last executing test programs: 10m3.631248384s ago: executing program 2 (id=301): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2, 0x8, 0x80, "41e5b5cb6cf174f7fc3a83e47bdf684f766851a395b15a8e0f0e68b109524627", 0x3d435958}) 10m3.363986782s ago: executing program 2 (id=305): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='F'], 0x8) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x894) r2 = io_uring_setup(0xb, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x4095, 0x7721, 0x16, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa0000000000007110370000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 10m2.102486008s ago: executing program 2 (id=308): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0x93d5, 0x80, 0x2, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 9m59.895346007s ago: executing program 0 (id=316): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x40, 0x4000, @fd=r0, 0x7fffffffffffdfff, &(0x7f0000000340)=[{&(0x7f0000001900)="ac", 0x1}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m56.775681278s ago: executing program 0 (id=322): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0x58) 9m56.02941702s ago: executing program 2 (id=326): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04250c20"], 0x7) 9m55.849078472s ago: executing program 2 (id=328): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) unshare(0x2040400) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0xbf, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r4, 0x0, 0x0) write$binfmt_script(r4, 0x0, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f00001e1300)=[{0x4000000, 0x0, 0x0, 0x1, 0x4}]}) 9m55.284011488s ago: executing program 0 (id=331): syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 9m53.801921189s ago: executing program 2 (id=335): close(0x3) syz_open_dev$vbi(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x10000}], 0x3e0000) 9m51.305651184s ago: executing program 0 (id=339): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80001) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0x93d5, 0x80, 0x2, 0x1}) r0 = socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 9m46.533275709s ago: executing program 0 (id=350): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) 9m43.758648111s ago: executing program 0 (id=351): writev(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) getgroups(0x2, &(0x7f0000000400)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 9m37.679223007s ago: executing program 32 (id=335): close(0x3) syz_open_dev$vbi(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x10000}], 0x3e0000) 9m25.488851609s ago: executing program 33 (id=351): writev(0xffffffffffffffff, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) getgroups(0x2, &(0x7f0000000400)=[0xee01, 0x0]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 6m12.555216068s ago: executing program 5 (id=842): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x200000d0) 6m12.341449456s ago: executing program 5 (id=843): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6, {0x0, 0x4c, "b3a7bb01108797b0caeb9bab41ee41af4cea36699e64b2533c54776ac52336fc74b65a6cb7e427e043783260c27710f7dc8ea206f389c7f4731eee215971418221cf25f46872123ab68b96a7"}}, 0x51) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x8400}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x1, 0x0, 0xff3d, 0x28, @private1, @remote, 0x8, 0x8, 0x2, 0x7fff}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) 6m11.033927835s ago: executing program 5 (id=846): syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0xf7b0, 0x61, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) socket$nl_netfilter(0x10, 0x3, 0xc) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000680)=0x41) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) 6m10.239635191s ago: executing program 5 (id=849): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da0102030109021200"], 0x0) close(0x3) 6m7.686214178s ago: executing program 5 (id=859): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in=@remote, 0x3c, 0x0, 0x0, 0x20, 0x8, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac05920273880102030109022200"], 0x0) 6m3.712925928s ago: executing program 5 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000240)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r6 = getpgrp(r0) write$cgroup_pid(r5, &(0x7f00000003c0)=r6, 0x12) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x9800, &(0x7f0000000080)={0x97, 0xf8, 0x40000}, 0x20) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x406, r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000e0", @ANYRES64=r9, @ANYBLOB="00012abd7000fddbdf250b0000000c00990000800000650000000800090001ac0f0007000a00de4c2d0011000700596c2051e8784dec2f94c0b32b000000050008000100000041a1ac744c5fd4444c2901ac69d6cd223e6d25b0c342d03d032d"], 0x4c}, 0x1, 0x0, 0x0, 0x60088000}, 0x800) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x60000001}) 5m48.24463254s ago: executing program 34 (id=863): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xffbe3523, 0x100006, 0xed34, 0x400ff7, 0xb4, "20cde7b23a5cf0b4a5a300000400", 0x1e, 0xdb25}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000240)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) r6 = getpgrp(r0) write$cgroup_pid(r5, &(0x7f00000003c0)=r6, 0x12) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20044015}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x9800, &(0x7f0000000080)={0x97, 0xf8, 0x40000}, 0x20) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x406, r8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000e0", @ANYRES64=r9, @ANYBLOB="00012abd7000fddbdf250b0000000c00990000800000650000000800090001ac0f0007000a00de4c2d0011000700596c2051e8784dec2f94c0b32b000000050008000100000041a1ac744c5fd4444c2901ac69d6cd223e6d25b0c342d03d032d"], 0x4c}, 0x1, 0x0, 0x0, 0x60088000}, 0x800) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000040)={0x60000001}) 2m35.402605296s ago: executing program 1 (id=1331): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) 2m34.293797285s ago: executing program 1 (id=1336): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000080)={0x11}) close_range(r0, 0xffffffffffffffff, 0x0) 2m33.983393684s ago: executing program 1 (id=1338): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in=@remote, 0x3c, 0x0, 0x0, 0x20, 0x8, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac05920273880102030109022200"], 0x0) 2m30.231224209s ago: executing program 1 (id=1347): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x5, 0x0, r1, 0x0}]) 2m28.555751932s ago: executing program 1 (id=1351): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$vcsu(&(0x7f0000000400), 0x1ff, 0x2002) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 2m25.858832672s ago: executing program 1 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x80, 0xfffffffffffffffe, 0x0, 0x0) 2m10.705528886s ago: executing program 35 (id=1354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x80, 0xfffffffffffffffe, 0x0, 0x0) 13.622791694s ago: executing program 9 (id=1717): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6, {0x0, 0x4c, "b3a7bb01108797b0caeb9bab41ee41af4cea36699e64b2533c54776ac52336fc74b65a6cb7e427e043783260c27710f7dc8ea206f389c7f4731eee215971418221cf25f46872123ab68b96a7"}}, 0x51) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8400}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x1, 0x0, 0xff3d, 0x28, @private1, @remote, 0x8, 0x8, 0x2, 0x7fff}}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) 13.451241193s ago: executing program 3 (id=1719): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in=@remote, 0x3c, 0x0, 0x0, 0x20, 0x8, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac05920273880102030109022200"], 0x0) 12.573341491s ago: executing program 9 (id=1722): syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400"], 0x0) 11.211271958s ago: executing program 8 (id=1728): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "be"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x9, @remote, 0x9}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x1, @private2, 0x2000000}, @in={0x2, 0x4e23, @local}], 0x58) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8971, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d5, 0x5e}, @in6=@private0, {0x1, 0x0, 0x2, 0xfffffffffffffffc, 0x10000000, 0xad, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r6, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40005) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x1, 0x40, 0x42}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r7, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x100}}}}}}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58}, 0xfffffffffffffda3) 10.151045654s ago: executing program 8 (id=1732): socket(0x200000000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'lo\x00', &(0x7f0000000640)=@ethtool_ringparam={0x10, 0x3, 0x4, 0x4, 0x4, 0x4, 0x7, 0x8, 0x2002}}) 10.11126833s ago: executing program 4 (id=1733): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f00000042c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 8.693997117s ago: executing program 7 (id=1735): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r4, 0x89f0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x10001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000521}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8.658952003s ago: executing program 8 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xfffffffffffffe13, &(0x7f0000000200)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r3 = mq_open(&(0x7f0000000000)='\x9c-\x00', 0x41, 0x142, 0x0) mq_notify(r3, &(0x7f00000001c0)={0x0, 0x29, 0x1}) mq_notify(r3, &(0x7f0000000180)={0x0, 0x2d, 0x0, @thr={0x0, 0x0}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x6}}, 0x20) 8.476744377s ago: executing program 9 (id=1737): mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x42af03, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000080)=0x7fffffff, 0x4) r5 = syz_io_uring_setup(0xec4, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) io_uring_enter(r5, 0x0, 0xa9e7, 0x3, &(0x7f0000000040)={[0x8001]}, 0x8) 8.375408518s ago: executing program 3 (id=1738): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6) 8.344434781s ago: executing program 6 (id=1739): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x100) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010500, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000487000/0x4000)=nil, 0x4000}) 6.293920914s ago: executing program 9 (id=1740): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003900)={0x20, 0x5e, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x74, 0x0, 0x0, @uid}]}, 0x20}], 0x1}, 0x0) 6.059047684s ago: executing program 7 (id=1741): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) recvmmsg(r4, &(0x7f000000e280), 0x58a, 0x42, 0x0) 5.967623527s ago: executing program 3 (id=1742): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x10001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000521}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.91426848s ago: executing program 4 (id=1743): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @meta={0x58583444, 0xcf35d09, 0xeeb6, 0x9913, 0x177b15ca}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000fdffffffffffffff000057e5ea665defd18c28f9b6049e801d32a4f0d97aa37ec42a4ea9c4b069bda95558d5bcd53b6ca46eb06f77b84c8a9634e0475d49ef840d9f0d1a2e621bded7001155cf7aee8d78"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x3, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x207}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x58}}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='net_cls.classid\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) 5.761258709s ago: executing program 7 (id=1744): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x3f31, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc5501, 0x104) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0xfffffffffffffffa, {0x7, 0x2d, 0x2, 0x20200228, 0x7, 0xff6b, 0x8000, 0x8, 0x0, 0x0, 0x8, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) 5.738603134s ago: executing program 6 (id=1745): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 5.515664055s ago: executing program 6 (id=1746): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0xc) 4.888135267s ago: executing program 3 (id=1747): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6, {0x0, 0x4c, "b3a7bb01108797b0caeb9bab41ee41af4cea36699e64b2533c54776ac52336fc74b65a6cb7e427e043783260c27710f7dc8ea206f389c7f4731eee215971418221cf25f46872123ab68b96a7"}}, 0x51) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8400}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x1, 0x0, 0xff3d, 0x28, @private1, @remote, 0x8, 0x8, 0x2, 0x7fff}}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) 4.79635094s ago: executing program 6 (id=1748): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1}, 0x40) syz_emit_ethernet(0xd81, &(0x7f00000020c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x7, 0x6, "ba0e4a", 0xd4b, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0, [{0x1f, 0x17, "526f4b402374731a2f6b8f22a0e449591805917268a2bb6f8d3b3e84cf8f1604296db14f1649303c9d3ce7bab68fa29ad60c62e1c7276e185cb81c11847a0c62fad5f3ada0a7edd79acfcc00eb8fb4006f6c78691f164c8b002f5d0c92397892c7d66f645dc6192e911d88e05533ecadd277250b76e63ce2fbf3592a07ef539c32034284bf3034cedd135b52feef670c7726de762d929405012f78069182610ffc7cc81e7d2c39911f14c2e9d2f3b92a85d6990e1cbe5202a27d"}, {0xe, 0x13, "28795b508cc8018d324ac435e61b1aa89c033f8f9061e9e7e9f73b768c92f6df36ad04173d519c7e643aa40e889af6419e844aebbfbc426cfbe80e7234c22e6f149cec78cd38da1e08c01b31b501149919f8c8065b5b7d8431c87ffa97d851c034f646fe12a71455cbdb876c3bb7e7c062c3f13b89327668199166f6af38367dca1c27c931b589358d04d1bd113350620ba1abd5fb90a1"}, {0x5, 0x179, "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"}]}}}}}}}, 0x0) 4.796038259s ago: executing program 4 (id=1749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000003c0), 0x67, 0x53d, &(0x7f0000000f80)="$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") setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) openat(0xffffffffffffff9c, 0x0, 0x60840, 0x8) unshare(0x26020480) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)) 4.58342583s ago: executing program 7 (id=1750): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in=@remote, 0x3c, 0x0, 0x0, 0x20, 0x8, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5e67420ac05920273880102030109022200"], 0x0) 4.301766159s ago: executing program 6 (id=1751): syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400"], 0x0) 4.175711068s ago: executing program 3 (id=1752): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) pipe2$9p(0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x4c, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x4, r1, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x25dfdbfd, {{@in=@private=0xa010101, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2b}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 2.195751287s ago: executing program 3 (id=1753): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x42af03, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000080)=0x7fffffff, 0x4) r5 = syz_io_uring_setup(0xec4, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600)) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000000b000/0x1000)=nil) io_uring_enter(r5, 0x0, 0xa9e7, 0x3, &(0x7f0000000040)={[0x8001]}, 0x8) 1.919408124s ago: executing program 4 (id=1754): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r4, 0x89f0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x10001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000521}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.446090396s ago: executing program 8 (id=1755): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, r0}, 0x6) 1.148194626s ago: executing program 9 (id=1756): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000000)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) recvmmsg(r4, &(0x7f000000e280), 0x58a, 0x42, 0x0) 1.059195881s ago: executing program 7 (id=1757): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000000)={0xf010500, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x488}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000487000/0x4000)=nil, 0x4000}) 1.058635874s ago: executing program 8 (id=1758): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 355.534769ms ago: executing program 6 (id=1759): ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x10001}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040), 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x200000521}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 345.10814ms ago: executing program 4 (id=1760): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0xc) 158.660399ms ago: executing program 7 (id=1761): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4000000000007, 0x4000000000000ffc, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 157.285434ms ago: executing program 8 (id=1762): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x3f31, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc5501, 