last executing test programs: 4m42.92117052s ago: executing program 3 (id=806): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x10}}], 0x10, 0x80}}], 0x1, 0x8004) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2208, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m42.917684904s ago: executing program 3 (id=807): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x64, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4m42.744790153s ago: executing program 3 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x87, 0x10000) read$hidraw(r2, &(0x7f0000000180)=""/224, 0xe0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x411c, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x3, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r1, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800000000500012800e0001006970366772657461700000003c000280080014000e000000060003000700000008000d0005000000060002001ef7000005000b000f00000006000200030000000800010026"], 0x70}}, 0x0) 4m42.536577976s ago: executing program 3 (id=811): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x1) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 4m42.284302688s ago: executing program 3 (id=813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'gre0\x00', 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x4c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x12ed74b, @remote, 0x4}]}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m41.268122016s ago: executing program 3 (id=815): io_uring_enter(0xffffffffffffffff, 0x322e, 0x2f02, 0x28, &(0x7f0000000000)={[0x10]}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) read(r2, &(0x7f00000002c0)=""/126, 0x7e) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000800) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m40.698062407s ago: executing program 32 (id=815): io_uring_enter(0xffffffffffffffff, 0x322e, 0x2f02, 0x28, &(0x7f0000000000)={[0x10]}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) read(r2, &(0x7f00000002c0)=""/126, 0x7e) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040804}, 0x20000800) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 52.424048687s ago: executing program 5 (id=1551): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="ded6428a5918", 0x6}], 0x1}}], 0x1, 0x4088) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 52.192574372s ago: executing program 5 (id=1553): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0xad}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x4, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_seqnum', 0x149b82, 0xb300bb1401d27a12) write$cgroup_int(r4, &(0x7f0000000000)=0x800, 0x12) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) 50.498740211s ago: executing program 5 (id=1559): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 49.338520258s ago: executing program 5 (id=1562): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 48.585716262s ago: executing program 5 (id=1564): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435530386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0xf, 0x1}, 0x4, 0x0, &(0x7f0000000300)="e2f25fbf2a062ce5b88232fedd1d758f8bc326aac3feff8b58ec4894", 0x1c, 0xf, 0x4, 0x23, 0x0, 0x6, &(0x7f0000000340)="35f2276538f9fd6203f3b0bd9723f4da792db0f1e2276be5316856335105a03070ccd2eccd1c41d8fa9e3fdf50b1c0c24482599d1ba1a30a1edcd61b60af2f7010708fc2f9012ba5ce373b9f8a1a93fe4e50c64d56afd8c5dcaf8caff8f1a187547c10fca1420f0ab8380e19f81e20251e35d1f74cb30a543a1a5243b44c4e4145", [{0x9, 0xd9f, 0x8}, {0x8, 0x8000, 0x3}, {0x56d9, 0x9, 0xfffd}, {0x7a400a74, 0x1, 0x700000}, {0x0, 0x10001, 0x4}, {0x2, 0x711a, 0x4}, {0x8, 0x10, 0x53b}, {0x3, 0x8, 0x8000}, {0x376, 0x5, 0x80000001}, {0x48d, 0x7, 0x8}, {0x4, 0x1, 0x1}, {0x7, 0x3, 0x1}, {0xfffefffe, 0x2, 0x7d}, {0xffffffff, 0x7}, {0x87be, 0x1, 0x1174}, {0x40, 0x6, 0x7}, {0x4, 0x60}, {0x4, 0xd, 0xd}, {0x4, 0x6, 0x7fffffff}, {0x0, 0x20000001}, {0x9aff, 0x8001, 0x400}, {0x3, 0x8, 0x3}, {0x0, 0x2, 0x1000}, {0x2, 0x2, 0x8}, {0xffffe582, 0x2, 0x2}, {0x9, 0x800, 0x9}, {0x800a, 0x40, 0x4}, {0x9, 0x6e4d, 0xfff}, {0x2, 0x6, 0x12}, {0xff, 0x1, 0x10000}, {0x6, 0x3ff, 0x7fffffff}, {0x7c44, 0x0, 0xc5b}, {0x5, 0x2, 0xf}, {0x88, 0xffffffff, 0xba46}, {0x8, 0x4b1, 0x3}]}) sendmsg$NFT_BATCH(r6, 0x0, 0x20000014) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r7) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x3}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) 47.713601843s ago: executing program 5 (id=1571): getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff", 0x12}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x4040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 