macvtap: left promiscuous mode [ 1617.032402][ T4911] veth0_macvtap: left promiscuous mode [ 1617.038449][ T4911] veth1_vlan: left promiscuous mode [ 1617.043996][ T4911] veth0_vlan: left promiscuous mode [ 1618.311675][ T4911] team0 (unregistering): Port device team_slave_1 removed [ 1618.483828][ T4911] team0 (unregistering): Port device team_slave_0 removed [ 1620.992222][T12178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1621.007479][T12178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1621.017318][T12178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1621.031240][T12178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1621.044749][T12178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1622.076752][ T5804] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1622.217334][ T5804] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1622.278620][ T5804] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1622.311741][ T5804] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1622.331762][ T5804] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1622.374998][T15298] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1622.536163][ T794] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1622.548907][T15298] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1622.863530][T15298] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1622.969874][T15298] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1623.116743][T12178] Bluetooth: hci6: command tx timeout [ 1623.171064][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1623.182902][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1623.193169][ T794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1623.206978][ T794] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1623.219357][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.402494][ T794] usb 3-1: config 0 descriptor?? [ 1623.996818][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 1624.003492][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1624.181134][ T794] usb 3-1: USB disconnect, device number 17 [ 1624.243425][T15416] chnl_net:caif_netlink_parms(): no params data found [ 1624.406255][T12178] Bluetooth: hci9: command tx timeout [ 1625.230255][T12178] Bluetooth: hci6: command tx timeout [ 1625.531283][T15424] chnl_net:caif_netlink_parms(): no params data found [ 1626.146365][T15298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.421952][T15298] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.475714][T12178] Bluetooth: hci9: command tx timeout [ 1626.576705][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.584116][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.730692][ T5891] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1626.937466][ T5891] usb 7-1: Using ep0 maxpacket: 32 [ 1626.975156][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.986720][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.997145][ T5891] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1627.009722][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.152784][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.160494][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.192055][T15416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.199585][T15416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.211853][T15416] bridge_slave_0: entered allmulticast mode [ 1627.223268][T15416] bridge_slave_0: entered promiscuous mode [ 1627.250558][ T5891] usb 7-1: config 0 descriptor?? [ 1627.280183][ T5891] hub 7-1:0.0: USB hub found [ 1627.297191][T12178] Bluetooth: hci6: command tx timeout [ 1627.436332][T15416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.444380][T15416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.453526][T15416] bridge_slave_1: entered allmulticast mode [ 1627.466540][T15416] bridge_slave_1: entered promiscuous mode [ 1627.637796][ T5891] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1627.698991][ T5891] usbhid 7-1:0.0: can't add hid device: -71 [ 1627.706552][ T5891] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1627.877611][ T5891] usb 7-1: USB disconnect, device number 14 [ 1628.097490][T14714] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.419903][T14714] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.566174][T12178] Bluetooth: hci9: command tx timeout [ 1628.679670][T15416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1628.734065][T14714] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.913014][T15416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.070365][T14714] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.171466][T15424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.179127][T15424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.187102][T15424] bridge_slave_0: entered allmulticast mode [ 1629.196126][T15424] bridge_slave_0: entered promiscuous mode [ 1629.355650][T12178] Bluetooth: hci6: command tx timeout [ 1629.596185][T15424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.603859][T15424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.612097][T15424] bridge_slave_1: entered allmulticast mode [ 1629.622111][T15424] bridge_slave_1: entered promiscuous mode [ 1629.654527][T15416] team0: Port device team_slave_0 added [ 1629.663682][T15460] fuse: Bad value for 'fd' [ 1629.886066][T15416] team0: Port device team_slave_1 added [ 1630.638240][T12178] Bluetooth: hci9: command tx timeout [ 1630.655170][T15416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.662803][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.692512][T15416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.706751][T14714] bridge_slave_1: left allmulticast mode [ 1630.712606][T14714] bridge_slave_1: left promiscuous mode [ 1630.719330][T14714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.815001][T14714] bridge_slave_0: left allmulticast mode [ 1630.823223][T14714] bridge_slave_0: left promiscuous mode [ 1630.830371][T14714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.521991][T14714] dvmrp8 (unregistering): left allmulticast mode [ 1631.546253][ T5891] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1631.720731][T14714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.734689][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.746343][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.756500][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1631.769876][ T5891] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1631.779313][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.826668][T14714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.853665][T14714] bond0 (unregistering): Released all slaves [ 1631.868749][ T5891] usb 7-1: config 0 descriptor?? [ 1631.983971][T15424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.016502][T15416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.027399][T15416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.054834][T15416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1632.164683][T15424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.363167][ T5891] usbhid 7-1:0.0: can't add hid device: -71 [ 1632.370057][ T5891] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1632.429612][ T5891] usb 7-1: USB disconnect, device number 15 [ 1632.753879][T15424] team0: Port device team_slave_0 added [ 1632.999073][T15424] team0: Port device team_slave_1 added [ 1633.334260][T15416] hsr_slave_0: entered promiscuous mode [ 1633.344974][T15416] hsr_slave_1: entered promiscuous mode [ 1633.357467][T15416] debugfs: 'hsr0' already exists in 'hsr' [ 1633.363405][T15416] Cannot create hsr debugfs directory [ 1633.657745][T15491] loop2: detected capacity change from 0 to 164 [ 1634.229426][T14714] hsr_slave_0: left promiscuous mode [ 1634.242958][T14714] hsr_slave_1: left promiscuous mode [ 1634.251390][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1634.261933][T14714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1635.211256][T14714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1635.219039][T14714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.247111][T14714] veth1_macvtap: left promiscuous mode [ 1635.252880][T14714] veth0_macvtap: left promiscuous mode [ 1635.259080][T14714] veth1_vlan: left promiscuous mode [ 1635.264647][T14714] veth0_vlan: left promiscuous mode [ 1636.988565][T15510] loop6: detected capacity change from 0 to 1024 [ 1637.095733][T14714] team0 (unregistering): Port device team_slave_1 removed [ 1637.164533][T14714] team0 (unregistering): Port device team_slave_0 removed [ 1637.473791][T15424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.483201][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.510895][T15424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.679267][T15298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.779155][T15509] hfsplus: can't free extent: start 134, count 1 [ 1638.024632][T15424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.032265][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1638.059554][T15424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.788210][ T8244] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.912577][T15518] loop2: detected capacity change from 0 to 2048 [ 1639.067777][T15518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1639.097220][ T8244] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.149484][T15424] hsr_slave_0: entered promiscuous mode [ 1639.160099][T15424] hsr_slave_1: entered promiscuous mode [ 1639.169345][T15424] debugfs: 'hsr0' already exists in 'hsr' [ 1639.175421][T15424] Cannot create hsr debugfs directory [ 1639.316387][ T8244] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.611150][T14114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.646639][ T8244] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.356427][ T8266] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1640.587464][ T8266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.599068][ T8266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.609363][ T8266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1640.625128][ T8266] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1640.635100][ T8266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.784078][ T8266] usb 3-1: config 0 descriptor?? [ 1641.288000][ T8266] usbhid 3-1:0.0: can't add hid device: -71 [ 1641.294752][ T8266] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1641.329343][ T8266] usb 3-1: USB disconnect, device number 18 [ 1641.769236][ T8244] bridge_slave_1: left allmulticast mode [ 1641.775126][ T8244] bridge_slave_1: left promiscuous mode [ 1641.783932][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.858979][ T8244] bridge_slave_0: left allmulticast mode [ 1641.864951][ T8244] bridge_slave_0: left promiscuous mode [ 1641.871731][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.449601][T15551] loop2: detected capacity change from 0 to 512 [ 1642.559165][ T8244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.630119][T15551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1642.644517][T15551] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1642.694404][ T8244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.781527][ T8244] bond0 (unregistering): Released all slaves [ 1642.806597][ T8244] bond1 (unregistering): Released all slaves [ 1643.024266][T15563] loop6: detected capacity change from 0 to 512 [ 1643.210500][T15563] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 1643.219938][T15563] EXT4-fs (loop6): failed to open journal device unknown-block(8,1) -16 [ 1643.254955][T14114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1643.936146][ T8244] hsr_slave_0: left promiscuous mode [ 1643.948745][ T8244] hsr_slave_1: left promiscuous mode [ 1643.957404][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.965068][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1644.048883][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1644.057269][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1644.176142][ T8244] veth1_macvtap: left promiscuous mode [ 1644.181921][ T8244] veth0_macvtap: left promiscuous mode [ 1644.188274][ T8244] veth1_vlan: left promiscuous mode [ 1644.193844][ T8244] veth0_vlan: left promiscuous mode [ 1644.240955][T15567] loop2: detected capacity change from 0 to 4096 [ 1644.642638][T15567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1645.965750][T15575] fs-verity (loop2, inode 16): Error -4 reading file data [ 1645.973275][T15575] fs-verity (loop2, inode 16): Error -4 building Merkle tree [ 1646.191606][ T8244] team0 (unregistering): Port device team_slave_1 removed [ 1646.322053][ T8244] team0 (unregistering): Port device team_slave_0 removed [ 1646.861000][ T8244] team0 (unregistering): Port device dummy0 removed [ 1647.062149][T15424] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.090055][ T9448] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1647.322977][T15416] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1647.348653][ T9448] usb 7-1: Using ep0 maxpacket: 8 [ 1647.374715][T15298] veth0_vlan: entered promiscuous mode [ 1647.461819][ T9448] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1647.470751][ T9448] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.481471][ T9448] usb 7-1: config 0 has no interface number 0 [ 1647.503927][T15416] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1647.546576][T15298] veth1_vlan: entered promiscuous mode [ 1647.633637][ T9448] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1647.643208][ T9448] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.651878][ T9448] usb 7-1: Product: syz [ 1647.656356][ T9448] usb 7-1: Manufacturer: syz [ 1647.661154][ T9448] usb 7-1: SerialNumber: syz [ 1647.715708][T15416] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1647.847223][T15416] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1647.911494][ T9448] usb 7-1: config 0 descriptor?? [ 1648.032133][T15424] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.074211][ T9448] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1648.082227][ T9448] uvcvideo 7-1:0.31: No valid video chain found. [ 1648.119654][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.126641][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1648.246494][T14114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1648.296321][T15424] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.374011][T15298] veth0_macvtap: entered promiscuous mode [ 1648.429734][T15424] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.530847][T15298] veth1_macvtap: entered promiscuous mode [ 1648.757612][ T8244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.916152][ T8244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.112727][T15298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.162301][ T8244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.190103][ T794] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1649.398201][ T8244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.419243][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.433523][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1649.444811][ T794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1649.459479][T15298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1649.469103][ T794] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1649.479218][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.504988][ T794] usb 3-1: config 0 descriptor?? [ 1649.603776][ T3876] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.655129][T15424] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1649.728757][ T3876] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.975896][ T3876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.010117][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 1650.017338][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1650.070295][ T9448] usb 7-1: USB disconnect, device number 16 [ 1650.122834][T15424] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1650.152240][ T794] usb 3-1: USB disconnect, device number 19 [ 1650.162302][ T3876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.282018][T15424] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1650.320574][ T8244] bridge_slave_1: left allmulticast mode [ 1650.326841][ T8244] bridge_slave_1: left promiscuous mode [ 1650.333363][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.361314][ T8244] bridge_slave_0: left allmulticast mode [ 1650.368613][ T8244] bridge_slave_0: left promiscuous mode [ 1650.375384][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.195612][ T8244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1651.226332][ T8244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1651.255857][ T8244] bond0 (unregistering): Released all slaves [ 1651.302879][T15424] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1651.771484][T15416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.010441][T15609] loop2: detected capacity change from 0 to 512 [ 1652.108311][T15609] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 1652.168368][ T8244] hsr_slave_0: left promiscuous mode [ 1652.196101][ T8244] hsr_slave_1: left promiscuous mode [ 1652.204146][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1652.212071][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1652.258549][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1652.267590][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1652.358168][ T8244] veth1_macvtap: left promiscuous mode [ 1652.363938][ T8244] veth0_macvtap: left promiscuous mode [ 1652.370519][ T8244] veth1_vlan: left promiscuous mode [ 1652.376487][ T8244] veth0_vlan: left promiscuous mode [ 1652.894654][ T5891] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1653.071872][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.084156][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.112661][ T5891] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1653.122228][ T5891] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1653.130682][ T5891] usb 7-1: Manufacturer: syz [ 1653.201239][ T5891] usb 7-1: config 0 descriptor?? [ 1653.261756][ T8244] team0 (unregistering): Port device team_slave_1 removed [ 1653.329140][ T8244] team0 (unregistering): Port device team_slave_0 removed [ 1653.867775][T15416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1653.942009][T15106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.949672][T15106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.026986][T15106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.034648][T15106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.342689][ T5891] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71 [ 1654.352014][ T5891] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 1654.360591][ T5891] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71 [ 1654.375145][ T5891] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 1654.384606][ T5891] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71 [ 1654.647935][ T5891] usb 7-1: USB disconnect, device number 17 [ 1654.873150][T15424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.934977][ T8244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.191250][ T8244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.448205][ T8244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.627104][ T8244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.709117][T15424] 8021q: adding VLAN 0 to HW filter on device team0 [ 1655.768959][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.776645][ T8242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.827692][ T5891] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1655.908291][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.915963][ T8242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.081263][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.092703][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.102949][ T5891] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1656.116328][ T5891] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1656.125711][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.301650][T15639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2292'. [ 1656.311037][T15639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2292'. [ 1656.444562][ T5891] usb 7-1: config 0 descriptor?? [ 1656.629139][ T8244] bridge_slave_1: left allmulticast mode [ 1656.635504][ T8244] bridge_slave_1: left promiscuous mode [ 1656.642795][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.743733][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1656.763365][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1656.774892][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1656.799223][ T8244] bridge_slave_0: left allmulticast mode [ 1656.806884][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.821836][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1656.857730][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1656.930250][ T8244] bridge_slave_1: left allmulticast mode [ 1656.936872][ T8244] bridge_slave_1: left promiscuous mode [ 1656.943461][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.950005][ T5891] usbhid 7-1:0.0: can't add hid device: -71 [ 1656.957377][ T5891] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1656.997686][ T5891] usb 7-1: USB disconnect, device number 18 [ 1657.076228][ T8244] bridge_slave_0: left allmulticast mode [ 1657.082120][ T8244] bridge_slave_0: left promiscuous mode [ 1657.089082][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.977736][ T8244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.046200][ T8244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.072206][ T8244] bond0 (unregistering): Released all slaves [ 1658.100657][ T8244] bond1 (unregistering): Released all slaves [ 1658.124798][ T8244] bond2 (unregistering): Released all slaves [ 1658.526056][ T8244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.577906][ T8244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.621768][ T8244] bond0 (unregistering): Released all slaves [ 1658.983560][T15424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1659.004336][T12178] Bluetooth: hci1: command tx timeout [ 1659.184273][T15416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1659.294050][ T8244] tipc: Left network mode [ 1660.512478][ T8244] hsr_slave_0: left promiscuous mode [ 1660.525766][ T8244] hsr_slave_1: left promiscuous mode [ 1660.533831][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.541864][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.633133][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.641139][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.650347][T14516] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1660.729252][ T8244] hsr_slave_0: left promiscuous mode [ 1660.748137][ T8244] hsr_slave_1: left promiscuous mode [ 1660.756654][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.764258][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.822354][T14516] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1660.831060][T14516] usb 7-1: config 0 has no interface number 0 [ 1660.850866][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.858719][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.890290][T14516] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1660.900378][T14516] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1660.908922][T14516] usb 7-1: Product: syz [ 1660.913387][T14516] usb 7-1: Manufacturer: syz [ 1660.918377][T14516] usb 7-1: SerialNumber: syz [ 1661.000163][ T8244] veth1_macvtap: left promiscuous mode [ 1661.006363][ T8244] veth0_macvtap: left promiscuous mode [ 1661.012339][ T8244] veth1_vlan: left promiscuous mode [ 1661.018141][ T8244] veth0_vlan: left promiscuous mode [ 1661.029797][T14516] usb 7-1: config 0 descriptor?? [ 1661.045875][T12178] Bluetooth: hci1: command tx timeout [ 1661.077273][ T8244] veth1_macvtap: left promiscuous mode [ 1661.083050][ T8244] veth0_macvtap: left promiscuous mode [ 1661.089333][ T8244] veth1_vlan: left promiscuous mode [ 1661.094925][ T8244] veth0_vlan: left promiscuous mode [ 1661.555766][ T5891] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1661.742876][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.754406][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.764680][ T5891] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1661.778122][ T5891] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1661.787870][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.819685][ T5891] usb 3-1: config 0 descriptor?? [ 1661.843452][T14516] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1661.898237][T14516] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1661.909887][T14516] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1661.918407][T14516] usb 7-1: media controller created [ 1661.982453][T14516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1662.101805][T14516] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1662.364485][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 1662.371358][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1662.465815][ T5891] usb 3-1: USB disconnect, device number 20 [ 1662.698064][T14516] usb 7-1: USB disconnect, device number 19 [ 1662.805847][ T8244] team0 (unregistering): Port device team_slave_1 removed [ 1662.863907][ T8244] team0 (unregistering): Port device team_slave_0 removed [ 1663.118412][T12178] Bluetooth: hci1: command tx timeout [ 1663.728490][ T8244] team0 (unregistering): Port device team_slave_1 removed [ 1663.812904][ T8244] team0 (unregistering): Port device team_slave_0 removed [ 1664.669422][T15424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.037153][T15640] chnl_net:caif_netlink_parms(): no params data found [ 1665.221551][ T5804] Bluetooth: hci1: command tx timeout [ 1665.461991][ T8244] IPVS: stop unused estimator thread 0... [ 1665.516658][ T5804] Bluetooth: hci7: command 0x0406 tx timeout [ 1665.666352][T15416] veth0_vlan: entered promiscuous mode [ 1665.803566][T15416] veth1_vlan: entered promiscuous mode [ 1665.852297][ T5863] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1665.878964][ T8244] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.068739][ T5863] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1666.077404][ T5863] usb 7-1: config 0 has no interface number 0 [ 1666.101618][ T8244] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.147450][ T5863] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1666.157108][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1666.165661][ T5863] usb 7-1: Product: syz [ 1666.170026][ T5863] usb 7-1: Manufacturer: syz [ 1666.174839][ T5863] usb 7-1: SerialNumber: syz [ 1666.310903][ T5863] usb 7-1: config 0 descriptor?? [ 1666.327403][ T8244] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.571754][ T5863] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1666.593618][ T8244] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.623256][ T5863] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1666.634882][ T5863] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1666.647115][ T5863] usb 7-1: media controller created [ 1666.664406][ T794] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1666.696941][T15416] veth0_macvtap: entered promiscuous mode [ 1666.736260][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1666.784680][T15416] veth1_macvtap: entered promiscuous mode [ 1666.980937][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.992316][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.002865][ T794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1667.016627][ T794] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1667.026115][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.068489][ T794] usb 3-1: config 0 descriptor?? [ 1667.261033][T15640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.269526][T15640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.278675][T15640] bridge_slave_0: entered allmulticast mode [ 1667.288676][T15640] bridge_slave_0: entered promiscuous mode [ 1667.340961][T15416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1667.388081][T15640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.396432][T15640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.404887][T15640] bridge_slave_1: entered allmulticast mode [ 1667.418639][T15640] bridge_slave_1: entered promiscuous mode [ 1667.632545][ T794] usbhid 3-1:0.0: can't add hid device: -71 [ 1667.639836][ T794] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1667.707468][ T794] usb 3-1: USB disconnect, device number 21 [ 1667.737454][T15416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1667.864206][ T8244] bridge_slave_1: left allmulticast mode [ 1667.870574][ T8244] bridge_slave_1: left promiscuous mode [ 1667.877532][ T8244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.893219][ T5863] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1667.994507][ T8244] bridge_slave_0: left allmulticast mode [ 1668.000831][ T8244] bridge_slave_0: left promiscuous mode [ 1668.007761][ T8244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.291470][ T5863] usb 7-1: USB disconnect, device number 20 [ 1668.632169][ T8244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.681668][ T8244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.697638][ T8244] bond0 (unregistering): Released all slaves [ 1668.755403][T15640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.794550][ T3602] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1668.910615][T15640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.947382][ T3602] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.031984][ T3602] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.261334][ T3602] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1669.285914][ T8244] hsr_slave_0: left promiscuous mode [ 1669.320379][ T8244] hsr_slave_1: left promiscuous mode [ 1669.328630][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.336569][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.453527][ T8244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.462646][ T8244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.558467][ T8244] veth1_macvtap: left promiscuous mode [ 1669.564244][ T8244] veth0_macvtap: left promiscuous mode [ 1669.571938][ T8244] veth1_vlan: left promiscuous mode [ 1669.577608][ T8244] veth0_vlan: left promiscuous mode [ 1670.484820][ T8244] team0 (unregistering): Port device team_slave_1 removed [ 1670.532677][ T8244] team0 (unregistering): Port device team_slave_0 removed [ 1670.968277][T15640] team0: Port device team_slave_0 added [ 1670.988382][T15640] team0: Port device team_slave_1 added [ 1671.317572][T15640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.324738][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.351381][T15640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.422982][T15424] veth0_vlan: entered promiscuous mode [ 1671.580418][T15640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.587901][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.615125][T15640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.669121][T15424] veth1_vlan: entered promiscuous mode [ 1672.219354][T15424] veth0_macvtap: entered promiscuous mode [ 1672.241355][ T5891] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1672.277243][T15640] hsr_slave_0: entered promiscuous mode [ 1672.287861][T15640] hsr_slave_1: entered promiscuous mode [ 1672.347137][T15424] veth1_macvtap: entered promiscuous mode [ 1672.552912][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1672.564388][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1672.633119][T15424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1672.665488][ T5891] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1672.674922][ T5891] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1672.683322][ T5891] usb 3-1: Manufacturer: syz [ 1672.778475][ T5891] usb 3-1: config 0 descriptor?? [ 1672.914318][T15424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.117313][ T8244] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.159339][ T8244] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.207075][T15106] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.269457][T15106] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.937559][ T5891] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #100: -71 [ 1673.948702][ T5891] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71 [ 1673.958830][ T5891] uclogic 0003:256C:006D.0027: failed probing pen v1 parameters: -71 [ 1673.969340][ T5891] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 1673.979220][ T5891] uclogic 0003:256C:006D.0027: probe with driver uclogic failed with error -71 [ 1674.125391][ T5891] usb 3-1: USB disconnect, device number 22 [ 1674.413747][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1674.413833][ T30] audit: type=1800 audit(1768727666.875:1080): pid=15799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2319" name="file1" dev="fuse" ino=5 res=0 errno=0 [ 1674.660536][T15640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1674.767408][T15640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1674.846804][T15640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1674.975158][T15640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1675.235948][T14516] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1675.496092][T14516] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1675.504400][T14516] usb 7-1: config 0 has no interface number 0 [ 1675.572889][T14516] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1675.585890][T14516] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1675.594138][T14516] usb 7-1: Product: syz [ 1675.599059][T14516] usb 7-1: Manufacturer: syz [ 1675.603873][T14516] usb 7-1: SerialNumber: syz [ 1675.650501][T15820] overlayfs: failed to resolve './file0': -2 [ 1675.723401][T14516] usb 7-1: config 0 descriptor?? [ 1676.019678][T14516] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1676.048173][T14516] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1676.060024][T14516] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1676.068512][T14516] usb 7-1: media controller created [ 1676.099874][T15640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.214230][T14516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1676.324692][T15640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.404524][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.412312][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.589646][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.597344][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.794473][T15640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1676.805562][T15640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1677.308709][T14516] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1677.751597][T14516] usb 7-1: USB disconnect, device number 21 [ 1678.839419][T15853] pim6reg1: entered promiscuous mode [ 1678.844957][T15853] pim6reg1: entered allmulticast mode [ 1679.194031][T15859] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2327'. [ 1679.234915][T15640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.747472][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1679.811611][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1679.821359][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1679.927041][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1679.956350][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1680.195651][T14516] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1680.517714][T14516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.529192][T14516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.612011][T14516] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1680.621548][T14516] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1680.630058][T14516] usb 3-1: Manufacturer: syz [ 1680.754066][T15877] overlayfs: failed to resolve './file1': -2 [ 1680.818723][T14516] usb 3-1: config 0 descriptor?? [ 1681.517097][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1681.526642][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1681.625391][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1681.640368][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1681.656877][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1681.946317][T14516] uclogic 0003:256C:006D.0028: interface is invalid, ignoring [ 1682.075615][ T5804] Bluetooth: hci2: command tx timeout [ 1682.274099][ T8266] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1682.481415][T15866] chnl_net:caif_netlink_parms(): no params data found [ 1682.523525][ T8266] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1682.532568][ T8266] usb 7-1: config 0 has no interface number 0 [ 1682.632708][ T8266] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1682.642261][ T8266] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1682.651002][ T8266] usb 7-1: Product: syz [ 1682.655490][ T8266] usb 7-1: Manufacturer: syz [ 1682.660332][ T8266] usb 7-1: SerialNumber: syz [ 1682.686697][ T8266] usb 7-1: config 0 descriptor?? [ 1682.779886][ T3602] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.937631][ T8266] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1682.979821][ T8266] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1682.991536][ T8266] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1683.001064][ T8266] usb 7-1: media controller created [ 1683.008011][ T3602] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.162935][ T8266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1683.213478][ T3602] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.247754][T14516] usb 3-1: USB disconnect, device number 23 [ 1683.601977][ T3602] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.779439][ T5804] Bluetooth: hci3: command tx timeout [ 1684.009270][T15640] veth0_vlan: entered promiscuous mode [ 1684.184377][ T5804] Bluetooth: hci2: command tx timeout [ 1684.265951][ T8266] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1684.539485][ T3602] bridge_slave_1: left allmulticast mode [ 1684.545550][ T3602] bridge_slave_1: left promiscuous mode [ 1684.552180][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.663965][ T3602] bridge_slave_0: left allmulticast mode [ 1684.672650][ T3602] bridge_slave_0: left promiscuous mode [ 1684.679530][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.837257][ T8266] usb 7-1: USB disconnect, device number 22 [ 1685.750685][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1685.793279][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1685.823907][ T3602] bond0 (unregistering): Released all slaves [ 1685.843254][ T5804] Bluetooth: hci3: command tx timeout [ 1686.091137][T15884] chnl_net:caif_netlink_parms(): no params data found [ 1686.114416][T15866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.122168][T15866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.131066][T15866] bridge_slave_0: entered allmulticast mode [ 1686.141119][T15866] bridge_slave_0: entered promiscuous mode [ 1686.198988][T15640] veth1_vlan: entered promiscuous mode [ 1686.245896][ T5804] Bluetooth: hci2: command tx timeout [ 1686.321558][T15866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.329452][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.338958][T15866] bridge_slave_1: entered