0x104) syz_fuse_handle_req(r0, &(0x7f0000004200)="8dae385542776ef3225455ae34f2486ecdda5cd1d60c9951ee7b87c6ebc68c94635cc676e0f984be9ac5baa3ef4917b2190708bfd7b65b896b549a4d391245cf38043c6559e2b3f8cdb019de083b572833620485cc91059bbc24cb814ea5bf4fc1fb81304f3f9104637e8fefbaa6fbcab3e225794cae21e5a745c2a8e7542b7c71f06e2ea9f9ba943a84f27fa8dd6a9c00834d1a8ca56c7493d364707c8c56c7dc2119fb330112939c72342ec74327ccd674066e6beb33f65e0991c2a1675286a480226de18d4b375ed9f45ca6f5aa6e1d30ec39ceb187e02ea8fab83f8668c0aba52bff37f43d6788422e2c9d52d789566d68272d74db81d530dc73f54e2502fbc13c5624c681c5c7494c326617ec90fe3aeb6cc2e5358916e35c08fb884719a1501f3bd7e28619a44cef79f974c18b5b049db3ebd823f11f3b050be2e46df8fafa03f239956e024eaeb42f62fcf1499b516bae7fb497209149cbe05eaf12eec1168908aaf676271e55b466d6ad3761216e65100d656159bc08c17b5487fadf8f53d055e983002f6a0a9dbb003a7c61f2eb412162d6280a255c1b6b358812ba92220d8c70740d15afd505fc268663f0e7913668f4763a863c07350e447f969b15ccad9701730183e6fcb49b6d35aa15fab1c696d84eb12e23ad056834805378edc0f7c4a8f8f9b53261a60d72438baa814bcd3ad5eeb3b3bd7c9ad1147e6aea0f02f00940583fa037925d997f63bb0a58952a27690f4977fa4c18726a2b02c2a5a9e751739f7f27ef5a20e22f56828e1d75961f97069bf2e5c50804bd8fb4b27bcb026de552f870b16d6bb453d7d264c110aa81e86b4f48825c8f2321e6a57ef7d3a7ad25eda7ba75e6f8ffd2a61ddfc91de75f14434765a3a51b9f2d62429bbde7e545099223fb1f77acb0c46c3914e69812a70c440d6c840458d7cd450ab4662e509a0316cff5ba3f3b23a68db0461d97a7da1e760fc93a7b5654a1e5d524eb68c185a7857a9d05cbf7efb540494a7d3b45fa452358a8c8a8a49bef99b11b0568e0708f92e2ecb3152cad459e1c53fc3bda846a146c8d8997d2239ac80a67cc9a47013ce7815026f1aa62153b4a415e16705cf4734f9ea9c854ff01d1e95f8a7a030cb5b446a850eea9be68159920f392e3b603fb7faecfea12606897172e334875ce13d56e243414f1a55794180a1fe4f330e1c0d4cda08ee0610279dacd25fd67ce4769301791ce8ef63a0e77a4b9e24069935b76be9dd2eef38819c0bf30e858bf429a5decb1921f1514eeee9d9f5b9ad01e2d84423724828f953264330ee98a4b3c7b475b1a3834bbd3bf8ea506d1dccf4f9b37613f861f9ad3b87c715ca69f52d0959d2d1fefe12c02d946f7935178cfea08de37a6c6474c77b01fd99d4d902f7d4553c2b36663a5d66bfba30647894347b89c0849ce8062365759af750ac74bf8772a1c628f93f8a9feb9f1f802033b77766ebe575c00eee1acd7600d0cad72cff5f6359a5e64c234abe6e3115111db5a66e369555656dd3fbb8e87e0ea578baffdb1b21076f784a4f442997901834abcc7892ca0cfe50624c27f280c10ed338821610b5ffe275fc4be8332635025d0de91e12b63aa40f9223dd11c4da133b30813826618beb41e4a0aa8de34c608f0c6de8d42b1ba97dda4c8a16969a2c88023169e35afa3d9d56667962644b86a72b78bc3cab8a95b55a1793e8678ad7f02bdf655ac473785f240f198458f4405b49618fa40d33a8e0e8f447404de799782610e04feae53770bb8b0c40571aff49d748ab1d7c70b3d31ebe02061d257e18d5916ad574785f227f0e79e76461de5e6c207416497b8e334dd7f23a45aba88aac1f113738a4f4cb62f2bf6549b5306f296289ebedd3ffa535be6c7ec4cf2c2a16e3c53967f82049b7c5c0e8ac3ba6fc19f1c8a3a49e299924dae5b0f34c002bf323e17b01e4b31fb426f03de3e7d6ce2a6d8bf0bd4b4fd2831ad1e0dad665dda85243932190d69a80ebc5dc4ae305837af88c251502a1e1db56138db27a9951cc63402c156a360ef72bdd3c04e5cd2a940f7e33ec39004dc4f4134bc24ac87b2dce8a35498469f9663191df768b917125d34b5f27e362a0e0c01b0c82ee803484ff304abd3f350a3fd7de1145f794ab5b0e5513b2230e20c3d1ce4d2effcfb3018bce6cb10fbc611f17a852632ae2731299077ecdd671fc5df6c59fa1ce66fb67b5f35605479e4e50e2476b7f6d38973b39f29ba39d19bc3664e0493a22b838438e9ea512541e5d0bf5689ce33d63509590b459c6500e53af3d50b84958b066738ca38ecc9dcda439007a0541237fb7935a0fc6f0c1e3a13a719cf10eaebf03bd89d0d5a6a387632d41791305fbe42b741688d8f8870eaa8649d433daf06bc0734603ad2c848afc211f8fbb2dcaaf452e35060a3903ca984b1f2e5dfd03c905bcaa202433debefc99ad273970d497c6543be1307ffd93fc1d334356b999c6d2026e09acdb133547519b5dfe58f37d8c926dc35b6666bd1f46c9ee74ab727f96dcb4e1a00defc064973d443298b5a6fb2bcdb869e756b51688a2f00fed4b1b1e4277e3dbf24635a60b777b2e83f229a05ce75a0089be3887329822854308d56eb82b79ed70db1dc53742b54764396c8f70eeac1b25d6272d0b0e0b75b2515648e2007638c225827d521914c52a17a71c86e792fd0a4ad11b8c2b4abfa0e9ae2bd6b491386be59d4693f9d6d6a64f1de8664765ceb9a648cd2189b03de222160b1f494ff0d118c0c6604722807f81ec75c24be9b84b462dafd716d072f72de692790fb007eeec237ebf3b5d0245d3c1e36338aaed7f83b132177b9e020fe6a24028a7df02d1468824e7d30f8e49cf1d31ca8e832ebf8cf510ad75190068e24539ffe289e8c59c65b43b23f5e35a789d13a65af8dde91e3d8558aa79167d5130c4b9a5f301fe51502b581a82768b7ebc40e18dd71bbf64f7267616740e1d0436ae9f8d32174fceb8685f00b9788ce7a4206d0d3f3c108f0bd1a6f59fe43723fc7e1b4f5b6d1ae2473634b3607ea0a4c468d1f98f340f3411e07417a8c69391130ec28a3da834989921fdc386ba2ce980e955d94034d58591c3bb744311096e77517704ec8812c80354c29a26a36b5572ababc3931650df6c7003c10f6bd92fe85ff265cab64618fa56b0412c119676e589ec78d6a0d9d28d6df04c3c5bb0f4d78f7d441e5180f6f6de73809e93fdf4122656a180c789eff11e7ebc16ea8ea58f9087de3bafa33a8926202d2036db0837636f05fcc2ec9024a0c35981f2f7237e59cdd68f3cac981ac7228fe3f9fb15279500aae672ff925d6d5eab713c005250beaeeb2ab22ef4ac48b1c414ccf18a90d91c62e8a87e0cde0f323d7564eb0c8e80e55ebd4d2bd0f3931efb382899de1f183bc3a942b3dff8dfe934b34db9cbb316e0c5c5818a44da2d57ff463cc8cd316ff61c9ac7566d2fdbca2058d9b2f2484904dfb6c11fe34ac91660bba74a65fdf8401310126e49f51e52ce1fe8f4b19e64bc11fc554bd34cbe8918863983703c7f479552d50117248671fb00dd0b4492bc4e8db1429667291157c722d2aaceed4dc6d302c807d9b4186833ce70b6040f216fa69251d05aa65165914c966c6b1b41dc718686f5c0ea604cf0a02764b1aaa0732f0debaf101ee3ec105bc7c6c916e18278b3fec05dda2232b081f3d09d65403cdfadb7b987c745406e39cafb2d841b4d2219da4f240549bddac47dbf36b490cba64bbe34d3b109232820dfdd781024dbee2ca65b59564c4d8801a589caa2d8ce3ed597a413fb40fa6bbb4ecc761ca494b7e184e6717b4033cbfd5330ff6bd0fd3823ea960ed57eec8398d5c16722a556340bc7401bc4f1cea644f2db36d40937ab702af4a58039c1b33cb09dc91a705e3b560b995db3b0d631ef29ca968efef9853d977daa49224a08b52db69c3df8859ec286c8383ad4959ae82c3112205452b36b25801b2e76b29ed729d638bfaae4f2ccf3213ccaaa12650d15b654cb1da7a727dc9ff017aaa17912469e4a4b872949dfd7ce3c7e0f30187c1cccae58842590ca44e5b73c5da2d1547fe7e2c3bbf1bd973797aa9636016758b8608abe1bf988d1bd14c85a2576de119f85e69a2396b869385e59848462b51b27f34bd1ddfb6b1ad94e662078cc2181fccab16fa373a4a1c529f18159ec6b97bb911d34bb9fcf6a007992ba2d045898eeddd1d88843e5d0a1e7741e07bc61e873e24fe808041371379833bed3fcf6deeec0ea5f1fccd0fe340aed85697e7500f68c50effb4623bcd050637b1ba01c6ea7e70c06751b945c93f49d761342a2d2681ffed532d83c5fd27a13014145514222923f0a706762c5c96f85298144c277dbeb64ad6bbce15808c66dfb53c2a89e9095e2c402b30a8c38e3c47699a5b2461d9b31068a14da8c664ee75dd5d652fb16eba9fc2f673868d22ea9df948161421a73f7042362941f77924e0bfbd74dfdc5138bcc9a8d700fc78dff38a7262705765120971d4294a418586d4d70a4ce7ce1f10a3d6446bf59db37188863395e25529a2ff19c83115c6b5cf136c1b8163692e9153871eda9a9b9347eec77f7d8c648259262942e8fa40585a88d412fed41b5fbf264c3f630b9dc90ee800c6bfeac68b973b31d4ea2789247f63e7fc529b3cd7c98f584b327a8a341cbb3bee7ad6fafa752ed03ad3f7ee292ca0c6296db8893df42a42b76e403affe3f04cfe78a441d697638321be79dca7eefceeb44817315a505e50ba712ece1668a2ec195a1c2693724e1cd87e091f9d33ce6b0925ae00ca9c9298c28d75144ae79cbf370be8f3c390c0e4ed2c25df8ed5d208233689b28433391f9262f8730b46ce82e60e453b429dea97441b54c9fb79599da10486d93b0acb7b057127c6244c67c7d9920db4990499e530511044f9263763b349dce1d456debf35a2a58f415e327383910dea71da72121fabf66ce719ea4535609685c3ecfb5f95c87c7f26f0a2ceff64b153501cdd0602f0109f832b1675c3dedfb771a191736b1f077a283c9402aeb6cd544daa15495542d3822360bf8c807709c4d718fdb20e98dd15656b0c1c8c47f5f6ad3b74ab83ef81b9be3bd1301c6c67904f7c88605030a2b98b7f4593d5045880f6685012b2f63e33d54d195dede0459a9653d99fd51d47496875940296374c3000b8f0bf1c878b9db67afbb0144b2e1216b338c75b1a89bcd7e16de6544ab34869cf09f5eda7e284daeafb0aad70f74f996ede15c8ecdee30542e3f4f9c6655f8c4b726cc8ae388bb49a2ac52d08447b6f38c68f59b6df332f9720807ac86a8420459814e876991eb3221eefe8636d5e222ea31bea1fa86e4cdaa35da7a5b8fc97cc5dd089df090106fac8ad1ae732d064f3f22272f88ec3110cb24a0aa534095971ba59a581e6bc493ca9b084111ffce6a0323323efdd66c911283e090ddb8b1dfe413f9b09d83570ed3f1f1a606354b6d488b30e8f8c4ac7a63b97ef0732f2288bad5d4a78b9c739ee6742e571402f4985c19b442d807350918907d7c4da400fc4231473cd0c7175093bbe704ec189242afba72d5cc28a81a7c7fa29b88c05a979365986d5f631abd3cf212f6c7b0e99c71fc4671b75f8ed7cd61565c9968ac1e88bb694d10b7c17d4aeed19a7c630fb1fe435fa3ec38273505961d016fb070c301db4bc7e956e08019f43b6047aefb759642a77e1e9a46481a404fd2d9eaffc0dc6e8363ee9a4e8a67844612e7ef30663486242b1a52e4e6ec1a13f279ccbd4fed92274823c88ea49706593e786095f3730effc4a10271b7baf2d4191fb91d659b351df1a5cc57fb4575d9fa0929f78185dd6081788ff2613bc3f83cbb4b47193da8ba41f2f1076de1cfe76cfbea393b9fe197d51f2e204cdf116f8b3c68ed95ecf16dd18afa4d40f1d097ee088b2580c7732ac51e372dd8225c70566456fc598d57f97af1680c652d7e3679049dc8132d9878a288f82b1f066a52587ec7177e9d9d1baa64f4b4606dac4f5ab642dde9b8761d4dc1a74f1abd7452465d7c6e9ecdf01bc85db79fd6f016dacff2811ba44f779cf453b6d4f75e8f48d6a4de3bec14f52d25966c48f608c5174f57d381eda228ed41422efe7cb9a720ac78d0b3f79cf11117a3d59c87833eea983a30b049b8d32d953b56c1f0ac9eb2efd6ba64ef84c19669569c44a396b9791aff01ebf7a759d718788a89f2311ff02579c2a6cd5e9e7b511188ff9eec0d627b69c19a764b54c8333e2411d282826a3abd917144e13a39b630d3b1eae7e762718afad2f0b92f306ba7e78b5fc4e27175a6ca5b09a4c123b858653601da1402869bbfb444d4ce40e23f9dd2601eac7ea998371682e90240044f0c87118324c1666b636f738841efe3b199fdccf0eb288d0eb73f202b0fa2ee14e907d2c6a4893e6eefbf1e4940d5d7e105d20c4692a253904d28bf19e7d4ec677e6411e9717610978e6abdd86b66d485253416675f21b0b7f3f20aa91b75fe09139c395b8b31ad1f7892b24aeca4fd4fdb0aa21d90404a58baf3b214f49b16ec1bd6dbf4d80efa9ec2300b323c3fa503ace46ee3e68c52f5eec2b8662abdc5b2b704e1868732d814ba38db4382b995a4066fdbb9000fec3817017818729cfc0bccc8a8d8ebc0d29b4394f453e0feeac8b28b7cedbc00723a98507e25d710d627ffe2c0d5aedc7a9fae4be0e705429c484ad661c5c250cdc1d2c8e1ed9f1033e346fbc43ff6096a93d162b67480d75f227f496622f2bffddf49094c74e6236addfeeaff9d98d921182448069355c4b11532b12a3f46faed855b394c6632bbc73ffd6aff7a7d1bb6f168505657928a6de4828d7a7c4bc9e4e7befcf85ae405cbd93995a1b2b6b9e7f385edaa70b65937a5482e59adbdd18f197e0750b256b4f2b4dfb1fab8f85042db746f3339a1f8feddc103356b3dbea3c8caae54f05f51d6014c92ed340b35d43687dc64e1436c0ff4a123be88b723aba8d8b1c5dc549a6d6b408de31a93984a1cf850ca4b4607d852cdbd65478bcb979d002319c5ea4a55770d56222656c6ff74269ff7c7fcff9950a1f213e0c5c4564d366baa8f6266642547e9c26f283dba8f5c590446b5c25e57f5197e469a30b70c152643e0be370832e45a214d85643ae8a239c26ba541cb52695ebfd20f0e8ffb733decd7c71e2d264b348b4e41cd969d39901e1ab724fb65125d899be926a3ee07fb49589796d96a6b9410af4db225584732854a3ad7c765d6f6969cdb43b89f32b618aa23a46e10ad2ae50e26ec307ed88c5091883e960886dbf89d5b5bf08ff423791b0e9e506d41d2fca6d14e5632337876b06733d70b35530a4c55bbedd8288275705741651380ea8f49ca5433144b9afca27151da4875e2ab736aedf0f510ba75cee65cf3e429a9a24d46865a69cd0b5545f58f4df25b6c4a08b2b9ccde46eef61275c2a2505593889b139de9007611bf2d38f81a6a951392c27f1475d190d46186e3b1de1b209df25a077cdbfa91097a24ef98ffbace6137ed5e07aed339106f998c7b69cb453a245ebe89ae2e476414f21a5356780cbcfa4daf1f8f69662b8dbd3aeb083260e69d7fa553ba8540be6fda2ff6c948b3d1b7035f3b817e5183a76b6da5b5b650c6943f660c5bdce749496e7ed4b9a0c1d76a2bf914718bb814f2835d5f7e8373865675a9124d68e05a7b1ba57c72d2fabc5f3870b636053f2bc36ab6230d0090e715b0f63dbf73c5d3032bd98ee6bd41ea883d1b497db12bac4d53577416b9fa709b93d3adb9655443e417b7d52ab4f76f04effbfa5f2508220ba4a7db909a9548a0453e96e044baabc0498e85b75384141c4fcebf46c1c23bee13c796535af8783e266ab9317e325b1fa78ecc04abd895e57e25af19dc2daadf647f35100d00e0979ea44d8bd57330d85c9915cc1bcd692aea2304c6e499e1e377588e88ae51cf2c228b699eebc27a72437f8942fd4bef2d27b05c5fcfab94af1e113829bda2e52f4c779a1433b813ff4cad39082f1500a8a33df607df0ac411007cac0b04d54d25bbf99fa1bb2bd63fa9b848c490e0fd224f9c5cf0555439a312b28ee6ee670b6b9ceaa60e7d47b4660e428d98e4073773e0f4aedcf229de7d36d047af93d826e8bf294bc8463d7c3dd591fd7c9d95e30df6ffd42dbd98dd6ef2a608427c87f405d63e422c829d8ed262e87ed6c5edaf94f6012c7f18d7202c278ae399483e135de69401d3825cceee5f75a1dec94d93fb99046bae4228a819f60482b03e458ae32c047008e6d782f0c4e3bd377b794ae94a58712bc2b479535e2f3b7621af55f43e781c054cf6491f1c7f72e91dc1e4919b37013b3fb023f166055da4739b3e4934a48c56e0d915c99eb700f2e81eeac27d44266d5d4417bd8bc816f44d69396f573cec244f332fc63b63d31407c1df9ad4cb78f907e6b9836a94b07b25777e7cc79356d24113b413d3098bd7aab02e1ebac87c146000ff2fc3b40833e9aaab66e9fd408bc43b733cfc0b89e8617b4252e1c3aad7706b3fff9b351080f023ec58b7093d3d1e0813e9046f28db3d38d72c769c64576bbe60f99895e58f77bd03508b33c0a034ebea5c05b661a0db22c650693001c2ff2eaa1245c38c5bd949e937df36cdc102961ccfd1db3f37a79d5a7adf1663951108d33798908457dcc4199027e148c5d67e84b2d1d3d69efa35cb95c2fdbeddc788d46cd6b2c2cde195f00b0c44787f7d9adfdb802209f98d0970bc6ee3be58749ba88a38c3d71df3d8a67976bacffbd08e2c7446918422c1a68423925bf3c0be2116a72eb9fc7165d6ee02263e6a54cb7258fd02f3d7bdc704a4a62d13e3268dd5b2d2250b33397a8fef6a8654dcafdc84004bcd0cbc2748fa535ea4dff51f96985c83b998169ecdbea0fe4c817565f3469ae9b7d3f9a171ed463bf51409928157bb26ab93560742489464171caae1af10147f4c162ec996af20f4453a10b2da1369112c4d560589021b7589b4f848006b6c8fb4334029e1bc47d027b3647b59dff50f65da1dabcf9ba330b92142e632afdb361017775a457c591fa14450519cf69aac3dc57d1ecd0d93a229d4c1413a866733d288919c1b7591891f67f2baa815a4d5e002d2484f17ecacc0eefc9530079c7d7df60b42874ec1f0d1f7d692b059e18a938207b5c217aac29bae6140c70740331691a30a334a68793927799a14ff73cef250a84b58f54de95aa97ad40fa3af419925fe2b5855525cbebcb239f3e4318c03d40109808259aa8b90f43452b65e87f79cbc1e50ad4975b9c57a7d4cacda057e684f2f28e05a0dcf4bf64aa6456b8e30276af0b760575f3c93310ae29e3fe833444a187432160ae195b5d4fe4d50552cb635c780cb650d49248c78b3306af7c4c4c4304dde150ee964e072836db9097e9eb55ad4a6c829cd1d88aea4a3a963cbf596ef0748dce44361e4953d87429062af665841835dfcd23b97b06fd4a8acf76ed46ad5f4bd70cfed38f540b4d586a12f4a89e59982cbb324840d9e033f251df24de81690eee9d21abdbd01350cb36e6a2101fb8dad7db05a7c38c9ab7416f5e96f84a0335574cda1a6e724e4caf3e10c5a3554d9b1bccd0901ff7fa82dd8156043f1f40eded9178eb892b82068881d9806c2b014a5fc068f51a265795d7d41e40e11e54eaf7fb4242a45ffa5a9dd0956261623cd968721b2727420691780996350e570a6daeda409330d9ee2da0ce4ff7b9302c780badae6b54c6d4ad109fd3344f37621b9b18ebe8a8fcf4e1a12cbbe66362d840a0a22e2f761da3e94649cd495f793791aef4677ff27ceb922e579facf2d9e283d121e6414bea8a6a87eedb8b4ef6a5d08d7b1ca73982bdc546ce04788c6272dc4e524246892c535c44b50cedb0a1588da3becf61ac6bd79494f3c854c83546fa0803e326c5aa3abe13a88db88ee1f8f2fc74281aba6cf20df469f97757b0a31cc64dcb06c4f0cd9cabb06b344a95d4176729bb9ae31f70c259bde20b2cb40b60fa0c0fe1168eca9ab0c1a254dc8da6ad7419a67c028b9a5ac741ef4fe415c4db7d8973dbe3f3563649c2db1a17f1b71a6e1309c967217cfbaa0b6978eb94ad2f399aa663336f1c06eede0f5f8fc256c721c4bdf1b0802cbd2d896a951a590cfa77377093bd73c9953988b1aed9f167791d956193dadb735ccc48bf7c55d57eac847727782e1b60ea16629c403436fa4332ea7c439030bf90bc525137035aadf6a520c3e3326d886c41921a477d6943c3cbe5a04a6ec008e4f42da0619bfa0edb2975965a4bf7a56dd1544d37443dc2143f3e222c7a9d1f63c43e9ef33ca716d8bf1f2ea421b8b77ddc6a573f25b6fb7a28c5215a5acf3e2507bda413d3a42e01d39a71fc74c452631438e1c08c95c3fafd1cb7eab129df96d09763b37495687d887ac169089c42dcca25d7e799e84a1c2758a3e24e324006745a887f6f648cd2e73fa329c062a35a7d000fa9982b819ac1b1852f8fb576a588c75e7b8b910cb58789bad818071503924bca4cb36e4303f6b97a14f2b7cd6666ceea121015cbd0eb38bc88d6e06cec66637eced45f422d86c40b58511d4900b9655a567061ae06f1e056d10a65ded02f9087a16f6676480f90096bdf274f2a99fd797da956aae465fa15176712a94e2dc177ffdad28cbdcf91f589d63789d4c470013f1127c0943625806d160408a652a0c9edeae278a453dcc76826de7efd4be1e3e3a198934acd6b0baa86ae2b83db13aa55b52b31d2c0a3fb1d684b58e757dd8caaf6d390cbfde0427d95ebe8f23e5e4ff2946c8765f2b1947cd6faa93746c39d2f983c041169f25f68d31ccfebb6e08fd214447bf4fba3d987483024fc175f0b3b5ea48b7ca6d0939bbe5a4f26672b1c3b09313e81cf2d05bd63b262dd44819aaf61784ac18d6a955e0749ed172941e80103c8303ae3f50124aa52dc17f7d0dc6962818f7bc72d283ec86e2337dec8c5e918c728d0cbaed2065136220b5a9a25a2fb7c60ee807f23c6dea8bd88b24bab526f11cfc779c68eeff2db6f7696ed3dccd5597e1035f70924a436219f3761b035750b6af37fb369119ed694c5f9a3d8cd4897d81dc517bffad5af4bc08f6628604de55b5f2f6db57a6a8e931fb17b744550c4075b4757fd47140eb8293ba414d1e7b9e7cf0a1f0dbd1bb44fad31dd518b99ab4447852055b5348d7886a19d03c2e694b72dd78b4dba371141d6a95af4627742454f8e6d9f4e4b9b933934f92098d1219e89985eba44c59df01fbdcbde91d072afc7fb90970d59a68e2c021c693497ac94721a314ce391474f6271b1c05866909a1779871ec2864dad591707797494e41c502d4c5db8f33e14acff3d44507a257cb0598686ea0d673ab45624e6d9113e7f57a7fa94167dac0f23569c5dbc683be1bb00364f64d05fc7d6d914bb122c188705d540505b41ee36da0591b7219624125cd3d58474767ca7c45580444733bfe0e7adce829f2224d9e4be09e3d2b6f8c9c15944851d8d14ddc1e0287b4f18dc81d6ec3de0d37e9ee27d9a3de425f8a84e1ef58b8d24c1235ba14d", 0x2000, &(0x7f0000000f40)={&(0x7f0000000140)={0x50, 0xffffffffffffffda, 0xfffffffffffffffa, {0x7, 0x2d, 0x2, 0x20200228, 0x7, 0xff6b, 0x8000, 0x8, 0x0, 0x0, 0x8, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) 134.248483ms ago: executing program 9 (id=1763): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @meta={0x58583444, 0xcf35d09, 0xeeb6, 0x9913, 0x177b15ca}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000fdffffffffffffff000057e5ea665defd18c28f9b6049e801d32a4f0d97aa37ec42a4ea9c4b069bda95558d5bcd53b6ca46eb06f77b84c8a9634e0475d49ef840d9f0d1a2e621bded7001155cf7aee8d78"], 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), 0x0, 0x0, 0x0, 0x3, r2}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newtaction={0x58, 0x30, 0x9, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x207}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x58}}, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x80000) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='net_cls.classid\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001600)={0x2020}, 0x2020) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) 0s ago: executing program 4 (id=1764): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) write$nci(0xffffffffffffffff, &(0x7f0000000280)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x6, {0x0, 0x4c, "b3a7bb01108797b0caeb9bab41ee41af4cea36699e64b2533c54776ac52336fc74b65a6cb7e427e043783260c27710f7dc8ea206f389c7f4731eee215971418221cf25f46872123ab68b96a7"}}, 0x51) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x8400}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @empty}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2d, 0x1, 0x0, 0xff3d, 0x28, @private1, @remote, 0x8, 0x8, 0x2, 0x7fff}}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 1, Product=2, SerialNumber=3 [ 351.542567][ T5912] usb 5-1: Product: syz [ 351.571328][ T5912] usb 5-1: Manufacturer: syz [ 351.574135][ T5841] usb 7-1: device descriptor read/64, error -71 [ 351.595322][ T5912] usb 5-1: SerialNumber: syz [ 351.830904][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.976518][ T5912] usb 5-1: config 0 descriptor?? [ 352.155418][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.572436][ T5841] usb usb7-port1: attempt power cycle [ 354.198551][ T5841] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 354.234124][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 354.242142][ C1] lec:lec_tx_timeout: lec0 [ 354.247502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.314423][ T5841] usb 7-1: device descriptor read/8, error -71 [ 356.327718][ T5912] usb 5-1: USB disconnect, device number 9 [ 356.714520][ T5807] usb 6-1: USB disconnect, device number 16 [ 357.050754][ T8125] ptrace attach of "./syz-executor exec"[5829] was attempted by "./syz-executor exec"[8125] [ 357.245096][ T8131] netlink: 'syz.6.668': attribute type 10 has an invalid length. [ 357.276420][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.6.668'. [ 357.298680][ T8131] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 357.302286][ T8132] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 357.547234][ T8132] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 357.779815][ T8140] Bluetooth: hci0: too big key_count value 9038 [ 359.254103][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 359.262156][ C1] lec:lec_tx_timeout: lec0 [ 359.274170][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.685663][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 363.832041][ T24] usb 8-1: device not accepting address 8, error -71 [ 363.940130][ T8171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.679'. [ 364.284127][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 364.292155][ C1] lec:lec_tx_timeout: lec0 [ 364.304246][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.534790][ T8188] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 365.867941][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.684'. [ 369.324082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 369.332357][ C1] lec:lec_tx_timeout: lec0 [ 369.344157][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.984708][ T5807] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 371.044158][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 371.214216][ T5807] usb 5-1: Using ep0 maxpacket: 32 [ 371.230032][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 