47.002547448s ago: executing program 33 (id=1571): getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff", 0x12}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}}, 0x4040000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x8400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 15.775512328s ago: executing program 2 (id=1644): syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x24, &(0x7f0000000740)=@string={0x24, 0x3, "69872b478735e3e26568d0288cdee5b5fa77be139ff304cac06714d08ef70f3d3778"}}, {0x2, &(0x7f00000001c0)=@string={0x2}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xa2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) shutdown(r3, 0x1) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x2, r0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 13.197367499s ago: executing program 1 (id=1650): r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) shutdown(r0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xecf86c37d53049cc) close(r8) pipe(0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20000800) sendmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f00000000c0)=@generic={0xa, "e471faa1fa9feef6149ddafbed0e0e23ae0b45611c2e638d5c9049b6f74ad7d759608c1b8e9a32df62a14ab4fe14d63849a7e9263a6658458868c5004459d7147ee39cf5665e7e9ab27ba0747248bb68e69fe04fc6a1545f5cf8243aa3bfd910e967db1782db11e9227f070b8a1cc19f9f7c47662facba74ca6e1a59f301"}, 0x80, 0x0}}], 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = fsopen(&(0x7f00000000c0)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0xcc5c1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018008000100666962001c00028008000340000000060800024000ecff01080001400000000920000180070001006374000014000280080002400000001108000140000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) lseek(r7, 0xffffffffffffffb7, 0x1) sendmsg$key(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001500)=ANY=[], 0xf0}}, 0x8000) 11.548627752s ago: executing program 1 (id=1653): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x294, 0x10, 0x1, 0x70bd26, 0x100, {{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x794, 0x4e24, 0x5, 0x0, 0x0, 0x80, 0x3a, r7}, {@in6=@loopback, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x6, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x800000000c84, 0x7fffffff}, {0x2, 0x3, 0x40}, 0x70bd2a, 0x3507, 0x2, 0x0, 0x0, 0x20}, [@algo_comp={0x1a3, 0x3, {{'deflate\x00'}, 0xad8, "30bbec3ad9e342e281ca23414fe12a6ff570c34cc8fee9521dce323bab67645605527ff06f68aa928c7d44cbb69de9b6be0268daf330b212cda627200269157501d39eda51018fb621beae14c87ab9f2a4580e40adfd7662fb289174159be840dd38b02a9aaeeebc2e0b0593a23f6edff5d84fb9a88d6c3029f82680cda7f1d103e7a185ea1a2a50c3d8958dd1c04a04e9b378f4da93678ae9de7f169c571b7bbaae11ca08900cfe5dfa8511755e5c666da58d2fb1807a46523cad7c8ea19e52cea22f609bbd1d3ec8ec6cfb47a86aa9d6e81e872a06557ddbc7350d6bf456ba74d6527cf00c9d222c2a137335fdf5ceb51ca0423cb8a01c673500c8432e00726b9d7954e5f79236f00cd8c05ce83ca8a4262fce2fded932269b7a51b7b80f7ab485d9c79984b8b6c4040690ff483d00a71d98d2115d9bd99793b4886a3392d9afcac08f7c93fc75a6b081b09d126e913aceb034f0d92be4ad0cec"}}]}, 0x294}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newsa={0x158, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x2f, 0x0, r3}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd29, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x67, 0x3, {{'deflate\x00'}, 0xf8, "6f85bf85a2fc88fd5132a7226878830e7135efbf027ac5cab808d6a4b3ab2c"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 11.425585806s ago: executing program 2 (id=1654): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0xd245) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) io_uring_setup(0x4c4c, &(0x7f00000000c0)={0x0, 0xa75a, 0x20, 0x4, 0xe5, 0x0, r0}) r4 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x707d, 0x80, 0x0, 0x3d1}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000281100000003069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) ptrace(0x10, r9) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r9, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r9, 0x80000001, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 10.386343226s ago: executing program 4 (id=1655): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc298"], 0x14}}, 0x20008000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe90, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xfce1) fchmod(r0, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120005000000000904000000ff054900"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x40, 0x17, 