allmulticast mode [ 1686.348867][T15866] bridge_slave_1: entered promiscuous mode [ 1686.428059][ T3602] hsr_slave_0: left promiscuous mode [ 1686.468877][ T3602] hsr_slave_1: left promiscuous mode [ 1686.481180][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1686.488870][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1686.561962][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1686.569732][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1686.612198][ T3602] veth1_macvtap: left promiscuous mode [ 1686.618132][ T3602] veth0_macvtap: left promiscuous mode [ 1686.624076][ T3602] veth1_vlan: left promiscuous mode [ 1686.629808][ T3602] veth0_vlan: left promiscuous mode [ 1687.463000][ T3602] team0 (unregistering): Port device team_slave_1 removed [ 1687.491146][ T3602] team0 (unregistering): Port device team_slave_0 removed [ 1687.916733][ T5804] Bluetooth: hci3: command tx timeout [ 1688.316511][ T5804] Bluetooth: hci2: command tx timeout [ 1688.640348][T15866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.744120][T15640] veth0_macvtap: entered promiscuous mode [ 1688.781726][T15866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.983219][T15640] veth1_macvtap: entered promiscuous mode [ 1689.122473][ T3602] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.179251][T15866] team0: Port device team_slave_0 added [ 1689.247917][ T3602] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.340234][T15866] team0: Port device team_slave_1 added [ 1689.714659][ T3602] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.777684][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2340'. [ 1689.809036][T15866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1689.816715][T15866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.843115][T15866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1689.861492][T15640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.878358][T15884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.886120][T15884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.893850][T15884] bridge_slave_0: entered allmulticast mode [ 1689.903670][T15884] bridge_slave_0: entered promiscuous mode [ 1689.971122][ T3602] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.001100][ T5804] Bluetooth: hci3: command tx timeout [ 1690.032246][T15884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.039904][T15884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.047959][T15884] bridge_slave_1: entered allmulticast mode [ 1690.057948][T15884] bridge_slave_1: entered promiscuous mode [ 1690.112366][T15866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1690.119623][T15866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1690.146323][T15866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1690.176637][T15640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1690.494982][T15884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.516045][ T8235] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.525185][ T8235] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.537097][ T3876] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.585852][ T5863] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1690.719105][T15884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.730954][ T3876] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.797017][ T5863] usb 7-1: Using ep0 maxpacket: 16 [ 1690.878829][ T5863] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1690.888511][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.897174][ T5863] usb 7-1: Product: syz [ 1690.901573][ T5863] usb 7-1: Manufacturer: syz [ 1690.906532][ T5863] usb 7-1: SerialNumber: syz [ 1690.936973][ T5863] usb 7-1: config 0 descriptor?? [ 1691.201031][ T3602] bridge_slave_1: left allmulticast mode [ 1691.207208][ T3602] bridge_slave_1: left promiscuous mode [ 1691.214387][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.234366][ T3602] bridge_slave_0: left allmulticast mode [ 1691.243526][ T3602] bridge_slave_0: left promiscuous mode [ 1691.250363][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.496664][ T5863] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1691.533389][ T5863] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1691.570525][ T5863] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1691.579143][ T5863] usb 7-1: media controller created [ 1691.691083][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1691.906450][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.936793][ T5863] zl10353_read_register: readreg error (reg=127, ret==0) [ 1691.944196][ T5863] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1691.953226][ T5863] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1692.007208][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1692.032854][ T3602] bond0 (unregistering): Released all slaves [ 1692.080553][ T5863] usb 7-1: USB disconnect, device number 23 [ 1692.110622][T15884] team0: Port device team_slave_0 added [ 1692.137733][T15866] hsr_slave_0: entered promiscuous mode [ 1692.148214][T15866] hsr_slave_1: entered promiscuous mode [ 1692.157228][T15866] debugfs: 'hsr0' already exists in 'hsr' [ 1692.163157][T15866] Cannot create hsr debugfs directory [ 1692.191425][T15884] team0: Port device team_slave_1 added [ 1692.519471][ T5863] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1692.795453][ T3602] hsr_slave_0: left promiscuous mode [ 1692.804039][ T3602] hsr_slave_1: left promiscuous mode [ 1692.812293][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1692.820334][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1692.919351][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1692.928367][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.091055][ T3602] veth1_macvtap: left promiscuous mode [ 1693.097156][ T3602] veth0_macvtap: left promiscuous mode [ 1693.103114][ T3602] veth1_vlan: left promiscuous mode [ 1693.111939][ T3602] veth0_vlan: left promiscuous mode [ 1694.033439][ T3602] team0 (unregistering): Port device team_slave_1 removed [ 1694.059723][ T3602] team0 (unregistering): Port device team_slave_0 removed [ 1694.470197][T15884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.477591][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.504030][T15884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.763107][T15884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.770617][T15884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.800915][T15884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.717278][T15884] hsr_slave_0: entered promiscuous mode [ 1695.727674][T15884] hsr_slave_1: entered promiscuous mode [ 1695.736616][T15884] debugfs: 'hsr0' already exists in 'hsr' [ 1695.742622][T15884] Cannot create hsr debugfs directory [ 1696.940775][T15866] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1697.173940][T15866] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1697.303109][T15866] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1697.350371][T15866] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1697.945837][T16019] loop6: detected capacity change from 0 to 2048 [ 1698.064052][T16019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1698.609905][T15884] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1698.717750][T15884] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1698.787068][T15884] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1698.869810][T15884] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1699.254289][T15866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.464128][T15866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.604452][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.612285][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.773510][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.781216][ T8250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.679893][T15884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.366958][ T8250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.375109][ T8250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.434535][T15884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.545020][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.552636][ T8250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.625981][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.634114][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.662919][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.670535][ T8250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.527457][T15866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.600992][T15884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.437878][T15866] veth0_vlan: entered promiscuous mode [ 1706.579785][T15866] veth1_vlan: entered promiscuous mode [ 1706.939519][T15866] veth0_macvtap: entered promiscuous mode [ 1707.051892][T15866] veth1_macvtap: entered promiscuous mode [ 1707.274559][T15866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1707.389303][T15866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1707.499337][ T8250] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.564325][ T8250] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.629725][ T8250] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.705126][ T8250] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.008239][T15884] veth0_vlan: entered promiscuous mode [ 1708.198039][T15884] veth1_vlan: entered promiscuous mode [ 1708.485747][T14516] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1708.539869][T15884] veth0_macvtap: entered promiscuous mode [ 1708.614462][T15884] veth1_macvtap: entered promiscuous mode [ 1708.738228][T14516] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1708.747153][T14516] usb 3-1: config 0 has no interface number 0 [ 