371.268481][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 371.304599][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.312616][ T9] usb 4-1: Product: syz [ 371.324389][ T5926] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 371.335421][ T5807] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 371.355782][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 371.364670][ T9] usb 4-1: Manufacturer: syz [ 371.369281][ T9] usb 4-1: SerialNumber: syz [ 371.384095][ T5807] usb 5-1: Product: syz [ 371.397509][ T9] usb 4-1: config 0 descriptor?? [ 371.403575][ T5807] usb 5-1: Manufacturer: syz [ 371.414135][ T5807] usb 5-1: SerialNumber: syz [ 371.475224][ T5807] usb 5-1: config 0 descriptor?? [ 371.481124][ T8209] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 371.504715][ T5807] hub 5-1:0.0: bad descriptor, ignoring hub [ 371.510670][ T5807] hub 5-1:0.0: probe with driver hub failed with error -5 [ 371.564345][ T5926] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.572491][ T5926] usb 6-1: config 0 has no interface number 0 [ 371.627837][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 371.664546][ T5926] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 371.673621][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.724098][ T5926] usb 6-1: Product: syz [ 371.728366][ T5926] usb 6-1: Manufacturer: syz [ 371.732999][ T5926] usb 6-1: SerialNumber: syz [ 371.795527][ T5926] usb 6-1: config 0 descriptor?? [ 372.028938][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.137776][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.676434][ T5807] usb 5-1: USB disconnect, device number 10 [ 373.795540][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 373.835651][ T9] usb 4-1: USB disconnect, device number 9 [ 374.354084][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 374.354350][ T5807] usb 6-1: USB disconnect, device number 17 [ 374.362143][ C1] lec:lec_tx_timeout: lec0 [ 374.372850][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 374.769345][ T8265] binder: 8264:8265 ioctl 4018620d 0 returned -22 [ 376.885208][ T972] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 376.954255][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 377.341364][ T972] usb 7-1: Using ep0 maxpacket: 8 [ 377.614581][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 377.892899][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.903518][ T972] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 377.912646][ T24] usb 2-1: config 0 has no interfaces? [ 377.922436][ T972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.931010][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.937523][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.952018][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 377.995048][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.003328][ T24] usb 2-1: Product: syz [ 378.165301][ T24] usb 2-1: Manufacturer: syz [ 378.177315][ T972] usb 7-1: can't set config #252, error -71 [ 378.218781][ T24] usb 2-1: SerialNumber: syz [ 378.256558][ T972] usb 7-1: USB disconnect, device number 6 [ 378.303884][ T24] usb 2-1: config 0 descriptor?? [ 378.341142][ T24] usb 2-1: can't set config #0, error -71 [ 378.384167][ T24] usb 2-1: USB disconnect, device number 12 [ 380.154087][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 380.162118][ C1] lec:lec_tx_timeout: lec0 [ 380.174148][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 380.222325][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 380.744174][ T972] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 380.926157][ T972] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.963168][ T972] usb 4-1: config 0 has no interface number 0 [ 381.011290][ T972] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 381.084093][ T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.102344][ T972] usb 4-1: Product: syz [ 381.115319][ T972] usb 4-1: Manufacturer: syz [ 381.119935][ T972] usb 4-1: SerialNumber: syz [ 381.170269][ T972] usb 4-1: config 0 descriptor?? [ 384.684391][ T24] usb 4-1: USB disconnect, device number 10 [ 384.851682][ T8327] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.719'. [ 385.194098][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 385.202157][ C1] lec:lec_tx_timeout: lec0 [ 385.206917][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 388.014415][ T5807] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 390.214082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 390.222112][ C1] lec:lec_tx_timeout: lec0 [ 390.234365][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 392.984644][ T6026] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 393.032810][ T8389] netlink: 4456 bytes leftover after parsing attributes in process `syz.6.734'. [ 393.225163][ T6026] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.233202][ T6026] usb 5-1: config 0 has no interface number 0 [ 393.336608][ T6026] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 393.342717][ T8392] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!lIؘZ[#w^yi1*$Ve [ 393.345869][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.414112][ T6026] usb 5-1: Product: syz [ 393.428021][ T6026] usb 5-1: Manufacturer: syz [ 393.649426][ T6026] usb 5-1: SerialNumber: syz [ 393.659422][ T6026] usb 5-1: config 0 descriptor?? [ 393.823881][ T6026] usb 5-1: can't set config #0, error -71 [ 393.852824][ T6026] usb 5-1: USB disconnect, device number 11 [ 395.244079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 395.252115][ C1] lec:lec_tx_timeout: lec0 [ 395.264181][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.644192][ T6026] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 396.814536][ T6026] usb 7-1: Using ep0 maxpacket: 32 [ 397.064146][ T6026] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.792244][ T6026] usb 7-1: config 0 has no interfaces? [ 398.036145][ T5807] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 398.046468][ T6026] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 398.065885][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.139633][ T6026] usb 7-1: config 0 descriptor?? [ 398.353400][ T6026] usb 7-1: can't set config #0, error -71 [ 398.366326][ T5807] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 398.384497][ T6026] usb 7-1: USB disconnect, device number 7 [ 398.392114][ T5807] usb 8-1: config 0 has no interface number 0 [ 398.409335][ T5807] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 400.235156][ T5807] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 400.274073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 400.282108][ C1] lec:lec_tx_timeout: lec0 [ 400.286831][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 400.291249][ T5807] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.349007][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.434431][ T5807] usb 8-1: config 0 descriptor?? [ 400.505307][ T5807] usb 8-1: can't set config #0, error -71 [ 400.555296][ T5807] usb 8-1: USB disconnect, device number 10 [ 400.753894][ T5912] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 400.947514][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.984385][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.034258][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 401.064146][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.101883][ T5912] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.144129][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.165243][ T5912] usb 5-1: config 0 descriptor?? [ 401.214267][ T5807] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 401.365374][ T5807] usb 8-1: Using ep0 maxpacket: 8 [ 401.396620][ T5807] usb 8-1: unable to get BOS descriptor or descriptor too short [ 401.429361][ T5807] usb 8-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 401.463809][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 401.479588][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.499717][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 401.524878][ T5807] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 401.542855][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 401.562810][ T5807] usb 8-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 401.600461][ T5807] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 401.618280][ T5912] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 401.625750][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.672590][ T5807] usb 8-1: Product: syz [ 401.686795][ T5807] usb 8-1: Manufacturer: syz [ 401.701721][ T5807] usb 8-1: SerialNumber: syz [ 401.743956][ T5807] usb 8-1: config 0 descriptor?? [ 401.764997][ T8448] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 401.812339][ T5807] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.996668][ T6026] usb 5-1: USB disconnect, device number 12 [ 403.025823][ T5807] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 404.602583][ T8462] udevd[8462]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.304064][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 405.312090][ C1] lec:lec_tx_timeout: lec0 [ 405.316623][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 405.401896][ T5807] usb 8-1: USB disconnect, device number 11 [ 405.529171][ T8470] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.748'. [ 410.324072][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 410.332211][ C1] lec:lec_tx_timeout: lec0 [ 410.344160][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 410.414574][ T5807] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 410.785682][ T5807] usb 6-1: Using ep0 maxpacket: 32 [ 410.811217][ T5807] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.850678][ T5807] usb 6-1: config 0 has no interfaces? [ 410.870983][ T5807] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 410.906641][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.932629][ T5807] usb 6-1: Product: syz [ 410.953797][ T5807] usb 6-1: Manufacturer: syz [ 410.970485][ T5807] usb 6-1: SerialNumber: syz [ 410.998776][ T5807] usb 6-1: config 0 descriptor?? [ 411.765049][ T5807] usb 6-1: USB disconnect, device number 18 [ 415.354076][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 415.362144][ C1] lec:lec_tx_timeout: lec0 [ 415.366808][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 417.733082][ T8544] netlink: 4456 bytes leftover after parsing attributes in process `syz.7.769'. [ 419.714165][ T6026] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 419.914280][ T6026] usb 5-1: Using ep0 maxpacket: 32 [ 419.933073][ T6026] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.969937][ T6026] usb 5-1: config 0 has no interfaces? [ 419.990602][ T6026] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 420.020242][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.052589][ T6026] usb 5-1: Product: syz [ 420.073307][ T6026] usb 5-1: Manufacturer: syz [ 420.098088][ T6026] usb 5-1: SerialNumber: syz [ 420.141473][ T6026] usb 5-1: config 0 descriptor?? [ 420.374081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 420.381266][ T6026] usb 5-1: USB disconnect, device number 13 [ 420.382137][ C1] lec:lec_tx_timeout: lec0 [ 420.394050][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 422.399058][ T8588] netlink: 4456 bytes leftover after parsing attributes in process `syz.5.793'. [ 423.219492][ T8552] lec:lec_atm_close: lec0: Shut down! [ 423.884958][ T5912] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 424.065866][ T5912] usb 8-1: Using ep0 maxpacket: 8 [ 424.083518][ T5912] usb 8-1: unable to get BOS descriptor or descriptor too short [ 424.105444][ T5912] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 424.124238][ T5912] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 424.133272][ T5912] usb 8-1: config 1 has no interface number 1 [ 424.151737][ T5912] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 424.192072][ T5912] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.219635][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.237622][ T5912] usb 8-1: Product: syz [ 425.950569][ T5912] usb 8-1: Manufacturer: syz [ 425.977503][ T5912] usb 8-1: SerialNumber: syz [ 426.074153][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 426.238019][ T5912] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 426.584886][ T6026] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 426.714135][ T5912] usb 8-1: USB disconnect, device number 12 [ 426.804182][ T6026] usb 4-1: Using ep0 maxpacket: 32 [ 426.978137][ T7106] udevd[7106]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.170862][ T8629] evm: overlay not supported [ 427.915208][ T6026] usb 4-1: unable to read config index 0 descriptor/all [ 427.922238][ T6026] usb 4-1: can't read configurations, error -71 [ 428.224081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 428.232134][ C1] lec:lec_tx_timeout: lec0 [ 428.425694][ T8633] ======================================================= [ 428.425694][ T8633] WARNING: The mand mount option has been deprecated and [ 428.425694][ T8633] and is ignored by this kernel. Remove the mand [ 428.425694][ T8633] option from the mount to silence this warning. [ 428.425694][ T8633] ======================================================= [ 429.012299][ T8635] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.809'. [ 431.135613][ T5807] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 432.017340][ T5807] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 432.025961][ T5807] usb 2-1: config 0 has no interface number 0 [ 432.040622][ T5807] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 432.058379][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.076800][ T5807] usb 2-1: Product: syz [ 432.434804][ T5912] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 432.810018][ T5807] usb 2-1: Manufacturer: syz [ 432.815081][ T5807] usb 2-1: SerialNumber: syz [ 432.878663][ T5807] usb 2-1: config 0 descriptor?? [ 432.907390][ T5807] usb 2-1: can't set config #0, error -71 [ 432.979960][ T5807] usb 2-1: USB disconnect, device number 13 [ 433.036387][ T5912] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 433.078781][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.133621][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 433.235433][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.635492][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.652665][ T5912] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 435.384203][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 435.402551][ T5912] usb 5-1: Product: syz [ 435.441695][ T5912] usb 5-1: Manufacturer: syz [ 435.546660][ T5912] usb 5-1: can't set config #1, error -71 [ 435.578041][ T5912] usb 5-1: USB disconnect, device number 14 [ 435.604313][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 435.642088][ T8678] netlink: 4456 bytes leftover after parsing attributes in process `syz.5.824'. [ 435.784253][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 435.802199][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.843453][ T9] usb 8-1: config 0 has no interfaces? [ 435.854524][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 435.966844][ T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 435.994137][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.999885][ T8685] netlink: 60 bytes leftover after parsing attributes in process `syz.4.826'. [ 436.098219][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.104087][ T9] usb 8-1: Product: syz [ 436.159203][ T8685] netlink: 20 bytes leftover after parsing attributes in process `syz.4.826'. [ 436.174734][ T24] usb 2-1: config 0 has no interfaces? [ 436.185666][ T9] usb 8-1: Manufacturer: syz [ 436.211596][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 436.299607][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.457404][ T9] usb 8-1: SerialNumber: syz [ 436.595756][ T24] usb 2-1: Product: syz [ 436.595818][ T9] usb 8-1: config 0 descriptor?? [ 436.599957][ T24] usb 2-1: Manufacturer: syz [ 436.599987][ T24] usb 2-1: SerialNumber: syz [ 436.675711][ T9] usb 8-1: can't set config #0, error -71 [ 436.716178][ T9] usb 8-1: USB disconnect, device number 13 [ 436.745914][ T24] usb 2-1: config 0 descriptor?? [ 436.892314][ T8690] binder_alloc: 8689: binder_alloc_buf, no vma [ 438.787214][ T5912] usb 2-1: USB disconnect, device number 14 [ 439.254139][ T5912] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 439.363223][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.376112][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.388094][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 439.493924][ T5912] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 439.502163][ T5912] usb 6-1: config 0 has no interface number 0 [ 439.586780][ T5912] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 439.688336][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.795721][ T5912] usb 6-1: Product: syz [ 439.818808][ T5912] usb 6-1: Manufacturer: syz [ 439.896454][ T5912] usb 6-1: SerialNumber: syz [ 439.963533][ T5912] usb 6-1: config 0 descriptor?? [ 440.374134][ T5926] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 442.418994][ T972] usb 6-1: USB disconnect, device number 19 [ 442.477515][ T5926] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 442.514272][ T5926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.555714][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 442.575875][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 442.604226][ T5926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.636356][ T5926] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 442.655530][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 442.663371][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 442.682563][ T5926] usb 2-1: Product: syz [ 442.694512][ T5926] usb 2-1: Manufacturer: syz [ 442.731662][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 442.749227][ T5926] cdc_wdm 2-1:1.0: skipping garbage [ 442.768550][ T5926] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 442.784233][ T5926] cdc_wdm 2-1:1.0: Unknown control protocol [ 442.814179][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 443.062784][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.758533][ T972] usb 2-1: USB disconnect, device number 15 [ 443.958947][ T9] usb 7-1: config 0 has no interfaces? [ 443.968826][ T9] usb 7-1: string descriptor 0 read error: -71 [ 443.980511][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 444.258180][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.637698][ T9] usb 7-1: config 0 descriptor?? [ 444.663504][ T9] usb 7-1: can't set config #0, error -71 [ 444.699913][ T9] usb 7-1: USB disconnect, device number 8 [ 445.194515][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms [ 445.202598][ C1] lec:lec_tx_timeout: lec0 [ 445.295791][ T5912] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 445.374542][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 