0xf, "0a248c0291390e000000005e9ccddd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x14, &(0x7f00000001c0), 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000706010800000000000000000000000005000100060000008f51e364371dcea79832a02479a28189aaa427188ad4449fefb52facc721b85856e59076a0714216c31a262845630062dae8c4984f9f3e007f8cc1b90a175866079aeba35fc702b75771dc264cf38bca5125cc41cbb5c360cf4653829b5341987d9acf8d024500"/145], 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 10.101944396s ago: executing program 0 (id=1657): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0xad}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x4, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_seqnum', 0x149b82, 0xb300bb1401d27a12) write$cgroup_int(r2, &(0x7f0000000000)=0x800, 0x12) syz_open_dev$swradio(0x0, 0x0, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) 9.297506729s ago: executing program 1 (id=1658): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000640)={0x0, 0x8926, 0x0, 0x1, 0x164}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r7, 0x40bc5311, 0x0) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000400)=[{r8, 0xd}], 0x1, 0xff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xa7, 0x7, 0x16, 0x40, 0x6a2, 0x3, 0x3cf2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0xa0, 0x6, [{{0x9, 0x4, 0xb4, 0x4, 0x0, 0xcd, 0x7f, 0xe4, 0x7}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0) 8.955342476s ago: executing program 0 (id=1659): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0x7, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0) setsockopt(r0, 0x82, 0x81, &(0x7f0000000280), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) fsopen(0x0, 0x1) syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000017c0)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRESOCT=r1], 0x58}, 0x1, 0x0, 0x0, 0x20008041}, 0x80a8000) socket$nl_route(0x10, 0x3, 0x0) 8.684081495s ago: executing program 6 (id=1660): socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r4}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x5452, &(0x7f0000000000)={r9}) sendmsg$sock(r9, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100003f279ace5e5c1613a8ec451f105ffffffffffffffff00000000a0b75cf848a75325d98e93876d170e743912b1be2724ca3269958edcfecb8df28e563949fed83ccb9221460b011f4efcd72d79a40f7ad4853ee0b6a3fc5e33540e2e44544930fadfcb013dbf9c105c04ec89bad7aca6529ed9e4c5c1df13be6c2d786412ff21c08235c46865930e3d573a045dd8905da5f0dc33ffb1113f00d44d6b87e3070f", @ANYRES32=0x0, @ANYBLOB="44000000000000001c0012800b0001006272"], 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 8.258183131s ago: executing program 2 (id=1661): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 7.256036431s ago: executing program 4 (id=1662): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = open(0x0, 0x0, 0x120) lseek(r4, 0x101, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) r5 = userfaultfd(0x801) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x4, 0xddd8e000, 0x2000, &(0x7f000015a000/0x2000)=nil}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000662000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 7.105753724s ago: executing program 2 (id=1663): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) fsopen(0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/kcm\x00') read(r3, &(0x7f0000000100)=""/25, 0x19) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xe) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) capget(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24000040) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x8044) sendto$inet6(r4, &(0x7f0000000000)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x3f) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x8811) 6.451267752s ago: executing program 6 (id=1664): socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x200000, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@smackfstransmute}]}}) r2 = socket(0x22, 0x2, 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@ccm_128={{0x303}, "3d196e85f3a47d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000080), 0x4800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988fe0f00002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) 6.236163761s ago: executing program 0 (id=1665): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="434a596143cc", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @address_request}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x2c, r5, 0x101, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000d40)={0x6c, 0x0, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc419}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30048044}, 