1708.768498][T15884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1708.841617][T14516] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1708.851144][T14516] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1708.859881][T14516] usb 3-1: Product: syz [ 1708.864257][T14516] usb 3-1: Manufacturer: syz [ 1708.869273][T14516] usb 3-1: SerialNumber: syz [ 1708.931464][T15884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1708.951199][T14516] usb 3-1: config 0 descriptor?? [ 1709.066496][ T8244] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.090730][ T8244] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.112939][T14961] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.170642][T14961] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1709.254050][T14516] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1709.322536][T14516] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1709.334994][T14516] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1709.343932][T14516] usb 3-1: media controller created [ 1709.559248][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1709.566321][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1709.571511][T14516] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1710.595954][T14516] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1711.173682][T14516] usb 3-1: USB disconnect, device number 24 [ 1711.500889][ T30] audit: type=1800 audit(1768727703.965:1081): pid=16157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2385" name="file1" dev="fuse" ino=5 res=0 errno=0 [ 1714.008315][ T9448] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1714.224761][ T9448] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1714.233213][ T9448] usb 7-1: config 0 has no interface number 0 [ 1714.321518][ T9448] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1714.331525][ T9448] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1714.339906][ T9448] usb 7-1: Product: syz [ 1714.344296][ T9448] usb 7-1: Manufacturer: syz [ 1714.349191][ T9448] usb 7-1: SerialNumber: syz [ 1714.468628][ T9448] usb 7-1: config 0 descriptor?? [ 1714.744104][ T9448] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1714.800477][ T9448] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1714.812177][ T9448] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1714.825412][ T9448] usb 7-1: media controller created [ 1714.966394][ T9448] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1716.096930][ T4829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.105203][ T4829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.114796][ T9448] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1716.462587][T15106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.471475][T15106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1716.841255][ T9448] usb 7-1: USB disconnect, device number 24 [ 1717.303599][ T8244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.313795][ T8244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.515604][ T9448] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1717.714281][ T8235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.722544][ T8235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.727974][ T9448] usb 10-1: Using ep0 maxpacket: 16 [ 1717.818075][ T9448] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.828934][ T9448] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1717.843094][ T9448] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1717.854713][ T9448] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1717.864815][ T9448] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1717.976080][ T9448] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1717.986085][ T9448] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1717.994418][ T9448] usb 10-1: Manufacturer: syz [ 1718.188282][ T9448] usb 10-1: config 0 descriptor?? [ 1718.835717][ T9448] rc_core: IR keymap rc-hauppauge not found [ 1718.841997][ T9448] Registered IR keymap rc-empty [ 1718.847758][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1718.923886][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1718.968610][ T9448] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1718.983968][T14516] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 1718.987340][ T9448] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input55 [ 1719.192295][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.220103][T14516] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1719.228354][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1719.239651][T14516] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1719.251791][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1719.263626][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1719.339196][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.406952][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.426532][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.487173][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.546174][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.567817][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.626602][T14516] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1719.634377][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1719.646616][T14516] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1719.658792][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1719.660760][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.670328][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1719.755168][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.810776][ T9448] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1719.845776][T14516] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1719.852122][ T9448] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1719.853691][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1719.862719][ T9448] mceusb 10-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1719.873927][T14516] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1719.897219][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1719.909033][T14516] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1720.145018][ T9448] usb 10-1: USB disconnect, device number 64 [ 1720.248238][T14516] usb 8-1: string descriptor 0 read error: -22 [ 1720.255562][T14516] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1720.264885][T14516] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1720.278699][ T8266] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1720.355854][T11174] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1720.489527][T14516] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1720.582928][T11174] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1720.591504][T11174] usb 6-1: config 0 has no interface number 0 [ 1720.609982][ T8266] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1720.619588][ T8266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.695501][ T8266] usb 7-1: config 0 descriptor?? [ 1720.717265][ T8266] cp210x 7-1:0.0: cp210x converter detected [ 1720.754867][T14516] usb 8-1: USB disconnect, device number 18 [ 1720.778006][T11174] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1720.787830][T11174] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1720.797365][T11174] usb 6-1: Product: syz [ 1720.805094][T11174] usb 6-1: Manufacturer: syz [ 1720.812159][T11174] usb 6-1: SerialNumber: syz [ 1720.978731][ T8266] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1720.986971][ T8266] cp210x 7-1:0.0: querying part number failed [ 1721.099474][T11174] usb 6-1: config 0 descriptor?? [ 1721.127845][ T8266] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1721.386619][T11174] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1721.434477][T11174] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1721.449133][T11174] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1721.458385][T11174] usb 6-1: media controller created [ 1721.641100][T11174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1722.661605][T11174] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1723.287492][T11174] usb 6-1: USB disconnect, device number 15 [ 1723.344279][ T8266] usb 7-1: USB disconnect, device number 25 [ 1723.469249][ T8266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1723.481760][ T8266] cp210x 7-1:0.0: device disconnected [ 1726.466024][ T8266] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1726.518685][ T9448] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1726.691587][ T8266] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1726.700146][ T8266] usb 8-1: config 0 has no interface number 0 [ 1726.794419][ T9448] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1726.804959][ T9448] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.816338][T11174] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1726.831776][ T8266] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1726.841679][ T8266] usb 8-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1726.852840][ T8266] usb 8-1: Product: syz [ 1726.858151][ T8266] usb 8-1: Manufacturer: syz [ 1726.863054][ T8266] usb 8-1: SerialNumber: syz [ 1726.894669][ T9448] usb 6-1: config 0 descriptor?? [ 1726.916424][ T9448] cp210x 6-1:0.0: cp210x converter detected [ 1726.971704][ T8266] usb 8-1: config 0 descriptor?? [ 1727.026547][T11174] usb 3-1: Using ep0 maxpacket: 16 [ 1727.063746][T11174] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 1727.136960][T11174] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1727.146500][T11174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.157417][T11174] usb 3-1: Product: syz [ 1727.161804][T11174] usb 3-1: Manufacturer: syz [ 1727.167664][T11174] usb 3-1: SerialNumber: syz [ 1727.225198][ T9448] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1727.233542][ T9448] cp210x 6-1:0.0: querying part number failed [ 1727.329331][ T8266] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1727.341796][ T9448] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1727.411977][ T8266] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1727.424017][ T8266] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1727.432673][ T8266] usb 8-1: media controller created [ 1727.685834][ T8266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1728.393815][T16357] bridge0: entered promiscuous mode [ 1728.399825][T16357] bridge0: entered allmulticast mode [ 1728.602136][ T9448] usb 3-1: USB disconnect, device number 25 [ 1728.641301][ T8266] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1729.090188][ T8266] usb 8-1: USB disconnect, device number 19 [ 1729.248362][T16366] pim6reg1: entered promiscuous mode [ 1729.254119][T16366] pim6reg1: entered allmulticast mode [ 1729.639816][ T8266] usb 6-1: USB disconnect, device number 16 [ 1729.717116][ T8266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1729.727898][ T8266] cp210x 6-1:0.0: device disconnected [ 1731.877014][ T8266] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1731.955705][T14516] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1731.976465][T11174] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1732.086916][ T8266] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1732.096943][ T8266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.151827][ T8266] usb 7-1: config 0 descriptor?? [ 1732.157241][T14516] usb 3-1: Using ep0 maxpacket: 16 [ 1732.188839][T14516] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 1732.226438][T11174] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1732.234920][T11174] usb 8-1: config 0 has no interface number 0 [ 1732.269026][ T8266] cp210x 7-1:0.0: cp210x converter detected [ 1732.290475][T14516] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1732.300466][T14516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.309039][T14516] usb 3-1: Product: syz [ 1732.313437][T14516] usb 3-1: Manufacturer: syz [ 1732.318409][T14516] usb 3-1: SerialNumber: syz [ 1732.395189][T11174] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1732.404856][T11174] usb 8-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1732.413310][T11174] usb 8-1: Product: syz [ 1732.417810][T11174] usb 8-1: Manufacturer: syz [ 1732.422612][T11174] usb 8-1: SerialNumber: syz [ 1732.520523][ T8266] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1732.528679][ T8266] cp210x 7-1:0.0: querying part number failed [ 1732.599208][ T8266] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1732.676602][T11174] usb 8-1: config 0 descriptor?? [ 1733.019508][T11174] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1733.121324][T14516] usb 3-1: USB disconnect, device number 26 [ 1733.137617][T11174] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1733.149457][T11174] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1733.158016][T11174] usb 8-1: media controller created [ 1733.400987][T11174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1734.384995][T11174] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1734.779390][ T5863] usb 7-1: USB disconnect, device number 26 [ 1734.796967][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1734.808332][ T5863] cp210x 7-1:0.0: device disconnected [ 1734.829462][T11174] usb 8-1: USB disconnect, device number 20 [ 1737.026675][T16468] overlayfs: missing 'lowerdir' [ 1738.097179][ T5863] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1738.333164][ T5863] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1738.344028][ T5863] usb 10-1: config 0 has no interface number 0 [ 1738.401306][ T5863] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1738.411874][ T5863] usb 10-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1738.423048][ T5863] usb 10-1: Product: syz [ 1738.428540][ T5863] usb 10-1: Manufacturer: syz [ 1738.433449][ T5863] usb 10-1: SerialNumber: syz [ 1738.484830][ T5863] usb 10-1: config 0 descriptor?? [ 1738.774623][ T5863] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1738.861604][ T5863] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1738.873266][ T5863] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1738.886853][ T5863] usb 10-1: media controller created [ 1739.065770][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1740.116698][ T5863] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1740.896983][ T5863] usb 10-1: USB disconnect, device number 65 [ 1741.903760][T16527] overlayfs: missing 'lowerdir' [ 1744.157186][ T5863] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1744.381486][ T5863] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1744.390138][ T5863] usb 6-1: config 0 has no interface number 0 [ 1744.465990][ T5863] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1744.475797][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1744.484026][ T5863] usb 6-1: Product: syz [ 1744.488663][ T5863] usb 6-1: Manufacturer: syz [ 1744.493497][ T5863] usb 6-1: SerialNumber: syz [ 1744.688435][ T5863] usb 6-1: config 0 descriptor?? [ 1745.207925][ T5863] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1745.251906][ T5863] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1745.263428][ T5863] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1745.272009][ T5863] usb 6-1: media controller created [ 1745.431417][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1745.593044][T16569] fuse: Bad value for 'fd' [ 1746.510593][ T5863] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1746.947984][T11174] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1747.083127][ T5863] usb 6-1: USB disconnect, device number 17 [ 1747.107594][T16588] fuse: Bad value for 'fd' [ 1747.113695][T11174] usb 3-1: device descriptor read/64, error -71 [ 1747.386036][T11174] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1747.557053][T11174] usb 3-1: device descriptor read/64, error -71 [ 1747.677360][T11174] usb usb3-port1: attempt power cycle [ 1748.023195][T16594] loop5: detected capacity change from 0 to 4096 [ 1748.046684][T11174] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1748.096450][T11174] usb 3-1: device descriptor read/8, error -71 [ 1748.208895][T16594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1748.355805][T11174] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1748.430080][T11174] usb 3-1: device descriptor read/8, error -71 [ 1748.568353][T11174] usb usb3-port1: unable to enumerate USB device [ 1749.830501][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1750.391504][T16630] fuse: Bad value for 'fd' [ 1750.589864][ T8266] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1750.836545][ T8266] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1750.845046][ T8266] usb 3-1: config 0 has no interface number 0 [ 1750.919982][ T8266] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1750.929753][ T8266] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1750.938245][ T8266] usb 3-1: Product: syz [ 1750.942711][ T8266] usb 3-1: Manufacturer: syz [ 1750.948163][ T8266] usb 3-1: SerialNumber: syz [ 1751.088330][ T8266] usb 3-1: config 0 descriptor?? [ 1751.388448][ T8266] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1751.423913][ T8266] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1751.436754][ T8266] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1751.450649][ T8266] usb 3-1: media controller created [ 1751.613356][ T8266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1752.700884][T16653] loop5: detected capacity change from 0 to 4096 [ 1752.736858][ T8266] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1752.862215][T16653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1753.826894][ T8266] usb 3-1: USB disconnect, device number 31 [ 1754.421763][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1756.965948][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2543'. [ 1757.532051][ T8266] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1757.750910][ T8266] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1757.759576][ T8266] usb 3-1: config 0 has no interface number 0 [ 1757.856121][ T8266] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1757.865717][ T8266] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1757.876694][ T8266] usb 3-1: Product: syz [ 1757.881090][ T8266] usb 3-1: Manufacturer: syz [ 1757.887046][ T8266] usb 3-1: SerialNumber: syz [ 1757.950253][T16711] loop5: detected capacity change from 0 to 4096 [ 1757.977296][ T8266] usb 3-1: config 0 descriptor?? [ 1758.209772][T16711] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1758.277092][ T8266] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1758.373187][ T8266] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1758.388391][ T8266] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1758.397905][ T8266] usb 3-1: media controller created [ 1759.281803][ T8266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1759.935856][ T8266] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1760.030334][T15640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.509242][ T8266] usb 3-1: USB disconnect, device number 32 [ 1760.773588][T16739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2557'. [ 1762.946059][T16764] tap0: tun_chr_ioctl cmd 1074025677 [ 1762.952010][T16764] tap0: linktype set to 774 [ 1763.172934][T16758] loop2: detected capacity change from 0 to 4096 [ 1763.287849][T16758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1764.189496][ T8266] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1764.405633][ T8266] usb 6-1: Using ep0 maxpacket: 16 [ 1764.466045][ T8266] usb 6-1: no configurations [ 1764.471001][ T8266] usb 6-1: can't read configurations, error -22 [ 1764.738352][ T8266] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1764.888217][T14114] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1764.946745][ T8266] usb 6-1: Using ep0 maxpacket: 16 [ 1764.995500][ T8266] usb 6-1: no configurations [ 1765.000612][ T8266] usb 6-1: can't read configurations, error -22 [ 1765.054317][ T8266] usb usb6-port1: attempt power cycle [ 1765.464433][ T8266] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1765.521593][ T8266] usb 6-1: Using ep0 maxpacket: 16 [ 1765.568819][ T8266] usb 6-1: no configurations [ 1765.573762][ T8266] usb 6-1: can't read configurations, error -22 [ 1765.769989][ T8266] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1765.866670][ T8266] usb 6-1: Using ep0 maxpacket: 16 [ 1765.909663][ T8266] usb 6-1: no configurations [ 1765.914511][ T8266] usb 6-1: can't read configurations, error -22 [ 1765.938197][ T8266] usb usb6-port1: unable to enumerate USB device [ 1767.062564][T16816] loop2: detected capacity change from 0 to 2048 [ 1767.164611][T16816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1769.220699][ T5863] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1769.436560][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 1769.468321][ T5863] usb 6-1: no configurations [ 1769.473258][ T5863] usb 6-1: can't read configurations, error -22 [ 1769.819100][ T5863] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1770.005748][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 1770.016592][ T5863] usb 6-1: no configurations [ 1770.021419][ T5863] usb 6-1: can't read configurations, error -22 [ 1770.086411][ T5863] usb usb6-port1: attempt power cycle [ 1770.455788][ T5863] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1770.527813][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 1770.557676][ T5863] usb 6-1: no configurations [ 1770.562520][ T5863] usb 6-1: can't read configurations, error -22 [ 1770.763921][ T5863] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1770.836694][ T5863] usb 6-1: Using ep0 maxpacket: 16 [ 1770.859819][ T5863] usb 6-1: no configurations [ 1770.864711][ T5863] usb 6-1: can't read configurations, error -22 [ 1770.925668][ T5863] usb usb6-port1: unable to enumerate USB device [ 1770.984353][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1770.991405][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1772.620144][ T5863] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1772.805902][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 1772.882368][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.895534][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.908501][ T5863] usb 6-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1772.918062][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.037880][ T5863] usb 6-1: config 0 descriptor?? [ 1773.650831][ T5863] glorious 0003:258A:0033.0029: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.5-1/input0 [ 1773.824686][T16910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1773.834989][T16910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1773.987135][ T8266] usb 6-1: USB disconnect, device number 26 [ 1774.485027][T16931] fido_id[16931]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1775.327804][ T8266] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1775.574534][ T8266] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1775.584357][ T8266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.656188][ T8266] usb 6-1: config 0 descriptor?? [ 1775.679098][ T8266] cp210x 6-1:0.0: cp210x converter detected [ 1776.107701][ T8266] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1776.140281][ T8266] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 1776.153910][ T8266] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 1776.236614][ T8266] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1776.295153][ T8266] usb 6-1: USB disconnect, device number 27 [ 1776.351755][ T8266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1776.362774][ T8266] cp210x 6-1:0.0: device disconnected [ 1777.776099][T16986] overlayfs: missing 'lowerdir' [ 1783.276608][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 1786.716397][T11174] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1786.963611][T11174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.975177][T11174] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1786.985797][T11174] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1787.000610][T11174] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1787.010055][T11174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.027945][T11174] usb 6-1: config 0 descriptor?? [ 1787.637515][T11174] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1787.811299][T11174] usb 6-1: USB disconnect, device number 28 [ 1788.545468][T17147] fido_id[17147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1794.860618][T17262] pim6reg1: entered promiscuous mode [ 1794.866761][T17262] pim6reg1: entered allmulticast mode [ 1801.065028][T17351] ===================================================== [ 1801.072931][T17351] BUG: KMSAN: kernel-infoleak-after-free in _copy_to_user+0xcc/0x120 [ 1801.081467][T17351] _copy_to_user+0xcc/0x120 [ 1801.089968][T17351] copy_siginfo_to_user+0x3f/0x140 [ 1801.095670][T17351] x64_setup_rt_frame+0x1392/0x2590 [ 1801.101239][T17351] arch_do_signal_or_restart+0x63c/0xc00 [ 1801.107238][T17351] exit_to_user_mode_loop+0x118/0x1b70 [ 1801.113148][T17351] do_syscall_64+0x1e1/0xf80 [ 1801.122022][T17351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.128336][T17351] [ 1801.130848][T17351] Uninit was stored to memory at: [ 1801.136596][T17351] __dequeue_signal+0x4d6/0x970 [ 1801.141696][T17351] dequeue_signal+0x1c0/0x840 [ 1801.146708][T17351] get_signal+0xbf6/0x2a20 [ 1801.151304][T17351] arch_do_signal_or_restart+0x53/0xc00 [ 1801.157198][T17351] exit_to_user_mode_loop+0x118/0x1b70 [ 1801.163166][T17351] do_syscall_64+0x1e1/0xf80 [ 1801.168829][T17351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.174978][T17351] [ 1801.177655][T17351] Uninit was created at: [ 1801.182367][T17351] kmem_cache_free+0x2c9/0x13c0 [ 1801.190806][T17351] __sigqueue_free+0x23a/0x270 [ 1801.196148][T17351] __dequeue_signal+0x66b/0x970 [ 1801.201223][T17351] dequeue_signal+0x1c0/0x840 [ 1801.206192][T17351] get_signal+0xbf6/0x2a20 [ 1801.210802][T17351] arch_do_signal_or_restart+0x53/0xc00 [ 1801.216705][T17351] exit_to_user_mode_loop+0x118/0x1b70 [ 1801.222396][T17351] do_syscall_64+0x1e1/0xf80 [ 1801.227370][T17351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.233479][T17351] [ 1801.236035][T17351] Bytes 12-15 of 48 are uninitialized [ 1801.241755][T17351] Memory access of size 48 starts at ffff88812d083d10 [ 1801.248776][T17351] Data copied to user address 00007f685ffa6bb0 [ 1801.255057][T17351] [ 1801.257712][T17351] CPU: 0 UID: 0 PID: 17351 Comm: syz.5.2775 Tainted: G L syzkaller #0 PREEMPT(none) [ 1801.269208][T17351] Tainted: [L]=SOFTLOCKUP [ 1801.273803][T17351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1801.284156][T17351] ===================================================== [ 1801.293495][T17351] Disabling lock debugging due to kernel taint [ 1801.300764][T17351] Kernel panic - not syncing: kmsan.panic set ... [ 1801.307363][T17351] CPU: 0 UID: 0 PID: 17351 Comm: syz.5.2775 Tainted: G B L syzkaller #0 PREEMPT(none) [ 1801.318649][T17351] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1801.324454][T17351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1801.334844][T17351] Call Trace: [ 1801.338255][T17351] [ 1801.341306][T17351] __dump_stack+0x26/0x30 [ 1801.345934][T17351] dump_stack_lvl+0x50/0x1c0 [ 1801.350770][T17351] ? dump_stack+0x12/0x25 [ 1801.355317][T17351] dump_stack+0x1e/0x25 [ 1801.359773][T17351] vpanic+0x435/0xd30 [ 1801.364093][T17351] panic+0x15d/0x160 [ 1801.368260][T17351] kmsan_report+0x31c/0x320 [ 1801.373038][T17351] ? kmsan_internal_check_memory+0x16c/0x230 [ 1801.379769][T17351] ? kmsan_copy_to_user+0xf1/0x190 [ 1801.385176][T17351] ? _copy_to_user+0xcc/0x120 [ 1801.390162][T17351] ? copy_siginfo_to_user+0x3f/0x140 [ 1801.395764][T17351] ? x64_setup_rt_frame+0x1392/0x2590 [ 1801.401591][T17351] ? arch_do_signal_or_restart+0x63c/0xc00 [ 1801.407804][T17351] ? exit_to_user_mode_loop+0x118/0x1b70 [ 1801.413848][T17351] ? do_syscall_64+0x1e1/0xf80 [ 1801.419102][T17351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.425434][T17351] ? kmsan_get_metadata+0xfb/0x160 [ 1801.431177][T17351] ? kmsan_internal_check_memory+0x9c/0x230 [ 1801.437352][T17351] ? copy_fpstate_to_sigframe+0x126f/0x13d0 [ 1801.443868][T17351] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1801.450028][T17351] ? kmsan_get_metadata+0xfb/0x160 [ 1801.455482][T17351] ? kmsan_get_metadata+0xfb/0x160 [ 1801.461189][T17351] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1801.467397][T17351] kmsan_internal_check_memory+0x16c/0x230 [ 1801.473632][T17351] kmsan_copy_to_user+0xf1/0x190 [ 1801.478866][T17351] _copy_to_user+0xcc/0x120 [ 1801.483606][T17351] copy_siginfo_to_user+0x3f/0x140 [ 1801.489009][T17351] x64_setup_rt_frame+0x1392/0x2590 [ 1801.494534][T17351] arch_do_signal_or_restart+0x63c/0xc00 [ 1801.500572][T17351] exit_to_user_mode_loop+0x118/0x1b70 [ 1801.506352][T17351] do_syscall_64+0x1e1/0xf80 [ 1801.511296][T17351] ? clear_bhb_loop+0x40/0x90 [ 1801.516292][T17351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.522446][T17351] RIP: 0033:0x7f685f18f749 [ 1801.527073][T17351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1801.546986][T17351] RSP: 002b:00007f685ffa7038 EFLAGS: 00000246 [ 1801.553259][T17351] RAX: 0000200000000000 RBX: 00007f685f3e5fa0 RCX: 00007f685f18f749 [ 1801.561396][T17351] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1801.569717][T17351] RBP: 00007f685f213f91 R08: ffffffffffffffff R09: 0000000000000000 [ 1801.577949][T17351] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1801.586198][T17351] R13: 00007f685f3e6038 R14: 00007f685f3e5fa0 R15: 00007ffebed8e738 [ 1801.594389][T17351] [ 1801.598146][T17351] Kernel Offset: disabled [ 1801.602591][T17351] Rebooting in 86400 seconds..