445.562646][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.608961][ T5912] usb 6-1: config 0 has no interfaces? [ 445.898171][ T5912] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 445.898365][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 445.957111][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.972783][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 445.996268][ T5912] usb 6-1: Product: syz [ 446.000469][ T5912] usb 6-1: Manufacturer: syz [ 446.002056][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 446.037000][ T5912] usb 6-1: SerialNumber: syz [ 446.044151][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 446.067969][ T5912] usb 6-1: config 0 descriptor?? [ 446.083627][ T9] usb 5-1: config 1 has no interface number 1 [ 446.113145][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 446.597878][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.607860][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.608609][ T5912] usb 6-1: USB disconnect, device number 20 [ 446.644105][ T9] usb 5-1: Product: syz [ 446.660968][ T9] usb 5-1: Manufacturer: syz [ 446.712413][ T9] usb 5-1: SerialNumber: syz [ 446.972573][ T9] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 447.112124][ T9] usb 5-1: USB disconnect, device number 15 [ 447.694204][ T5841] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 449.845494][ T5841] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 449.858104][ T5841] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.869881][ T5841] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 449.879750][ T5841] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 449.891723][ T5841] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.903668][ T5841] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.913049][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.927497][ T5841] usb 8-1: Product: syz [ 449.931670][ T5841] usb 8-1: Manufacturer: syz [ 451.264934][ T5841] cdc_wdm 8-1:1.0: skipping garbage [ 451.270184][ T5841] cdc_wdm 8-1:1.0: skipping garbage [ 451.296453][ T5841] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 451.302350][ T5841] cdc_wdm 8-1:1.0: Unknown control protocol [ 451.336893][ T6026] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 451.368434][ T5841] usb 8-1: USB disconnect, device number 14 [ 459.149513][ T6810] lec:lec_start_xmit: lec0:No lecd attached [ 464.134375][ T30] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 464.164065][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 464.172527][ C1] lec:lec_tx_timeout: lec0 [ 464.491430][ T30] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 464.530562][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.564144][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 464.600357][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 464.644314][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.700749][ T30] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 464.724323][ T30] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 464.741460][ T30] usb 4-1: Product: syz [ 464.764279][ T30] usb 4-1: Manufacturer: syz [ 464.796133][ T30] cdc_wdm 4-1:1.0: skipping garbage [ 464.810730][ T30] cdc_wdm 4-1:1.0: skipping garbage [ 465.142364][ T30] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 466.009199][ T8841] binder: 8838:8841 ioctl c0306201 0 returned -14 [ 466.084651][ T30] cdc_wdm 4-1:1.0: Unknown control protocol [ 466.657513][ T30] usb 4-1: USB disconnect, device number 14 [ 467.355594][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 467.375098][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 467.383825][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 467.410217][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 467.424464][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 469.773304][ T5840] Bluetooth: hci6: command tx timeout [ 472.884263][ T5840] Bluetooth: hci6: command tx timeout [ 473.691612][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.857182][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 474.192543][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.167518][ T5840] Bluetooth: hci6: command tx timeout [ 477.131021][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.249169][ T8862] chnl_net:caif_netlink_parms(): no params data found [ 477.334202][ T8929] netlink: 'syz.7.904': attribute type 10 has an invalid length. [ 477.366449][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.7.904'. [ 477.444737][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.234940][ T5840] Bluetooth: hci6: command tx timeout [ 478.520310][ T8862] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.547480][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.574783][ T8862] bridge_slave_0: entered allmulticast mode [ 478.583389][ T8862] bridge_slave_0: entered promiscuous mode [ 478.672296][ T8862] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.709515][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.724787][ T8862] bridge_slave_1: entered allmulticast mode [ 478.732700][ T8862] bridge_slave_1: entered promiscuous mode [ 479.540908][ T8862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.575446][ T8862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.623549][ T50] bridge_slave_1: left allmulticast mode [ 479.633587][ T50] bridge_slave_1: left promiscuous mode [ 479.634268][ T6026] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 479.647127][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.673891][ T50] bridge_slave_0: left allmulticast mode [ 479.698435][ T50] bridge_slave_0: left promiscuous mode [ 479.875755][ T6026] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 479.907780][ T6026] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.939055][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.980981][ T6026] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 480.021248][ T6026] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.066068][ T6026] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.216415][ T6026] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 480.326647][ T6026] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 480.490167][ T6026] usb 5-1: Product: syz [ 480.508823][ T6026] usb 5-1: Manufacturer: syz [ 480.798351][ T6026] cdc_wdm 5-1:1.0: skipping garbage [ 480.806568][ T6026] cdc_wdm 5-1:1.0: skipping garbage [ 481.545170][ T6026] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 481.551193][ T6026] cdc_wdm 5-1:1.0: Unknown control protocol [ 481.599945][ T6026] usb 5-1: USB disconnect, device number 16 [ 482.425523][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.452719][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.476535][ T50] bond0 (unregistering): Released all slaves [ 483.065662][ T8862] team0: Port device team_slave_0 added [ 483.086150][ T8862] team0: Port device team_slave_1 added [ 483.239082][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.267418][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.354896][ T8862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.082793][ T8862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.140502][ T8862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.239041][ T8862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.279516][ T8862] hsr_slave_0: entered promiscuous mode [ 487.300495][ T8862] hsr_slave_1: entered promiscuous mode [ 487.325151][ T8862] debugfs: 'hsr0' already exists in 'hsr' [ 487.338458][ T8862] Cannot create hsr debugfs directory [ 488.348257][ T50] hsr_slave_0: left promiscuous mode [ 488.391192][ T50] hsr_slave_1: left promiscuous mode [ 488.406238][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.504117][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.543273][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.565453][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.607540][ T50] veth1_macvtap: left promiscuous mode [ 489.643361][ T50] veth0_macvtap: left promiscuous mode [ 489.667740][ T50] veth1_vlan: left promiscuous mode [ 490.524199][ T50] veth0_vlan: left promiscuous mode [ 491.473146][ T9084] netlink: 156 bytes leftover after parsing attributes in process `syz.6.944'. [ 493.688346][ T9099] netlink: 'syz.4.949': attribute type 10 has an invalid length. [ 493.719470][ T9099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.949'. [ 493.784853][ T50] team0 (unregistering): Port device team_slave_1 removed [ 493.883942][ T50] team0 (unregistering): Port device team_slave_0 removed [ 497.113966][ T9120] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 497.655812][ T8862] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 497.831638][ T8862] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 498.256114][ T8862] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 498.625207][ T8862] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 498.864389][ T9149] fuse: Bad value for 'fd' [ 500.610990][ T50] IPVS: stop unused estimator thread 0... [ 500.638171][ T8862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.722456][ T8862] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.804283][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.810622][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.843185][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 501.094391][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.101729][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.515480][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.522624][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.809491][ T9177] tipc: Started in network mode [ 501.844254][ T9177] tipc: Node identity 80000001, cluster identity 4711 [ 501.851057][ T9177] tipc: Node number set to 2147483649 [ 501.976980][ T9177] tipc: Cannot configure node identity twice [ 502.365900][ T5840] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 502.375812][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 502.375858][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 502.375883][ T5840] Workqueue: hci4 hci_rx_work [ 502.375927][ T5840] Call Trace: [ 502.375938][ T5840] [ 502.375952][ T5840] dump_stack_lvl+0x100/0x190 [ 502.376008][ T5840] sysfs_warn_dup.cold+0x1c/0x28 [ 502.376063][ T5840] sysfs_create_dir_ns+0x24b/0x2b0 [ 502.376122][ T5840] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 502.376179][ T5840] ? find_held_lock+0x2b/0x80 [ 502.376220][ T5840] ? kobject_add_internal+0x25f/0x930 [ 502.376279][ T5840] ? kobject_add_internal+0x25f/0x930 [ 502.376340][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.376387][ T5840] ? do_raw_spin_unlock+0x145/0x1e0 [ 502.376426][ T5840] kobject_add_internal+0x2c8/0x930 [ 502.376493][ T5840] kobject_add+0x16a/0x1e0 [ 502.376557][ T5840] ? __pfx_kobject_add+0x10/0x10 [ 502.376613][ T5840] ? class_to_subsys+0x10f/0x150 [ 502.376661][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.376708][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.376753][ T5840] ? kobject_put+0xb9/0x640 [ 502.376808][ T5840] ? _raw_spin_unlock+0x28/0x50 [ 502.376863][ T5840] device_add+0x294/0x1950 [ 502.376906][ T5840] ? __pfx_dev_set_name+0x10/0x10 [ 502.376960][ T5840] ? __pfx_device_add+0x10/0x10 [ 502.377004][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.377049][ T5840] ? mgmt_send_event_skb+0x2fb/0x460 [ 502.377106][ T5840] hci_conn_add_sysfs+0x1a3/0x260 [ 502.377159][ T5840] le_conn_complete_evt+0x11cb/0x1f40 [ 502.377214][ T5840] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 502.377255][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.377315][ T5840] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 502.377363][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.377421][ T5840] ? skb_pull_data+0x15f/0x1e0 [ 502.377488][ T5840] hci_le_meta_evt+0x34a/0x5f0 [ 502.377541][ T5840] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 502.377593][ T5840] hci_event_packet+0x682/0x11c0 [ 502.377638][ T5840] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 502.377688][ T5840] ? __pfx_hci_event_packet+0x10/0x10 [ 502.377733][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.377782][ T5840] ? kcov_remote_start+0x374/0x660 [ 502.377824][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 502.377873][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.377930][ T5840] hci_rx_work+0x451/0xfc0 [ 502.377982][ T5840] process_one_work+0x9d7/0x1920 [ 502.378062][ T5840] ? __pfx_process_one_work+0x10/0x10 [ 502.378120][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.378180][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.378233][ T5840] worker_thread+0x5da/0xe40 [ 502.378309][ T5840] ? kthread+0x13a/0x450 [ 502.378361][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 502.378417][ T5840] kthread+0x370/0x450 [ 502.378469][ T5840] ? __pfx_kthread+0x10/0x10 [ 502.378533][ T5840] ret_from_fork+0x754/0xd80 [ 502.378596][ T5840] ? __pfx_ret_from_fork+0x10/0x10 [ 502.378656][ T5840] ? srso_alias_return_thunk+0x5/0xfbef5 [ 502.378700][ T5840] ? __switch_to+0x7b4/0x1120 [ 502.378741][ T5840] ? __pfx_kthread+0x10/0x10 [ 502.378798][ T5840] ret_from_fork_asm+0x1a/0x30 [ 502.378863][ T5840] [ 502.741060][ T5840] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 502.755544][ T5840] Bluetooth: hci4: failed to register connection device [ 503.288369][ T8862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.681402][ T9225] fuse: Bad value for 'fd' [ 504.924319][ T972] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 505.109646][ T972] usb 2-1: Using ep0 maxpacket: 32 [ 505.151735][ T972] usb 2-1: config 0 interface 0 has no altsetting 0 [ 505.173544][ T972] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 505.196108][ T8862] veth0_vlan: entered promiscuous mode [ 505.234076][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.270967][ T8862] veth1_vlan: entered promiscuous mode [ 505.284134][ T972] usb 2-1: Product: syz [ 505.288342][ T972] usb 2-1: Manufacturer: syz [ 505.292994][ T972] usb 2-1: SerialNumber: syz [ 505.329192][ T972] usb 2-1: config 0 descriptor?? [ 505.500611][ T8862] veth0_macvtap: entered promiscuous mode [ 505.551021][ T8862] veth1_macvtap: entered promiscuous mode [ 505.680575][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.764146][ T30] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 505.767304][ T8862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.826208][ T972] gs_usb 2-1:0.0: Configuring for 238 interfaces [ 505.898141][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.956142][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.987949][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.016746][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.025692][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 506.035838][ T972] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 506.044862][ T30] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 506.053059][ T30] usb 4-1: config 0 has no interface number 0 [ 506.082832][ T972] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 506.090930][ T30] usb 4-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 506.122671][ T972] usb 2-1: USB disconnect, device number 16 [ 506.130017][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.154165][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5310 ms [ 506.162237][ C1] lec:lec_tx_timeout: lec0 [ 506.194203][ T30] usb 4-1: config 0 descriptor?? [ 506.453857][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.478884][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.657023][ T7846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.730746][ T7846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.143167][ T30] snd-usb-audio 4-1:0.255: probe with driver snd-usb-audio failed with error -71 [ 507.191922][ T30] usb 4-1: USB disconnect, device number 15 [ 508.114087][ T9282] xt_l2tp: v2 tid > 0xffff: 37482740 [ 509.095384][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.7.997'. [ 509.565058][ T5807] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 509.830489][ T5807] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 509.885318][ T5807] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 509.926528][ T5807] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.162583][ T5807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 510.194321][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.212562][ T5807] usb 4-1: Product: syz [ 510.229855][ T5807] usb 4-1: Manufacturer: syz [ 510.269018][ T5807] usb 4-1: SerialNumber: syz [ 510.309179][ T5807] hub 4-1:1.0: bad descriptor, ignoring hub [ 510.338437][ T5807] hub 4-1:1.0: probe with driver hub failed with error -5 [ 511.704931][ T5807] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 511.934981][ T5807] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 513.607617][ T5807] usb 4-1: device descriptor read/all, error -71 [ 516.155483][ T5807] usb 4-1: USB disconnect, device number 16 [ 516.228613][ T5807] usblp0: removed [ 517.319568][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 522.177678][ T6810] lec:lec_start_xmit: lec0:No lecd attached [ 523.224252][ T5841] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 523.232059][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 523.287641][ T972] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 523.424088][ T5841] usb 2-1: device descriptor read/64, error -32 [ 524.104443][ T5841] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 524.304440][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 524.359483][ T5841] usb 2-1: config 0 interface 0 has no altsetting 0 [ 524.464046][ T5841] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 524.504062][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.555284][ T5841] usb 2-1: config 0 descriptor?? [ 525.007669][ T5841] hid (null): bogus close delimiter [ 526.374622][ T9] usb 2-1: USB disconnect, device number 18 [ 527.194027][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 527.202190][ C1] lec:lec_tx_timeout: lec0 [ 529.154340][ T6026] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 533.276887][ T9468] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 544.371935][ T9544] netlink: 'syz.8.1067': attribute type 2 has an invalid length. [ 552.578622][ T9596] syz_tun: entered allmulticast mode [ 552.777976][ T9600] syz_tun: left allmulticast mode [ 552.864167][ T6026] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 559.124781][ T9641] syz.8.1093 (9641) used greatest stack depth: 19704 bytes left [ 562.248988][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.255388][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.324229][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 567.334019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.342077][ C1] lec:lec_tx_timeout: lec0 [ 574.898750][ T9758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.912437][ T9758] bond0: (slave rose0): Enslaving as an active interface with an up link [ 578.094456][ T9777] xfs: Unknown parameter 