0x0) set_mempolicy(0x4005, &(0x7f0000000180)=0x1004, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) poll(&(0x7f0000000140)=[{r3, 0x8}, {r2, 0x2cfc08c20dafc34e}], 0x2, 0x8000007) 6.177943573s ago: executing program 1 (id=1666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x40014) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000540)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000963000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000180)={0x0, 0xfffe, 0x0, 0x1ffff, 0x7537}, &(0x7f00000001c0)=0x18) openat$drirender128(0xffffffffffffff9c, 0x0, 0x42100, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='\xff4', 0x0) 6.102075764s ago: executing program 6 (id=1667): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x5d7f, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 4.655114236s ago: executing program 6 (id=1668): openat$kvm(0x0, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000855}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000064) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x9, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.471652079s ago: executing program 4 (id=1669): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0xad}) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x4, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x101200, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/uevent_seqnum', 0x149b82, 0xb300bb1401d27a12) write$cgroup_int(r2, &(0x7f0000000000)=0x800, 0x12) syz_open_dev$swradio(0x0, 0x0, 0x2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x7, 0x0, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) 4.39255395s ago: executing program 2 (id=1670): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435530386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0xf, 0x1}, 0x4, 0x0, &(0x7f0000000300)="e2f25fbf2a062ce5b88232fedd1d758f8bc326aac3feff8b58ec4894", 0x1c, 0xf, 0x4, 0x23, 0x0, 0x6, &(0x7f0000000340)="35f2276538f9fd6203f3b0bd9723f4da792db0f1e2276be5316856335105a03070ccd2eccd1c41d8fa9e3fdf50b1c0c24482599d1ba1a30a1edcd61b60af2f7010708fc2f9012ba5ce373b9f8a1a93fe4e50c64d56afd8c5dcaf8caff8f1a187547c10fca1420f0ab8380e19f81e20251e35d1f74cb30a543a1a5243b44c4e4145", [{0x9, 0xd9f, 0x8}, {0x8, 0x8000, 0x3}, {0x56d9, 0x9, 0xfffd}, {0x7a400a74, 0x1, 0x700000}, {0x0, 0x10001, 0x4}, {0x2, 0x711a, 0x4}, {0x8, 0x10, 0x53b}, {0x3, 0x8, 0x8000}, {0x376, 0x5, 0x80000001}, {0x48d, 0x7, 0x8}, {0x4, 0x1, 0x1}, {0x7, 0x3, 0x1}, {0xfffefffe, 0x2, 0x7d}, {0xffffffff, 0x7}, {0x87be, 0x1, 0x1174}, {0x40, 0x6, 0x7}, {0x4, 0x60}, {0x4, 0xd, 0xd}, {0x4, 0x6, 0x7fffffff}, {0x0, 0x20000001}, {0x9aff, 0x8001, 0x400}, {0x3, 0x8, 0x3}, {0x0, 0x2, 0x1000}, {0x2, 0x2, 0x8}, {0xffffe582, 0x2, 0x2}, {0x9, 0x800, 0x9}, {0x800a, 0x40, 0x4}, {0x9, 0x6e4d, 0xfff}, {0x2, 0x6, 0x12}, {0xff, 0x1, 0x10000}, {0x6, 0x3ff, 0x7fffffff}, {0x7c44, 0x0, 0xc5b}, {0x5, 0x2, 0xf}, {0x88, 0xffffffff, 0xba46}, {0x8, 0x4b1, 0x3}]}) sendmsg$NFT_BATCH(r6, 0x0, 0x20000014) syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x3}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000440)={0x1, 0x1, 0x3, 0xb}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) 4.202921312s ago: executing program 0 (id=1671): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600000711008960000000000030000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000500010000000500040001000000140003006272696467655f"], 0x60}}, 0x4040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r9, 0x29, 0x35, 0x0, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.188983811s ago: executing program 0 (id=1672): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x8) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="401403a20ad1a2cfa6c89fdf6a213151cdb2c18492b0748f43ca2aa19b782e9a804ac7e1d657162ec9f1217c311674c38954d18218beb68113baeb0c80f249530708702e8f98af9ac2543523a037f2c86f47d82609e41b5490538dd9fa6014862a2c92779cba084b6964927e7e20ceef231524b488f1a82a0b16cef088ab21fc73b41c32e362c309bddc2bc5beaef8b6b871f65040331e0b60"], 0x0, 0x0}) userfaultfd(0x80001) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) epoll_create(0x3ff) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) close(r3) 3.10330907s ago: executing program 6 (id=1673): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x2, @mcast1={0xff, 0x7}, 0x3ff}}, {{0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x427, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0xffffffff, @mcast2}}}, 0x108) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r6, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000340)=0x7, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400), &(0x7f0000000280), 