'ny' [ 578.334221][ T9444] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 579.819763][ T9444] usb 9-1: device descriptor read/64, error -71 [ 580.114124][ T9444] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 580.337223][ T9444] usb 9-1: device descriptor read/64, error -71 [ 580.684581][ T9444] usb usb9-port1: attempt power cycle [ 580.974173][ T5807] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 581.074121][ T9444] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 581.294402][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.324050][ T9444] usb 9-1: device not accepting address 4, error -71 [ 581.350482][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 581.414792][ T5807] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 581.459721][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.519654][ T5807] usb 4-1: config 0 descriptor?? [ 582.185095][ T5807] waterforce 0003:1044:7A4D.0006: item fetching failed at offset 0/1 [ 582.224321][ T5807] waterforce 0003:1044:7A4D.0006: hid parse failed with -22 [ 582.247110][ T5807] waterforce 0003:1044:7A4D.0006: probe with driver waterforce failed with error -22 [ 583.084581][ T5807] usb 4-1: USB disconnect, device number 19 [ 584.774571][ T9835] loop8: detected capacity change from 0 to 7 [ 584.859966][ T9835] Dev loop8: unable to read RDB block 7 [ 584.898311][ T9835] loop8: unable to read partition table [ 584.946071][ T9835] loop8: partition table beyond EOD, truncated [ 584.994200][ T9835] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 587.803513][ T9851] usb usb8: usbfs: process 9851 (syz.1.1145) did not claim interface 0 before use [ 588.344120][ T5964] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 588.504805][ T5964] usb 7-1: device descriptor read/64, error -71 [ 588.904140][ T5964] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 589.084072][ T5964] usb 7-1: device descriptor read/64, error -71 [ 589.228826][ T5964] usb usb7-port1: attempt power cycle [ 589.637044][ T5964] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 589.715039][ T5964] usb 7-1: device descriptor read/8, error -71 [ 589.914586][ T9855] Bluetooth: hci6: command 0x0406 tx timeout [ 589.974142][ T5964] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 590.055285][ T5964] usb 7-1: device descriptor read/8, error -71 [ 590.205134][ T5964] usb usb7-port1: unable to enumerate USB device [ 591.663099][ T6810] lec:lec_start_xmit: lec0:No lecd attached [ 591.785348][ T5140] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 592.000128][ T9905] xt_TPROXY: Can be used only with -p tcp or -p udp [ 597.204004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 597.212034][ C1] lec:lec_tx_timeout: lec0 [ 599.696914][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1170'. [ 599.706433][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1170'. [ 599.884095][ T5807] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 600.059079][ T5807] usb 9-1: device descriptor read/64, error -71 [ 600.634384][ T5807] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 600.807059][ T5807] usb 9-1: device descriptor read/64, error -71 [ 600.917920][ T5807] usb usb9-port1: attempt power cycle [ 601.296073][ T5807] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 601.336284][ T5807] usb 9-1: device descriptor read/8, error -71 [ 602.494048][ T5807] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 602.545393][ T5807] usb 9-1: device descriptor read/8, error -71 [ 602.692876][ T5807] usb usb9-port1: unable to enumerate USB device [ 602.830262][ T9976] netlink: 232 bytes leftover after parsing attributes in process `syz.8.1180'. [ 603.575943][ T9983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'. [ 603.592556][ T9983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'. [ 608.758097][ T5807] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 608.944214][ T5807] usb 9-1: device descriptor read/64, error -71 [ 611.014030][ T5807] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 612.394144][ T972] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 614.344053][ T972] usb 4-1: Using ep0 maxpacket: 16 [ 614.372459][ T972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.445283][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.493486][ T972] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 614.574061][ T972] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 614.620595][ T972] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.682596][ T972] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 614.723148][ T972] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 614.864083][ T972] usb 4-1: Manufacturer: syz [ 614.954158][ T972] usb 4-1: config 0 descriptor?? [ 614.973764][ T972] usb 4-1: can't set config #0, error -71 [ 616.928229][ T972] usb 4-1: USB disconnect, device number 20 [ 624.254571][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.260930][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.274217][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 625.412386][ T30] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 625.574492][ T30] usb 9-1: device descriptor read/64, error -71 [ 625.894977][ T5964] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 627.236114][ T30] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 627.238284][T10131] netlink: 'syz.1.1226': attribute type 1 has an invalid length. [ 627.737108][T10131] netlink: 728 bytes leftover after parsing attributes in process `syz.1.1226'. [ 627.749761][ T5964] usb 7-1: no configurations [ 627.786438][ T5964] usb 7-1: can't read configurations, error -22 [ 627.964701][ T5964] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 627.995253][ T9444] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 628.079794][T10137] binder: BINDER_SET_CONTEXT_MGR already set [ 628.098595][T10137] binder: 10134:10137 ioctl 4018620d 200000000040 returned -16 [ 628.524497][ T9444] usb 4-1: Using ep0 maxpacket: 32 [ 628.620802][ T9444] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.649506][ T9444] usb 4-1: config 0 has no interfaces? [ 628.659678][ T9444] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 628.709380][ T9444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.739229][ T5964] usb 7-1: device descriptor read/all, error -71 [ 628.774068][ T9444] usb 4-1: Product: syz [ 628.778304][ T9444] usb 4-1: Manufacturer: syz [ 628.779591][ T5964] usb usb7-port1: attempt power cycle [ 628.833624][ T9444] usb 4-1: SerialNumber: syz [ 628.898984][ T9444] usb 4-1: config 0 descriptor?? [ 629.094690][ T9444] usb 4-1: USB disconnect, device number 21 [ 629.283977][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 629.291995][ C1] lec:lec_tx_timeout: lec0 [ 631.444171][ T6026] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 631.611821][ T6026] usb 8-1: Using ep0 maxpacket: 32 [ 631.638424][ T6026] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 631.667217][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.732506][ T6026] usb 8-1: config 0 descriptor?? [ 631.939457][ T5964] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 631.966012][ T6026] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 632.021141][ T6026] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 632.034322][ T30] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 632.071941][ T6026] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 632.095148][ T6026] usb 8-1: media controller created [ 632.126165][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 632.169781][T10172] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 632.179781][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 632.188595][ T6026] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 632.225351][ T30] usb 9-1: no configurations [ 632.229987][ T30] usb 9-1: can't read configurations, error -22 [ 632.244471][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 632.295902][ T6026] az6027: usb out operation failed. (-71) [ 632.302065][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 632.312282][ T6026] az6027: usb out operation failed. (-71) [ 632.330105][ T6026] stb0899_attach: Driver disabled by Kconfig [ 632.342632][ T6026] az6027: no front-end attached [ 632.342632][ T6026] [ 632.360403][ T6026] az6027: usb out operation failed. (-71) [ 632.368373][ T5964] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 632.384033][ T30] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 632.401291][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.409461][ T6026] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 632.479179][ T5964] usb 5-1: Product: syz [ 632.485436][ T5964] usb 5-1: Manufacturer: syz [ 632.490179][ T5964] usb 5-1: SerialNumber: syz [ 632.526046][ T6026] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9 [ 632.639266][ T30] usb 9-1: no configurations [ 632.701730][ T6026] dvb-usb: schedule remote query interval to 400 msecs. [ 632.711438][ T6026] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 632.740553][ T30] usb 9-1: can't read configurations, error -22 [ 632.758130][ T5964] usb 5-1: config 0 descriptor?? [ 632.761126][ T6026] usb 8-1: USB disconnect, device number 15 [ 632.796078][ T30] usb usb9-port1: attempt power cycle [ 633.271138][ T5964] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 633.305324][ T30] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 633.395728][ T30] usb 9-1: no configurations [ 633.396421][ T6026] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 633.400350][ T30] usb 9-1: can't read configurations, error -22 [ 633.434083][ T9444] usb 5-1: USB disconnect, device number 17 [ 633.684580][ T30] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 634.025320][ T30] usb 9-1: no configurations [ 634.044899][ T30] usb 9-1: can't read configurations, error -22 [ 634.115377][ T30] usb usb9-port1: unable to enumerate USB device [ 641.415824][T10255] overlay: Unknown parameter '/' [ 642.234611][ T5964] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 642.850752][ T5964] usb 4-1: no configurations [ 642.866264][ T5964] usb 4-1: can't read configurations, error -22 [ 643.185779][ T5964] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 643.405550][ T5964] usb 4-1: no configurations [ 643.410275][ T5964] usb 4-1: can't read configurations, error -22 [ 643.433467][ T5964] usb usb4-port1: attempt power cycle [ 644.084650][ T5964] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 644.329636][ T5964] usb 4-1: no configurations [ 644.353780][ T5964] usb 4-1: can't read configurations, error -22 [ 644.615120][ T5964] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 644.677444][ T5964] usb 4-1: no configurations [ 644.704382][ T5964] usb 4-1: can't read configurations, error -22 [ 644.725366][ T5964] usb usb4-port1: unable to enumerate USB device [ 647.918789][T10335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.230894][T10338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1295'. [ 648.856775][ T6026] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 649.052448][ T6026] usb 7-1: no configurations [ 649.068754][ T6026] usb 7-1: can't read configurations, error -22 [ 649.235004][ T6026] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 649.426324][ T6026] usb 7-1: no configurations [ 649.430963][ T6026] usb 7-1: can't read configurations, error -22 [ 649.804530][ T6026] usb usb7-port1: attempt power cycle [ 649.909743][T10365] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 650.144136][ T6026] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 650.211648][ T6026] usb 7-1: no configurations [ 650.223984][ T6026] usb 7-1: can't read configurations, error -22 [ 650.684399][ T6026] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 651.572726][ T6026] usb 7-1: device descriptor read/8, error -71 [ 651.741140][ T6026] usb usb7-port1: unable to enumerate USB device [ 651.909666][T10389] netlink: 'syz.8.1311': attribute type 25 has an invalid length. [ 651.933676][T10389] netlink: 'syz.8.1311': attribute type 7 has an invalid length. [ 651.962401][T10389] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1311'. [ 652.114095][ T6026] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 652.305938][ T6026] usb 7-1: Using ep0 maxpacket: 16 [ 652.514388][ T6026] usb 7-1: too many configurations: 218, using maximum allowed: 8 [ 652.555627][ T6026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.591704][ T6026] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 652.674943][ T6026] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 652.770809][ T6026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.801585][ T6026] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 652.876685][ T6026] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 652.946482][ T6026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.987194][ T6026] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 653.079694][ T6026] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 653.148901][ T6026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.276929][ T6026] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 653.328553][ T6026] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 654.146942][ T6026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.191392][ T6026] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 654.234160][ T6026] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 654.314387][T10126] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 654.323420][ T6026] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.381016][ T6026] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 654.660082][T10126] usb 4-1: Using ep0 maxpacket: 32 [ 655.393998][ T6026] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 655.416701][T10126] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.445287][T10126] usb 4-1: config 0 has no interfaces? [ 655.455482][T10126] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 655.464731][T10126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.473287][T10126] usb 4-1: Product: syz [ 655.477601][T10126] usb 4-1: Manufacturer: syz [ 655.483340][T10126] usb 4-1: SerialNumber: syz [ 655.493070][T10126] usb 4-1: config 0 descriptor?? [ 655.852755][ T9444] usb 4-1: USB disconnect, device number 26 [ 656.003434][ T6026] usb 7-1: unable to read config index 6 descriptor/start: -71 [ 656.074554][ T6026] usb 7-1: can't read configurations, error -71 [ 656.376990][ T6810] lec:lec_start_xmit: lec0:No lecd attached [ 657.139442][ T5140] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 657.151845][ T5140] CPU: 0 UID: 0 PID: 5140 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 657.151902][ T5140] Tainted: [L]=SOFTLOCKUP [ 657.151915][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 657.151941][ T5140] Workqueue: hci1 hci_rx_work [ 657.151986][ T5140] Call Trace: [ 657.151998][ T5140] [ 657.152011][ T5140] dump_stack_lvl+0x100/0x190 [ 657.152068][ T5140] sysfs_warn_dup.cold+0x1c/0x28 [ 657.152122][ T5140] sysfs_create_dir_ns+0x24b/0x2b0 [ 657.152181][ T5140] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 657.152238][ T5140] ? find_held_lock+0x2b/0x80 [ 657.152278][ T5140] ? kobject_add_internal+0x25f/0x930 [ 657.152337][ T5140] ? kobject_add_internal+0x25f/0x930 [ 657.152398][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.152446][ T5140] ? do_raw_spin_unlock+0x145/0x1e0 [ 657.152483][ T5140] kobject_add_internal+0x2c8/0x930 [ 657.152544][ T5140] kobject_add+0x16a/0x1e0 [ 657.152596][ T5140] ? __pfx_kobject_add+0x10/0x10 [ 657.152647][ T5140] ? class_to_subsys+0x10f/0x150 [ 657.152698][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.152741][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.152782][ T5140] ? kobject_put+0xb9/0x640 [ 657.152832][ T5140] ? _raw_spin_unlock+0x28/0x50 [ 657.152883][ T5140] device_add+0x294/0x1950 [ 657.152923][ T5140] ? __pfx_dev_set_name+0x10/0x10 [ 657.152971][ T5140] ? __pfx_device_add+0x10/0x10 [ 657.153011][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.153051][ T5140] ? mgmt_send_event_skb+0x2fb/0x460 [ 657.153104][ T5140] hci_conn_add_sysfs+0x1a3/0x260 [ 657.153153][ T5140] le_conn_complete_evt+0x11cb/0x1f40 [ 657.153204][ T5140] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 657.153241][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.153296][ T5140] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 657.153340][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.153381][ T5140] ? skb_pull_data+0x15f/0x1e0 [ 657.153441][ T5140] hci_le_meta_evt+0x34a/0x5f0 [ 657.153485][ T5140] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 657.153533][ T5140] hci_event_packet+0x682/0x11c0 [ 657.153573][ T5140] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 657.153619][ T5140] ? __pfx_hci_event_packet+0x10/0x10 [ 657.153664][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.153708][ T5140] ? kcov_remote_start+0x374/0x660 [ 657.153747][ T5140] ? lockdep_hardirqs_on+0x78/0x100 [ 657.153793][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.153843][ T5140] hci_rx_work+0x451/0xfc0 [ 657.153890][ T5140] process_one_work+0x9d7/0x1920 [ 657.153967][ T5140] ? __pfx_process_one_work+0x10/0x10 [ 657.154020][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.154074][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.154122][ T5140] worker_thread+0x5da/0xe40 [ 657.154186][ T5140] ? __pfx_worker_thread+0x10/0x10 [ 657.154241][ T5140] ? kthread+0x13a/0x450 [ 657.154289][ T5140] ? __pfx_worker_thread+0x10/0x10 [ 657.154339][ T5140] kthread+0x370/0x450 [ 657.154387][ T5140] ? __pfx_kthread+0x10/0x10 [ 657.154438][ T5140] ret_from_fork+0x754/0xd80 [ 657.154494][ T5140] ? __pfx_ret_from_fork+0x10/0x10 [ 657.154549][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 657.154590][ T5140] ? __switch_to+0x7b4/0x1120 [ 657.154627][ T5140] ? __pfx_kthread+0x10/0x10 [ 657.154684][ T5140] ret_from_fork_asm+0x1a/0x30 [ 657.154741][ T5140] [ 657.586834][ T5140] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 657.601070][ T5140] Bluetooth: hci1: failed to register connection device [ 658.015950][ T5926] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 658.208340][ T5926] usb 5-1: no configurations [ 658.240644][ T5926] usb 5-1: can't read configurations, error -22 [ 658.395825][ T5926] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 658.726463][ T5926] usb 5-1: no configurations [ 658.751416][ T5926] usb 5-1: can't read configurations, error -22 [ 659.554953][ T5926] usb usb5-port1: attempt power cycle [ 662.163982][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5790 ms [ 662.172473][ C1] lec:lec_tx_timeout: lec0 [ 662.304197][ T5926] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 663.124027][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 663.145251][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.214038][ T5926] usb 2-1: config 0 has no interfaces? [ 663.292338][ T5926] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 663.364067][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.413684][ T5926] usb 2-1: Product: syz [ 663.448477][ T5926] usb 2-1: Manufacturer: syz [ 663.453127][ T5926] usb 2-1: SerialNumber: syz [ 663.508976][ T5926] usb 2-1: config 0 descriptor?? [ 664.154405][ T5926] usb 2-1: USB disconnect, device number 19 [ 664.748706][ T5926] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 665.910697][ T5926] usb 9-1: no configurations [ 665.937694][ T5926] usb 9-1: can't read configurations, error -22 [ 666.104070][ T5926] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 666.584844][ T5140] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 667.204201][ T5926] usb 9-1: no configurations [ 667.232146][ T5926] usb 9-1: can't read configurations, error -22 [ 667.300503][ T5926] usb usb9-port1: attempt power cycle [ 669.111050][ T5926] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 669.257823][ T5926] usb 9-1: device descriptor read/8, error -71 [ 671.334168][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 672.185447][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 672.884518][ T24] usb 7-1: device descriptor read/all, error -71 [ 673.037531][T10559] netlink: 'syz.4.1365': attribute type 4 has an invalid length. [ 674.659645][ T5926] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 674.931062][ T9855] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 675.646182][T10578] vivid-002: disconnect [ 675.713046][ T5926] usb 5-1: config 0 has no interfaces? [ 675.749286][ T5926] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 675.778069][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.800205][ T5926] usb 5-1: Product: syz [ 675.813845][ T5926] usb 5-1: Manufacturer: syz [ 675.830015][ T5926] usb 5-1: SerialNumber: syz [ 675.859829][ T5926] usb 5-1: config 0 descriptor?? [ 678.177833][T10577] vivid-002: reconnect [ 678.395618][ T5964] usb 5-1: USB disconnect, device number 21 [ 682.224103][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 682.574637][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 682.588862][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.649138][ T24] usb 9-1: config 0 has no interfaces? [ 682.670239][ T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 682.699523][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.721381][ T24] usb 9-1: Product: syz [ 682.738624][ T24] usb 9-1: Manufacturer: syz [ 682.762820][ T24] usb 9-1: SerialNumber: syz [ 682.789758][ T24] usb 9-1: config 0 descriptor?? [ 683.424363][ T24] usb 9-1: USB disconnect, device number 22 [ 683.774360][ T30] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 684.044394][ T6026] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 684.297658][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.308819][ T6026] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.338952][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 684.354136][ T6026] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.384018][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.418052][ T6026] usb 8-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 684.438259][ T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.499153][ T6026] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.504807][ T30] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 684.546870][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.555090][ T6026] usb 8-1: config 0 descriptor?? [ 684.624206][ T30] usb 4-1: Product: syz [ 684.628439][ T30] usb 4-1: Manufacturer: syz [ 684.677128][ T30] usb 4-1: SerialNumber: syz [ 684.755150][ T30] usb 4-1: config 0 descriptor?? [ 684.778455][ T30] mcba_usb 4-1:0.0: Can't find endpoints [ 684.993538][ T6026] magicmouse 0003:05AC:0324.0007: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.7-1/input0 [ 685.016102][ T5140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 685.028260][ T5140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 685.055341][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 685.077871][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 685.086272][ T5140] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.144729][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.151179][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.174128][ T30] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 685.179279][ T6026] usb 8-1: USB disconnect, device number 16 [ 685.190259][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 685.269707][ T9] usb 4-1: USB disconnect, device number 27 [ 685.493425][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 685.506727][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.517676][ T30] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.539423][ T30] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 685.556334][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.335279][ T30] usb 5-1: Product: syz [ 686.339480][ T30] usb 5-1: Manufacturer: syz [ 686.344134][ T30] usb 5-1: SerialNumber: syz [ 686.634301][ T30] usb 5-1: 0:2 : does not exist [ 687.240437][ T5140] Bluetooth: hci0: command tx timeout [ 687.333262][ T6026] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 687.335443][ T30] usb 5-1: USB disconnect, device number 22 [ 687.927968][T10641] overlay: Unknown parameter '/' [ 687.935066][ T6026] usb 7-1: config 0 has no interfaces? [ 687.943733][ T6026] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 687.953095][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.961678][ T6026] usb 7-1: Product: syz [ 687.966326][ T6026] usb 7-1: Manufacturer: syz [ 687.966846][T10436] udevd[10436]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 687.970934][ T6026] usb 7-1: SerialNumber: syz [ 688.054681][ T6026] usb 7-1: config 0 descriptor?? [ 688.291535][T10630] chnl_net:caif_netlink_parms(): no params data found [ 688.339152][ T5964] usb 7-1: USB disconnect, device number 25 [ 688.949946][ T5140] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 688.962022][ T5140] CPU: 0 UID: 0 PID: 5140 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.962078][ T5140] Tainted: [L]=SOFTLOCKUP [ 688.962091][ T5140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.962117][ T5140] Workqueue: hci5 hci_rx_work [ 688.962163][ T5140] Call Trace: [ 688.962175][ T5140] [ 688.962188][ T5140] dump_stack_lvl+0x100/0x190 [ 688.962248][ T5140] sysfs_warn_dup.cold+0x1c/0x28 [ 688.962307][ T5140] sysfs_create_dir_ns+0x24b/0x2b0 [ 688.962367][ T5140] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 688.962424][ T5140] ? find_held_lock+0x2b/0x80 [ 688.962465][ T5140] ? kobject_add_internal+0x25f/0x930 [ 688.962524][ T5140] ? kobject_add_internal+0x25f/0x930 [ 688.962586][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.962633][ T5140] ? do_raw_spin_unlock+0x145/0x1e0 [ 688.962673][ T5140] kobject_add_internal+0x2c8/0x930 [ 688.962740][ T5140] kobject_add+0x16a/0x1e0 [ 688.962799][ T5140] ? __pfx_kobject_add+0x10/0x10 [ 688.962856][ T5140] ? preempt_schedule_thunk+0x16/0x30 [ 688.962912][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.962964][ T5140] ? kobject_put+0xb9/0x640 [ 688.963017][ T5140] ? _raw_spin_unlock+0x3e/0x50 [ 688.963073][ T5140] device_add+0x294/0x1950 [ 688.963119][ T5140] ? __pfx_dev_set_name+0x10/0x10 [ 688.963173][ T5140] ? __pfx_device_add+0x10/0x10 [ 688.963216][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.963262][ T5140] ? mgmt_send_event_skb+0x2fb/0x460 [ 688.963321][ T5140] hci_conn_add_sysfs+0x1a3/0x260 [ 688.963374][ T5140] le_conn_complete_evt+0x11cb/0x1f40 [ 688.963431][ T5140] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 688.963473][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.963534][ T5140] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 688.963583][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.963628][ T5140] ? skb_pull_data+0x15f/0x1e0 [ 688.963696][ T5140] hci_le_meta_evt+0x34a/0x5f0 [ 688.963744][ T5140] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 688.963798][ T5140] hci_event_packet+0x682/0x11c0 [ 688.963844][ T5140] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 688.963894][ T5140] ? __pfx_hci_event_packet+0x10/0x10 [ 688.963956][ T5140] ? kcov_remote_start+0x384/0x660 [ 688.964011][ T5140] hci_rx_work+0x451/0xfc0 [ 688.964063][ T5140] process_one_work+0x9d7/0x1920 [ 688.964144][ T5140] ? __pfx_process_one_work+0x10/0x10 [ 688.964203][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.964263][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.964317][ T5140] worker_thread+0x5da/0xe40 [ 688.964390][ T5140] ? __pfx_worker_thread+0x10/0x10 [ 688.964451][ T5140] ? kthread+0x13a/0x450 [ 688.964504][ T5140] ? __pfx_worker_thread+0x10/0x10 [ 688.964560][ T5140] kthread+0x370/0x450 [ 688.964614][ T5140] ? __pfx_kthread+0x10/0x10 [ 688.964672][ T5140] ret_from_fork+0x754/0xd80 [ 688.964733][ T5140] ? __pfx_ret_from_fork+0x10/0x10 [ 688.964795][ T5140] ? srso_alias_return_thunk+0x5/0xfbef5 [ 688.964841][ T5140] ? __switch_to+0x7b4/0x1120 [ 688.964882][ T5140] ? __pfx_kthread+0x10/0x10 [ 688.964945][ T5140] ret_from_fork_asm+0x1a/0x30 [ 688.965010][ T5140] [ 689.274324][ T9855] Bluetooth: hci0: command tx timeout [ 689.437501][ T5140] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 689.451691][ T5140] Bluetooth: hci5: failed to register connection device [ 689.760435][T10630] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.767914][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.775938][T10630] bridge_slave_0: entered allmulticast mode [ 689.784815][T10630] bridge_slave_0: entered promiscuous mode [ 689.795342][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.802938][T10630] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.810531][T10630] bridge_slave_1: entered allmulticast mode [ 689.855173][T10630] bridge_slave_1: entered promiscuous mode [ 690.203974][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 690.212046][ C1] lec:lec_tx_timeout: lec0 [ 691.162903][T10630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.265823][T10630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.556219][ T6026] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 691.565887][ T5140] Bluetooth: hci0: command tx timeout [ 691.826055][ T6026] usb 4-1: Using ep0 maxpacket: 32 [ 691.860341][ T6026] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 691.974826][ T6026] usb 4-1: config 0 has no interfaces? [ 692.376096][ T6026] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 692.429073][ T6026] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.494654][T10679] syz_tun: entered allmulticast mode [ 692.503863][ T6026] usb 4-1: Product: syz [ 692.563947][ T6026] usb 4-1: Manufacturer: syz [ 692.621311][ T6026] usb 4-1: SerialNumber: syz [ 692.723717][T10679] syz_tun: left allmulticast mode [ 693.022353][ T6026] usb 4-1: config 0 descriptor?? [ 693.091045][ T9] infiniband syz1: ib_query_port failed (-19) [ 693.157738][ T6026] usb 4-1: can't set config #0, error -71 [ 693.415678][T10630] team0: Port device team_slave_0 added [ 693.424527][T10630] team0: Port device team_slave_1 added [ 693.555347][ T6026] usb 4-1: USB disconnect, device number 28 [ 693.650678][ T5140] Bluetooth: hci0: command tx timeout [ 694.926513][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.047252][T10630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.082766][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.170717][T10630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.330368][T10630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.394361][ T6026] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 695.414092][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.544131][T10630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.616064][ T6026] usb 9-1: config 0 has no interfaces? [ 696.740396][ T5140] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 696.756402][ T6026] usb 9-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 696.772372][ T6026] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.800189][ T6026] usb 9-1: Product: syz [ 696.826957][ T6026] usb 9-1: Manufacturer: syz [ 696.831613][ T6026] usb 9-1: SerialNumber: syz [ 696.926728][ T6026] usb 9-1: config 0 descriptor?? [ 696.941275][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.184441][ T5964] usb 9-1: USB disconnect, device number 23 [ 697.250291][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.465606][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.592485][T10630] hsr_slave_0: entered promiscuous mode [ 697.620805][T10630] hsr_slave_1: entered promiscuous mode [ 697.663122][T10630] debugfs: 'hsr0' already exists in 'hsr' [ 697.696063][T10630] Cannot create hsr debugfs directory [ 702.967163][T10746] syz_tun: entered allmulticast mode [ 703.007997][T10746] syz_tun: left allmulticast mode [ 703.060194][ T12] bridge_slave_1: left allmulticast mode [ 703.069602][ T12] bridge_slave_1: left promiscuous mode [ 703.147910][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.272007][ T12] bridge_slave_0: left allmulticast mode [ 703.293526][ T12] bridge_slave_0: left promiscuous mode [ 703.303618][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.868665][T10768] fuse: Bad value for 'group_id' [ 703.914321][T10768] fuse: Bad value for 'group_id' [ 704.195256][ T5964] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 704.404461][ T5964] usb 4-1: Using ep0 maxpacket: 8 [ 704.418901][ T5964] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 704.440904][ T12] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 704.461415][ T5964] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 704.481925][ T12] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ea:0b:34:21:8b:52 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 704.519034][ T5964] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 704.539869][ T5964] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 704.634637][ T5964] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 704.678455][ T5964] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.733729][ T5964] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.841462][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.178060][T10770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.204129][ T6026] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 705.387855][ T9855] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 705.398347][ T9855] CPU: 0 UID: 0 PID: 9855 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.398407][ T9855] Tainted: [L]=SOFTLOCKUP [ 705.398423][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 705.398449][ T9855] Workqueue: hci6 hci_rx_work [ 705.398495][ T9855] Call Trace: [ 705.398507][ T9855] [ 705.398520][ T9855] dump_stack_lvl+0x100/0x190 [ 705.398579][ T9855] sysfs_warn_dup.cold+0x1c/0x28 [ 705.398634][ T9855] sysfs_create_dir_ns+0x24b/0x2b0 [ 705.398693][ T9855] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 705.398761][ T9855] ? kobject_add_internal+0x292/0x930 [ 705.398828][ T9855] kobject_add_internal+0x2c8/0x930 [ 705.398896][ T9855] kobject_add+0x16a/0x1e0 [ 705.398962][ T9855] ? __pfx_kobject_add+0x10/0x10 [ 705.399019][ T9855] ? class_to_subsys+0x10f/0x150 [ 705.399070][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.399118][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.399164][ T9855] ? kobject_put+0xb9/0x640 [ 705.399217][ T9855] ? _raw_spin_unlock+0x28/0x50 [ 705.399273][ T9855] device_add+0x294/0x1950 [ 705.399318][ T9855] ? __pfx_dev_set_name+0x10/0x10 [ 705.399371][ T9855] ? __pfx_device_add+0x10/0x10 [ 705.399415][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.399461][ T9855] ? mgmt_send_event_skb+0x2fb/0x460 [ 705.399519][ T9855] hci_conn_add_sysfs+0x1a3/0x260 [ 705.399574][ T9855] le_conn_complete_evt+0x11cb/0x1f40 [ 705.399631][ T9855] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 705.399675][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.399720][ T9855] ? lockdep_hardirqs_on+0x78/0x100 [ 705.399771][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.399816][ T9855] ? irqentry_exit+0x180/0x670 [ 705.399873][ T9855] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 705.399922][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.399974][ T9855] ? skb_pull_data+0x15f/0x1e0 [ 705.400046][ T9855] hci_le_meta_evt+0x34a/0x5f0 [ 705.400095][ T9855] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 705.400149][ T9855] hci_event_packet+0x682/0x11c0 [ 705.400194][ T9855] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 705.400246][ T9855] ? __pfx_hci_event_packet+0x10/0x10 [ 705.400291][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.400341][ T9855] ? kcov_remote_start+0x374/0x660 [ 705.400384][ T9855] ? lockdep_hardirqs_on+0x78/0x100 [ 705.400434][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.400491][ T9855] hci_rx_work+0x451/0xfc0 [ 705.400543][ T9855] process_one_work+0x9d7/0x1920 [ 705.400625][ T9855] ? __pfx_process_one_work+0x10/0x10 [ 705.400683][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.400744][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.400798][ T9855] worker_thread+0x5da/0xe40 [ 705.400870][ T9855] ? __pfx_worker_thread+0x10/0x10 [ 705.400932][ T9855] ? kthread+0x13a/0x450 [ 705.400992][ T9855] ? __pfx_worker_thread+0x10/0x10 [ 705.401050][ T9855] kthread+0x370/0x450 [ 705.401103][ T9855] ? __pfx_kthread+0x10/0x10 [ 705.401161][ T9855] ret_from_fork+0x754/0xd80 [ 705.401223][ T9855] ? __pfx_ret_from_fork+0x10/0x10 [ 705.401286][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 705.401331][ T9855] ? __switch_to+0x7b4/0x1120 [ 705.401373][ T9855] ? __pfx_kthread+0x10/0x10 [ 705.401430][ T9855] ret_from_fork_asm+0x1a/0x30 [ 705.401495][ T9855] [ 705.401752][ T9855] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 705.811306][ T9855] Bluetooth: hci6: failed to register connection device [ 705.820398][T10770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.865334][ T5964] usb 4-1: GET_CAPABILITIES returned 0 [ 705.895239][ T5964] usbtmc 4-1:16.0: can't read capabilities [ 705.973358][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.976181][ T6026] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.994595][ T6026] usb 7-1: config 0 has no interfaces? [ 706.002786][ T6026] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 706.013025][ T6026] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.022326][ T6026] usb 7-1: Product: syz [ 706.038275][ T6026] usb 7-1: Manufacturer: syz [ 706.049551][ T6026] usb 7-1: SerialNumber: syz [ 706.071096][ T5964] usb 4-1: USB disconnect, device number 29 [ 706.098329][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.103815][ T6026] usb 7-1: config 0 descriptor?? [ 706.175715][ T12] bond0 (unregistering): Released all slaves [ 706.221380][ T12] bond1 (unregistering): (slave veth3): Releasing active interface [ 706.254198][ T12] bond1 (unregistering): Released all slaves [ 706.439319][ T5964] usb 7-1: USB disconnect, device number 26 [ 706.541867][ T12] !9: left promiscuous mode [ 708.207023][T10804] syz_tun: entered allmulticast mode [ 708.231049][T10804] syz_tun: left allmulticast mode [ 708.387327][T10630] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 708.594637][T10630] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 708.664595][T10630] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 708.776021][ T5964] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 708.857041][ C1] hrtimer: interrupt took 25600 ns [ 708.963892][T10630] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 708.971255][ T5964] usb 8-1: Using ep0 maxpacket: 32 [ 709.003732][ T5964] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 709.047800][ T5964] usb 8-1: config 0 has no interface number 0 [ 709.070116][T10830] fuse: Bad value for 'group_id' [ 709.094166][ T5964] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 709.466365][ T5964] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 709.483799][T10830] fuse: Bad value for 'group_id' [ 709.501792][ T5964] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.546643][ T5964] usb 8-1: Product: syz [ 709.550982][ T5964] usb 8-1: Manufacturer: syz [ 709.586375][ T5964] usb 8-1: SerialNumber: syz [ 709.637343][ T12] hsr_slave_0: left promiscuous mode [ 709.651754][ T5964] usb 8-1: config 0 descriptor?? [ 709.690147][T10819] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 709.719833][ T12] hsr_slave_1: left promiscuous mode [ 709.741395][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.780071][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.842830][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.877987][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.957261][T10819] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 709.976584][ T12] veth1_macvtap: left promiscuous mode [ 710.009245][ T12] veth0_macvtap: left promiscuous mode [ 710.024035][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 710.034923][ T12] veth1_vlan: left promiscuous mode [ 710.048664][ T12] veth0_vlan: left promiscuous mode [ 710.254077][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 710.283821][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.346684][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 710.391032][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 710.418524][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 710.444371][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.729483][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.057082][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.067425][ T24] usb 5-1: Manufacturer: syz [ 711.127836][ T24] usb 5-1: config 0 descriptor?? [ 711.539952][ T24] rc_core: IR keymap rc-hauppauge not found [ 711.562629][ T24] Registered IR keymap rc-empty [ 711.577857][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.634224][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.670193][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 711.699714][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 711.726393][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.754205][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.784228][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.796502][ T5964] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 711.808441][ T12] team0 (unregistering): Port device team_slave_1 removed [ 711.813342][ T5964] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 711.829257][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.838797][ T5964] asix 8-1:0.188: probe with driver asix failed with error -71 [ 711.854143][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 711.854555][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.881509][ T5964] usb 8-1: USB disconnect, device number 17 [ 711.890503][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.902393][ T12] team0 (unregistering): Port device team_slave_0 removed [ 711.934302][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 711.988086][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.035632][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.036565][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.065585][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.084139][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 712.097511][ T9] usb 7-1: config 0 has no interfaces? [ 712.119447][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 712.136273][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.138749][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 712.157264][ T9] usb 7-1: Product: syz [ 712.172704][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 712.176078][ T9] usb 7-1: Manufacturer: syz [ 712.204503][ T24] usb 5-1: USB disconnect, device number 23 [ 712.205934][ T9] usb 7-1: SerialNumber: syz [ 712.266174][ T9] usb 7-1: config 0 descriptor?? [ 712.517140][ T9] usb 7-1: USB disconnect, device number 27 [ 712.860910][ T9855] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 712.900996][T10866] syz_tun: entered allmulticast mode [ 713.018499][T10871] syz_tun: left allmulticast mode [ 714.286305][T10882] fuse: Bad value for 'group_id' [ 714.291299][T10882] fuse: Bad value for 'group_id' [ 716.409019][T10630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.503709][T10630] 8021q: adding VLAN 0 to HW filter on device team0 [ 716.575252][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.582535][ T7846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.703327][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.710587][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.127435][ T5140] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 718.184417][ T5964] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 718.481537][T10630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.857788][ T5964] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.884790][ T5964] usb 7-1: config 0 has no interfaces? [ 718.906351][ T5964] usb 7-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 718.933443][ T5964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.956568][ T5964] usb 7-1: Product: syz [ 718.960791][ T5964] usb 7-1: Manufacturer: syz [ 718.974233][ T5964] usb 7-1: SerialNumber: syz [ 719.005123][ T5964] usb 7-1: config 0 descriptor?? [ 719.240812][ T9] usb 7-1: USB disconnect, device number 28 [ 719.828854][T10630] veth0_vlan: entered promiscuous mode [ 719.892346][T10630] veth1_vlan: entered promiscuous mode [ 720.089358][T10630] veth0_macvtap: entered promiscuous mode [ 721.512867][T10630] veth1_macvtap: entered promiscuous mode [ 721.599787][T10630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.650397][T10630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.741924][ T6043] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.770318][ T6043] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.816344][ T6043] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.844117][ T6043] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.596686][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 722.656958][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 722.811530][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.059275][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.349324][T11004] binder: 11001:11004 ioctl c0306201 0 returned -14 [ 724.164293][ T9855] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 724.522785][ T6810] lec:lec_start_xmit: lec0:No lecd attached [ 725.525457][T11044] fuse: Bad value for 'fd' [ 725.865228][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 727.184446][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 727.193719][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 727.253669][ T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 727.391490][ T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 727.412444][ T9] usb 8-1: Product: syz [ 727.427324][ T9] usb 8-1: Manufacturer: syz [ 727.431959][ T9] usb 8-1: SerialNumber: syz [ 727.452004][ T9] usb 8-1: config 0 descriptor?? [ 727.498194][T11046] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 727.541301][ T9] hub 8-1:0.0: bad descriptor, ignoring hub [ 727.554445][ T9] hub 8-1:0.0: probe with driver hub failed with error -5 [ 727.669392][T11066] binder: 11064:11066 ioctl c0306201 0 returned -14 [ 727.910512][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.941208][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.153955][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 730.162027][ C1] lec:lec_tx_timeout: lec0 [ 730.584496][T10126] usb 8-1: USB disconnect, device number 18 [ 731.574525][T11103] fuse: Bad value for 'fd' [ 734.158157][T11116] binder: 11115:11116 ioctl c0306201 0 returned -14 [ 737.205242][T11155] fuse: Bad value for 'fd' [ 744.267903][T11217] warning: `syz.7.1552' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 744.449641][T11222] syz_tun: entered allmulticast mode [ 744.625566][T11222] syz_tun: left allmulticast mode [ 745.002602][T11225] syzkaller0: entered promiscuous mode [ 746.875619][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.881970][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.891071][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 746.980155][T11225] syzkaller0: entered allmulticast mode [ 748.976498][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 749.174096][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 749.183474][ T24] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 749.220679][ T24] usb 7-1: config 0 has no interface number 0 [ 749.230820][ T24] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 749.268304][ T24] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 749.303422][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.340828][ T24] usb 7-1: Product: syz [ 749.345748][ T24] usb 7-1: Manufacturer: syz [ 749.350742][ T24] usb 7-1: SerialNumber: syz [ 749.379151][ T24] usb 7-1: config 0 descriptor?? [ 749.437425][T11254] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 749.688109][T11254] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 750.858502][ T24] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 750.884193][ T24] asix 7-1:0.188: probe with driver asix failed with error -32 [ 751.916500][ T9] usb 7-1: USB disconnect, device number 29 [ 752.163975][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 752.172064][ C1] lec:lec_tx_timeout: lec0 [ 752.760204][T11267] syz_tun: entered allmulticast mode [ 752.767132][T11267] syz_tun: left allmulticast mode [ 752.844034][ T5964] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 752.986023][ T5964] usb 7-1: device descriptor read/64, error -71 [ 753.265505][ T5964] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 753.410412][ T5964] usb 7-1: device descriptor read/64, error -71 [ 753.567982][ T5964] usb usb7-port1: attempt power cycle [ 753.674141][T10126] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 753.864287][T10126] usb 4-1: Using ep0 maxpacket: 32 [ 753.891379][T10126] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 753.919266][T10126] usb 4-1: config 0 has no interface number 0 [ 753.926256][ T5964] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 753.954472][T10126] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 753.978837][T10126] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 753.991683][ T5964] usb 7-1: device descriptor read/8, error -71 [ 754.021223][T10126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.042037][T10126] usb 4-1: Product: syz [ 754.124982][T11340] binder: BINDER_SET_CONTEXT_MGR already set [ 754.138064][T10126] usb 4-1: Manufacturer: syz [ 754.140252][T11340] binder: 11336:11340 ioctl 4018620d 200000000280 returned -16 [ 754.166361][T10126] usb 4-1: SerialNumber: syz [ 754.189092][T11342] syz_tun: entered allmulticast mode [ 754.200318][T10126] usb 4-1: config 0 descriptor?? [ 754.664108][ T5964] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 754.679468][T11318] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 754.728328][ T5964] usb 7-1: device descriptor read/8, error -71 [ 754.735983][T11346] syz_tun: left allmulticast mode [ 754.883340][ T5964] usb usb7-port1: unable to enumerate USB device [ 754.972583][T11318] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 756.058586][T10126] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 756.088370][T10126] asix 4-1:0.188: probe with driver asix failed with error -32 [ 756.450754][T11380] syzkaller0: entered allmulticast mode [ 757.231809][ T9855] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 757.243693][ T9855] CPU: 1 UID: 0 PID: 9855 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.243755][ T9855] Tainted: [L]=SOFTLOCKUP [ 757.243770][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.243797][ T9855] Workqueue: hci2 hci_rx_work [ 757.243846][ T9855] Call Trace: [ 757.243858][ T9855] [ 757.243872][ T9855] dump_stack_lvl+0x100/0x190 [ 757.243937][ T9855] sysfs_warn_dup.cold+0x1c/0x28 [ 757.243994][ T9855] sysfs_create_dir_ns+0x24b/0x2b0 [ 757.244056][ T9855] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 757.244115][ T9855] ? find_held_lock+0x2b/0x80 [ 757.244159][ T9855] ? kobject_add_internal+0x25f/0x930 [ 757.244222][ T9855] ? kobject_add_internal+0x25f/0x930 [ 757.244302][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.244357][ T9855] ? do_raw_spin_unlock+0x145/0x1e0 [ 757.244400][ T9855] kobject_add_internal+0x2c8/0x930 [ 757.244471][ T9855] kobject_add+0x16a/0x1e0 [ 757.244533][ T9855] ? __pfx_kobject_add+0x10/0x10 [ 757.244592][ T9855] ? class_to_subsys+0x10f/0x150 [ 757.244644][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.244704][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.244751][ T9855] ? kobject_put+0xb9/0x640 [ 757.244806][ T9855] ? _raw_spin_unlock+0x28/0x50 [ 757.244866][ T9855] device_add+0x294/0x1950 [ 757.244912][ T9855] ? __pfx_dev_set_name+0x10/0x10 [ 757.244973][ T9855] ? __pfx_device_add+0x10/0x10 [ 757.245018][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.245066][ T9855] ? mgmt_send_event_skb+0x2fb/0x460 [ 757.245127][ T9855] hci_conn_add_sysfs+0x1a3/0x260 [ 757.245184][ T9855] le_conn_complete_evt+0x11cb/0x1f40 [ 757.245244][ T9855] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 757.245288][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.245352][ T9855] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 757.245403][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.245450][ T9855] ? skb_pull_data+0x15f/0x1e0 [ 757.245521][ T9855] hci_le_meta_evt+0x34a/0x5f0 [ 757.245572][ T9855] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 757.245628][ T9855] hci_event_packet+0x682/0x11c0 [ 757.245685][ T9855] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 757.245738][ T9855] ? __pfx_hci_event_packet+0x10/0x10 [ 757.245786][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.245838][ T9855] ? kcov_remote_start+0x374/0x660 [ 757.245883][ T9855] ? lockdep_hardirqs_on+0x78/0x100 [ 757.245935][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.245995][ T9855] hci_rx_work+0x451/0xfc0 [ 757.246050][ T9855] process_one_work+0x9d7/0x1920 [ 757.246135][ T9855] ? __pfx_process_one_work+0x10/0x10 [ 757.246196][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.246260][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.246315][ T9855] worker_thread+0x5da/0xe40 [ 757.246391][ T9855] ? __pfx_worker_thread+0x10/0x10 [ 757.246455][ T9855] ? kthread+0x13a/0x450 [ 757.246510][ T9855] ? __pfx_worker_thread+0x10/0x10 [ 757.246570][ T9855] kthread+0x370/0x450 [ 757.246625][ T9855] ? __pfx_kthread+0x10/0x10 [ 757.246691][ T9855] ret_from_fork+0x754/0xd80 [ 757.246756][ T9855] ? __pfx_ret_from_fork+0x10/0x10 [ 757.246822][ T9855] ? srso_alias_return_thunk+0x5/0xfbef5 [ 757.246877][ T9855] ? __switch_to+0x7b4/0x1120 [ 757.246921][ T9855] ? __pfx_kthread+0x10/0x10 [ 757.246981][ T9855] ret_from_fork_asm+0x1a/0x30 [ 757.247048][ T9855] [ 757.975340][T10126] usb 4-1: USB disconnect, device number 30 [ 757.983959][ T9855] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 757.998266][ T9855] Bluetooth: hci2: failed to register connection device [ 758.441976][T11403] syz_tun: entered allmulticast mode [ 758.508235][T11399] syz_tun: left allmulticast mode [ 759.034410][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 759.175340][ T9] usb 4-1: device descriptor read/64, error -71 [ 759.444103][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 759.616590][ T9] usb 4-1: device descriptor read/64, error -71 [ 759.744489][ T9] usb usb4-port1: attempt power cycle [ 761.884946][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 762.151337][ T9] usb 4-1: device not accepting address 33, error -71 [ 764.112229][T11468] syz_tun: entered allmulticast mode [ 764.216566][T11474] syz_tun: left allmulticast mode [ 767.103645][ T9855] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 767.886678][ T5926] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 768.045986][ T5926] usb 10-1: device descriptor read/64, error -71 [ 768.317012][ T5926] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 768.474390][ T5926] usb 10-1: device descriptor read/64, error -71 [ 768.611462][ T5926] usb usb10-port1: attempt power cycle [ 768.994907][ T5926] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 769.056258][ T5926] usb 10-1: device descriptor read/8, error -71 [ 769.314843][ T5926] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 769.744002][ T5926] usb 10-1: device descriptor read/8, error -71 [ 769.859502][ T5926] usb usb10-port1: unable to enumerate USB device [ 770.254055][ T5926] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 770.434170][ T5926] usb 9-1: Using ep0 maxpacket: 8 [ 770.448818][ T5926] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 770.473234][ T5926] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 770.490570][T11540] syz_tun: entered allmulticast mode [ 770.497339][ T5926] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 770.520634][ T5926] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 770.577765][ T5926] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 770.579150][T11542] syz_tun: left allmulticast mode [ 770.613170][ T5926] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.680409][ T5926] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.719305][ T5926] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.999545][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.017105][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.080267][ T5926] usb 9-1: GET_CAPABILITIES returned 0 [ 771.116500][ T5926] usbtmc 9-1:16.0: can't read capabilities [ 771.318649][ T5926] usb 9-1: USB disconnect, device number 24 [ 771.508142][T11560] netlink: 'syz.6.1654': attribute type 4 has an invalid length. [ 771.589120][T11560] netlink: 'syz.6.1654': attribute type 4 has an invalid length. [ 771.614149][ T5807] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 771.807615][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 771.855152][ T5807] usb 4-1: config 1 has an invalid