0x0, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r9], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000180), 0x0, 0x8000000000009}) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000300)=0x4) 3.094233516s ago: executing program 4 (id=1674): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r5 = fsopen(&(0x7f0000000240)='aufs\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x10, 0x80, 0xdd7, 0x2, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @rr={0x7, 0x7, 0xe0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x103, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) socket(0xf, 0x800, 0x96d) 3.074160178s ago: executing program 1 (id=1675): add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000001100)={0x11, 0x8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = dup2(r2, r2) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x32, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x10) 1.223388737s ago: executing program 4 (id=1676): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8080) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8004, 0x0, 0x9, 0xda, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0xb, @raw_data="435530386d7045c07d0ced83659145ec87cda60fea0195e62c84f08c70a667dd931f3e0944ae0769d1db71d24638f00994f04ca9318da48efe59ecd5c4bc7e620f0052cf7501c6cb0bc9d6ea9d7f7fd580f51ffdc2205484a488b21c86765b2b6b13822337775fbb604bc443655025b4e6aab93c145aa062dab666d7bee24b65b2f7bed94cbd28be632bb7f7c6c5b301700f7c4af1bf90dd769f7de1d2e4a3e7c70f55979f51c2a89922c00cb68b7869210e8a823b63f4f65558c6d4688870907c1ad8e7ef553988"}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040fff80000000000000007400", @ANYRES32=r5, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000480)=@urb_type_iso={0x0, {0xf, 0x1}, 0x4, 0x0, &(0x7f0000000300)="e2f25fbf2a062ce5b88232fedd1d758f8bc326aac3feff8b58ec4894", 0x1c, 0xf, 0x4, 0x23, 0x0, 0x6, &(0x7f0000000340)="35f2276538f9fd6203f3b0bd9723f4da792db0f1e2276be5316856335105a03070ccd2eccd1c41d8fa9e3fdf50b1c0c24482599d1ba1a30a1edcd61b60af2f7010708fc2f9012ba5ce373b9f8a1a93fe4e50c64d56afd8c5dcaf8caff8f1a187547c10fca1420f0ab8380e19f81e20251e35d1f74cb30a543a1a5243b44c4e4145", [{0x9, 0xd9f, 0x8}, {0x8, 0x8000, 0x3}, {0x56d9, 0x9, 0xfffd}, {0x7a400a74, 0x1, 0x700000}, {0x0, 0x10001, 0x4}, {0x2, 0x711a, 0x4}, {0x8, 0x10, 0x53b}, {0x3, 0x8, 0x8000}, {0x376, 0x5, 0x80000001}, {0x48d, 0x7, 0x8}, {0x4, 0x1, 0x1}, {0x7, 0x3, 0x1}, {0xfffefffe, 0x2, 0x7d}, {0xffffffff, 0x7}, {0x87be, 0x1, 0x1174}, {0x40, 0x6, 0x7}, {0x4, 0x60}, {0x4, 0xd, 0xd}, {0x4, 0x6, 0x7fffffff}, {0x0, 0x20000001}, {0x9aff, 0x8001, 0x400}, {0x3, 0x8, 0x3}, {0x0, 0x2, 0x1000}, {0x2, 0x2, 0x8}, {0xffffe582, 0x2, 0x2}, {0x9, 0x800, 0x9}, {0x800a, 0x40, 0x4}, {0x9, 0x6e4d, 0xfff}, {0x2, 0x6, 0x12}, {0xff, 0x1, 0x10000}, {0x6, 0x3ff, 0x7fffffff}, {0x7c44, 0x0, 0xc5b}, {0x5, 0x2, 0xf}, {0x88, 0xffffffff, 0xba46}, {0x8, 0x4b1, 0x3}]}) sendmsg$NFT_BATCH(r6, 0x0, 0x20000014) syz_open_dev$tty1(0xc, 0x4, 0x3) fcntl$lock(r4, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x9, 0x3}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000440)={0x1, 0x1, 0x3, 0xb}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) 1.055236199s ago: executing program 2 (id=1677): syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f0000000340)=0x800) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) close(r2) socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000002600010316bd7000fcffbfff01"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) 286.074859ms ago: executing program 1 (id=1678): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) write$binfmt_register(r3, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xea(J\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{G\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xbd\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132?