interface number: 221 but max is 0 [ 771.890024][ T5807] usb 4-1: config 1 has no interface number 0 [ 771.933992][ T5807] usb 4-1: config 1 interface 221 has no altsetting 0 [ 771.969019][ T5807] usb 4-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=af.ce [ 772.011953][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.032859][ T5807] usb 4-1: Product: syz [ 772.056093][ T5807] usb 4-1: Manufacturer: syz [ 772.060783][ T5807] usb 4-1: SerialNumber: syz [ 772.401034][ T9855] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 772.838506][ T5807] rndis_host 4-1:1.221: skipping garbage [ 772.906177][ T5807] usb 4-1: bad CDC descriptors [ 772.985174][ T5807] cdc_acm 4-1:1.221: skipping garbage [ 773.395375][ T5807] usb 4-1: USB disconnect, device number 35 [ 773.476389][T11578] loop8: detected capacity change from 0 to 512 [ 773.676153][T11578] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 773.707652][T11590] syz_tun: entered allmulticast mode [ 773.771047][T11593] syz_tun: left allmulticast mode [ 773.776554][T11578] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 773.904312][T11578] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1660: corrupted inode contents [ 773.941543][ T5807] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 773.967722][T11578] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #2: comm syz.8.1660: mark_inode_dirty error [ 773.982635][T11578] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #2: comm syz.8.1660: corrupted inode contents [ 774.003980][T11578] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.1660: mark_inode_dirty error [ 774.186329][ T5807] usb 10-1: device descriptor read/64, error -71 [ 775.634028][ T972] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 775.714713][T11578] EXT4-fs warning (device loop8): ext4_es_cache_extent:1079: inode #2: comm syz.8.1660: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 775.714713][T11578] [ 775.889706][ T972] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 775.926774][ T972] usb 4-1: config 0 has no interface number 0 [ 775.982119][ T972] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 776.037098][ T972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.149312][ T972] usb 4-1: config 0 descriptor?? [ 776.231196][ T972] ums-realtek 4-1:0.196: USB Mass Storage device detected [ 776.734319][ T5807] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 776.792143][ T8862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.899155][T11610] binder_alloc: 11606: binder_alloc_buf, no vma [ 777.466263][ T5926] usb 4-1: USB disconnect, device number 36 [ 778.164048][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1671'. [ 778.407485][T11632] vivid-002: disconnect [ 780.145511][T11639] vivid-002: reconnect [ 780.312141][ T31] audit: type=1326 audit(2000000062.959:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 780.735572][ T31] audit: type=1326 audit(2000000062.979:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 780.816459][T11640] loop8: detected capacity change from 0 to 2048 [ 780.877601][T11640] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found! [ 780.925818][ T31] audit: type=1326 audit(2000000062.979:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 780.977888][T11646] syz_tun: entered allmulticast mode [ 781.032151][ T31] audit: type=1326 audit(2000000062.989:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 781.065278][T11648] syz_tun: left allmulticast mode [ 781.163977][ T31] audit: type=1326 audit(2000000062.989:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 781.251258][ T31] audit: type=1326 audit(2000000063.019:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 781.305953][ T31] audit: type=1326 audit(2000000063.409:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 781.362485][ T31] audit: type=1326 audit(2000000063.409:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 781.386148][ T31] audit: type=1326 audit(2000000063.409:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 781.480780][ T31] audit: type=1326 audit(2000000063.409:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe706b9bf79 code=0x7ffc0000 [ 781.574123][ T5964] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 781.602319][ T5140] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 782.007945][ T5964] usb 7-1: device descriptor read/64, error -71 [ 782.097662][T11666] loop9: detected capacity change from 0 to 128 [ 782.273987][ T5964] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 784.544002][ T5964] usb 7-1: device descriptor read/64, error -71 [ 784.669286][ T5964] usb usb7-port1: attempt power cycle [ 787.135857][T11673] binder: BINDER_SET_CONTEXT_MGR already set [ 787.143417][T11673] binder: 11672:11673 ioctl 4018620d 200000000280 returned -16 [ 787.614348][ T6810] lec:lec_start_xmit: lec0:No lecd attached [ 787.760594][T11685] vivid-004: disconnect [ 789.530358][T11694] vivid-004: reconnect [ 793.203903][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 793.212022][ C1] lec:lec_tx_timeout: lec0 [ 793.452377][T11710] syz_tun: entered allmulticast mode [ 793.533219][T11712] syz_tun: left allmulticast mode [ 793.951954][ T9855] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 798.127525][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 798.127552][ T31] audit: type=1107 audit(2000000079.569:80): pid=11721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 798.233997][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 798.396153][ T24] usb 7-1: device descriptor read/64, error -71 [ 798.664336][ T24] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 798.762303][T11735] binder_alloc: 11730: binder_alloc_buf, no vma [ 798.833949][ T24] usb 7-1: device descriptor read/64, error -71 [ 799.574518][ T24] usb usb7-port1: attempt power cycle [ 799.734063][T10126] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 799.983487][T10126] usb 5-1: Using ep0 maxpacket: 16 [ 800.038423][T10126] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 800.069442][T10126] usb 5-1: config 0 has an invalid interface number: 104 but max is 1 [ 800.127274][T10126] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 800.143523][T10126] usb 5-1: config 0 has no interface number 0 [ 800.156390][T10126] usb 5-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 800.168108][T10126] usb 5-1: config 0 interface 104 has no altsetting 1 [ 800.179283][T10126] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00 [ 800.194986][T10126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.238025][T10126] usb 5-1: Product: syz [ 800.243269][T10126] usb 5-1: Manufacturer: syz [ 800.338776][T10126] usb 5-1: SerialNumber: syz [ 800.728917][T10126] usb 5-1: config 0 descriptor?? [ 800.765468][T10126] asix 5-1:0.104: probe with driver asix failed with error -22 [ 800.966279][ T24] usb 5-1: USB disconnect, device number 24 [ 801.016466][T11755] syz_tun: entered allmulticast mode [ 801.035571][T11754] loop7: detected capacity change from 0 to 128 [ 801.118348][T11759] syz_tun: left allmulticast mode [ 801.165868][T11757] loop8: detected capacity change from 0 to 1024 [ 801.210500][T11757] EXT4-fs: Ignoring removed orlov option [ 801.259442][T11761] binder: 11760:11761 ioctl 4018620d 0 returned -22 [ 801.306232][T11757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.045570][ T8862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.515801][T11789] binder: BINDER_SET_CONTEXT_MGR already set [ 803.544503][T11789] binder: 11786:11789 ioctl 4018620d 200000000280 returned -16 [ 803.744032][ T972] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 803.924254][ T972] usb 10-1: Using ep0 maxpacket: 16 [ 804.297413][ T972] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.454975][ T972] usb 10-1: config 0 has no interfaces? [ 804.516885][ T972] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 804.534056][T11803] syz_tun: entered allmulticast mode [ 804.580415][ T972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.608404][T11802] syz_tun: left allmulticast mode [ 804.631703][ T972] usb 10-1: Product: syz [ 804.649382][ T972] usb 10-1: Manufacturer: syz [ 804.672027][ T972] usb 10-1: SerialNumber: syz [ 804.708368][T11809] binder: 11808:11809 ioctl 4018620d 0 returned -22 [ 804.728808][ T972] usb 10-1: config 0 descriptor?? [ 804.929186][T11813] loop6: detected capacity change from 0 to 512 [ 804.983534][ T972] usb 10-1: USB disconnect, device number 8 [ 805.048688][T11813] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.184208][T11813] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.556560][T11815] loop4: detected capacity change from 0 to 8192 [ 806.657665][ T7540] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.614228][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.628017][T11840] binder_alloc: 11831: binder_alloc_buf, no vma [ 808.628186][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.645354][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 808.670800][ T31] audit: type=1800 audit(2000000089.349:81): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1733" name="file2" dev="loop4" ino=1048633 res=0 errno=0 [ 808.709117][T11815] syz.4.1733: attempt to access beyond end of device [ 808.709117][T11815] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 809.360676][T11852] binder: 11851:11852 ioctl 4018620d 0 returned -22 [ 810.512683][T11865] loop4: detected capacity change from 0 to 512 [ 810.601346][T11865] EXT4-fs (loop4): orphan cleanup on readonly fs [ 810.634051][ T5140] Bluetooth: hci0: command 0x0406 tx timeout [ 810.695361][T11865] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1749: bad orphan inode 13 [ 810.854152][T11865] loop4: lost filesystem error report for type 5 error -117 [ 810.860981][T11865] ext4_test_bit(bit=12, block=18) = 1 [ 810.868410][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 810.868480][ C0] EXT4-fs (loop4): last error at time 2000000093: ext4_orphan_get:1417 [ 810.980324][T11865] is_bad_inode(inode)=0 [ 811.003985][T11865] NEXT_ORPHAN(inode)=2130706432 [ 811.658488][T11876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1752'. [ 811.668894][T11876] unsupported nlmsg_type 40 [ 812.846767][T11865] max_ino=32 [ 812.850004][T11865] i_nlink=1 [ 812.888686][T11865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 812.973950][ T24] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 813.076203][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.165609][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 813.198345][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.209768][ T24] usb 7-1: config 0 has no interfaces? [ 813.221418][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 813.244847][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.273954][ T24] usb 7-1: Product: syz [ 813.286955][ T24] usb 7-1: Manufacturer: syz [ 813.291676][ T24] usb 7-1: SerialNumber: syz [ 813.344943][ T24] usb 7-1: config 0 descriptor?? [ 813.353959][T11879] binder: BINDER_SET_CONTEXT_MGR already set [ 813.360130][T11879] binder: 11878:11879 ioctl 4018620d 200000000280 returned -16 [ 813.573494][ T6026] usb 7-1: USB disconnect, device number 40 [ 814.163891][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 814.171968][ C1] lec:lec_tx_timeout: lec0 [ 814.636772][T11890] binder: 11888:11890 ioctl 4018620d 0 returned -22 [ 815.026694][T11899] [ 815.029055][T11899] ====================================================== [ 815.036078][T11899] WARNING: possible circular locking dependency detected [ 815.043104][T11899] syzkaller #0 Tainted: G L [ 815.049177][T11899] ------------------------------------------------------ [ 815.056196][T11899] syz.7.1761/11899 is trying to acquire lock: [ 815.062358][T11899] ffff88801c6a5a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 815.072615][T11899] [ 815.072615][T11899] but task is already holding lock: [ 815.080499][T11899] ffff888026a2f2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 815.091792][T11899] [ 815.091792][T11899] which lock already depends on the new lock. [ 815.091792][T11899] [ 815.102280][T11899] [ 815.102280][T11899] the existing dependency chain (in reverse order) is: [ 815.111464][T11899] [ 815.111464][T11899] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 815.120103][T11899] blk_alloc_queue+0x610/0x790 [ 815.125414][T11899] blk_mq_alloc_queue+0x174/0x290 [ 815.130987][T11899] __blk_mq_alloc_disk+0x29/0x120 [ 815.136553][T11899] loop_add+0x498/0xb60 [ 815.141244][T11899] loop_init+0x1d3/0x200 [ 815.146010][T11899] do_one_initcall+0x11d/0x760 [ 815.151299][T11899] kernel_init_freeable+0x6e5/0x7a0 [ 815.157031][T11899] kernel_init+0x1f/0x1e0 [ 815.161980][T11899] ret_from_fork+0x754/0xd80 [ 815.167115][T11899] ret_from_fork_asm+0x1a/0x30 [ 815.172407][T11899] [ 815.172407][T11899] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 815.179638][T11899] fs_reclaim_acquire+0xc4/0x100 [ 815.185110][T11899] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 815.191152][T11899] __kernfs_iattrs+0x126/0x400 [ 815.196462][T11899] __kernfs_setattr+0x4d/0x3c0 [ 815.201980][T11899] kernfs_iop_setattr+0xda/0x130 [ 815.207464][T11899] notify_change+0xb25/0x1330 [ 815.212666][T11899] do_truncate+0x1df/0x240 [ 815.217613][T11899] path_openat+0x2a55/0x31a0 [ 815.222740][T11899] do_file_open+0x20e/0x430 [ 815.227778][T11899] do_sys_openat2+0x10d/0x1e0 [ 815.233013][T11899] __x64_sys_openat+0x12d/0x210 [ 815.238404][T11899] do_syscall_64+0x106/0xf80 [ 815.243539][T11899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.250054][T11899] [ 815.250054][T11899] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 815.258626][T11899] __lock_acquire+0x14b8/0x2630 [ 815.264022][T11899] lock_acquire+0x1cf/0x380 [ 815.269063][T11899] down_read+0x99/0x460 [ 815.273790][T11899] kernfs_iop_getattr+0x9c/0xf0 [ 815.279188][T11899] vfs_getattr_nosec+0x2d4/0x430 [ 815.285270][T11899] vfs_getattr+0x4a/0x60 [ 815.290042][T11899] loop_query_min_dio_size.isra.0+0x117/0x250 [ 815.296650][T11899] lo_ioctl+0x13aa/0x1bc0 [ 815.301520][T11899] blkdev_ioctl+0x5ad/0x6f0 [ 815.306561][T11899] __x64_sys_ioctl+0x18e/0x210 [ 815.311852][T11899] do_syscall_64+0x106/0xf80 [ 815.317070][T11899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.323524][T11899] [ 815.323524][T11899] other info that might help us debug this: [ 815.323524][T11899] [ 815.333759][T11899] Chain exists of: [ 815.333759][T11899] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 815.333759][T11899] [ 815.348246][T11899] Possible unsafe locking scenario: [ 815.348246][T11899] [ 815.355699][T11899] CPU0 CPU1 [ 815.361060][T11899] ---- ---- [ 815.366504][T11899] lock(&q->q_usage_counter(io)#24); [ 815.371895][T11899] lock(fs_reclaim); [ 815.378406][T11899] lock(&q->q_usage_counter(io)#24); [ 815.386362][T11899] rlock(&root->kernfs_iattr_rwsem); [ 815.391778][T11899] [ 815.391778][T11899] *** DEADLOCK *** [ 815.391778][T11899] [ 815.399913][T11899] 3 locks held by syz.7.1761/11899: [ 815.405279][T11899] #0: ffff888026c37448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 815.415521][T11899] #1: ffff888026a2f2c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 815.427257][T11899] #2: ffff888026a2f2f8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 815.439170][T11899] [ 815.439170][T11899] stack backtrace: [ 815.445060][T11899] CPU: 1 UID: 0 PID: 11899 Comm: syz.7.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 815.445108][T11899] Tainted: [L]=SOFTLOCKUP [ 815.445120][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 815.445140][T11899] Call Trace: [ 815.445150][T11899] [ 815.445163][T11899] dump_stack_lvl+0x100/0x190 [ 815.445216][T11899] print_circular_bug.cold+0x178/0x1c7 [ 815.445273][T11899] check_noncircular+0x146/0x160 [ 815.445325][T11899] __lock_acquire+0x14b8/0x2630 [ 815.445381][T11899] lock_acquire+0x1cf/0x380 [ 815.445428][T11899] ? kernfs_iop_getattr+0x9c/0xf0 [ 815.445481][T11899] ? __pfx___might_resched+0x10/0x10 [ 815.445541][T11899] down_read+0x99/0x460 [ 815.445592][T11899] ? kernfs_iop_getattr+0x9c/0xf0 [ 815.445646][T11899] ? find_held_lock+0x2b/0x80 [ 815.445684][T11899] ? __pfx_down_read+0x10/0x10 [ 815.445734][T11899] ? kernfs_root+0xee/0x2a0 [ 815.445780][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.445828][T11899] kernfs_iop_getattr+0x9c/0xf0 [ 815.445880][T11899] vfs_getattr_nosec+0x2d4/0x430 [ 815.445924][T11899] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 815.445982][T11899] vfs_getattr+0x4a/0x60 [ 815.446025][T11899] loop_query_min_dio_size.isra.0+0x117/0x250 [ 815.446073][T11899] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 815.446136][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.446180][T11899] lo_ioctl+0x13aa/0x1bc0 [ 815.446229][T11899] ? __pfx_lo_ioctl+0x10/0x10 [ 815.446274][T11899] ? tomoyo_path_number_perm+0x46d/0x580 [ 815.446313][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.446355][T11899] ? kasan_quarantine_put+0x104/0x240 [ 815.446411][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.446451][T11899] ? blk_get_meta_cap+0xd4/0x6c0 [ 815.446499][T11899] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 815.446544][T11899] ? tomoyo_path_number_perm+0x28f/0x580 [ 815.446581][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.446625][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.446666][T11899] ? blkdev_common_ioctl+0x515/0x2ba0 [ 815.446718][T11899] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 815.446772][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.446812][T11899] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 815.446852][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.446893][T11899] ? do_vfs_ioctl+0x226/0x13e0 [ 815.446924][T11899] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 815.446988][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.447029][T11899] ? find_held_lock+0x2b/0x80 [ 815.447064][T11899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 815.447106][T11899] ? __pfx_lo_ioctl+0x10/0x10 [ 815.447151][T11899] blkdev_ioctl+0x5ad/0x6f0 [ 815.447198][T11899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 815.447248][T11899] ? __pfx_blkdev_ioctl+0x10/0x10 [ 815.447296][T11899] __x64_sys_ioctl+0x18e/0x210 [ 815.447328][T11899] do_syscall_64+0x106/0xf80 [ 815.447372][T11899] ? irqentry_exit+0x138/0x670 [ 815.447419][T11899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.447458][T11899] RIP: 0033:0x7fb0a239bf79 [ 815.447486][T11899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.447520][T11899] RSP: 002b:00007fb0a3327028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 815.447551][T11899] RAX: ffffffffffffffda RBX: 00007fb0a2615fa0 RCX: 00007fb0a239bf79 [ 815.447574][T11899] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 815.447594][T11899] RBP: 00007fb0a24327e0 R08: 0000000000000000 R09: 0000000000000000 [ 815.447615][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.447635][T11899] R13: 00007fb0a2616038 R14: 00007fb0a2615fa0 R15: 00007ffd81c7ba68 [ 815.447669][T11899]