\xbf\xb2\x93B\x01\'#\xc0v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde44m\x96+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x8c\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xa1W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, './file0'}, 0x237) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)={r6}) socket$kcm(0x29, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0x8, 0x200}}, 0x44) 215.500411ms ago: executing program 6 (id=1679): r0 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x567, 0x6040000, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffe7}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205ee0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0350000000000000000002000000000000000", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="b5f98a374fbf3212416183121a357a3b99aeed4e6a8324b358be26de690ccb72e4135c43cdf522674ef7ea6520b76372c41830b741250ad82b0ec5d23eec72b680713a6b52f41acc46b65707000c8b09564bb50f302bb8e3dc8b93777e7d0f2c2a1c661cd2b255d25c623f7a41ac2bac1df2ae48359430d6e9b908800813055a3552d21dc80c405feb5a55c64aaebc0f524c18e69e325f92a23fc58754de53ddee702415494b60e3e1285ea47f9eef8b52e220be17700776f1cb249e22d3df373d6c693afda68f0cb87ac715f2805d9b66603abe97bb9811b084fefd7258883fda355c31ead32154a3e80f4204593b81167b", 0xf2}], 0x4, &(0x7f0000000880)}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$inet6_udplite(0xa, 0x2, 0x88) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) request_key(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) keyctl$get_security(0x11, r0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000700)={0x53, 0xfffffffffffffffe, 0x0, 0xb4, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x7, 0x10002, 0xfffffffd, 0x0}) 0s ago: executing program 0 (id=1680): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = open(0x0, 0x0, 0x120) lseek(r4, 0x101, 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) r5 = userfaultfd(0x801) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x4}) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x4, 0xddd8e000, 0x2000, &(0x7f000015a000/0x2000)=nil}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000662000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) kernel console output (not intermixed with test programs): 84 has invalid wMaxPacketSize 0 [ 333.726418][ T9455] pimreg: left allmulticast mode [ 333.749497][ T6994] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 333.760430][ T6994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.768908][ T6994] usb 6-1: Product: syz [ 333.773113][ T6994] usb 6-1: Manufacturer: syz [ 333.778334][ T6994] usb 6-1: SerialNumber: syz [ 333.784818][ T6994] usb 6-1: config 0 descriptor?? [ 333.900596][ T6994] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 333.915746][ T6994] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 334.111937][ T7017] usb 2-1: USB disconnect, device number 21 [ 334.247403][ T9461] bond1: Removing last ns target with arp_interval on [ 334.412382][ T1227] usb 5-1: USB disconnect, device number 23 [ 334.518606][ T6994] em28xx 6-1:0.0: chip ID is em2765 [ 334.743012][ T9468] program syz.4.915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.992236][ T9468] cgroup: fork rejected by pids controller in /syz4 [ 335.165300][ T9514] x_tables: duplicate entry at hook 2 [ 335.293331][ T6994] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 335.334232][ T6994] em28xx 6-1:0.0: board has no eeprom [ 336.436205][ T7016] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 336.606172][ T6994] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 336.614071][ T7016] usb 3-1: Using ep0 maxpacket: 16 [ 336.630036][ T6994] em28xx 6-1:0.0: dvb set to bulk mode. [ 336.636958][ T7016] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.677193][ T10] em28xx 6-1:0.0: Binding DVB extension [ 336.690583][ T7016] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 336.760570][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.837908][ T7016] usb 3-1: config 0 descriptor?? [ 336.852134][ T10] em28xx 6-1:0.0: Registering input extension [ 336.931338][ T5894] usb 6-1: USB disconnect, device number 2 [ 336.971783][ T5894] em28xx 6-1:0.0: Disconnecting em28xx [ 336.991176][ T5894] em28xx 6-1:0.0: Closing input extension [ 337.044766][ T5894] em28xx 6-1:0.0: Freeing device [ 337.348442][ T9553] fuse: Unknown parameter 'us00000000000000000000' [ 337.362908][ T7016] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 337.580946][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.703040][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.963913][ T9545] bridge2: entered promiscuous mode [ 338.003091][ T9545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.046728][ T9545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.063005][ T9545] openvswitch: netlink: Duplicate or invalid key (type 0). [ 338.248214][ T9545] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.276111][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 338.609421][ T6994] usb 3-1: USB disconnect, device number 20 [ 338.632935][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.660911][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 338.686347][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.711641][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.769297][ T9563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 338.791221][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.003111][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.013328][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.486763][ T10] usb 5-1: USB disconnect, device number 24 [ 340.924770][ T9582] dummy0: entered promiscuous mode [ 341.068345][ T9582] vlan0: entered promiscuous mode [ 341.237972][ T9583] pimreg: entered allmulticast mode [ 341.557136][ T9577] pimreg: left allmulticast mode [ 341.613385][ T9593] syzkaller0: entered promiscuous mode [ 341.618999][ T9593] syzkaller0: entered allmulticast mode [ 342.159204][ T7006] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 342.338914][ T7006] usb 2-1: Using ep0 maxpacket: 16 [ 342.379571][ T7006] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.396468][ T7006] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 342.440739][ T7006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.472781][ T7006] usb 2-1: config 0 descriptor?? [ 342.617834][ T7006] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 343.156418][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 343.165544][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.935'. [ 343.206760][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.935'. [ 343.499509][ T5179] bcm5974 2-1:0.0: could not read from device [ 343.648909][ T7006] usb 2-1: USB disconnect, device number 22 [ 345.999311][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 345.999329][ T30] audit: type=1326 audit(1769604780.164:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.048232][ T30] audit: type=1326 audit(1769604780.194:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.081100][ T30] audit: type=1326 audit(1769604780.194:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.164346][ T30] audit: type=1326 audit(1769604780.194:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.311688][ T30] audit: type=1326 audit(1769604780.194:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.384898][ T30] audit: type=1326 audit(1769604780.194:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.481995][ T30] audit: type=1326 audit(1769604780.194:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.572229][ T30] audit: type=1326 audit(1769604780.194:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.686224][ T30] audit: type=1326 audit(1769604780.194:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 346.716432][ T30] audit: type=1326 audit(1769604780.204:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9633 comm="syz.4.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 347.029877][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.944'. [ 347.840435][ T9652] fuse: Unknown parameter 'user_i00000000000000000000' [ 349.704873][ T9672] pimreg: entered allmulticast mode [ 349.979287][ T9666] pimreg: left allmulticast mode [ 350.407274][ T9682] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 351.361072][ T9692] hub 9-0:1.0: USB hub found [ 351.368669][ T9692] hub 9-0:1.0: 1 port detected [ 351.399805][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.951'. [ 352.281744][ T6994] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 352.316134][ T9689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.456095][ T6994] usb 2-1: Using ep0 maxpacket: 16 [ 352.472619][ T6994] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 352.483047][ T6994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.523100][ T6994] usb 2-1: config 0 has no interface number 0 [ 352.574604][ T6994] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.614609][ T6994] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 352.627568][ T6994] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 352.635814][ T6994] usb 2-1: Product: syz [ 352.642716][ T6994] usb 2-1: SerialNumber: syz [ 352.673036][ T6994] usb 2-1: config 0 descriptor?? [ 352.691791][ T6994] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 353.461967][ T9719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.959'. [ 355.037539][ T6994] usb 2-1: USB disconnect, device number 23 [ 355.426212][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.839720][ T8857] wlan0: Trigger new scan to find an IBSS to join [ 357.278420][ T9751] netlink: 'syz.1.965': attribute type 33 has an invalid length. [ 358.506533][ T9758] input: syz0 as /devices/virtual/input/input22 [ 359.780039][ T8857] wlan0: Trigger new scan to find an IBSS to join [ 360.490515][ T9779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.971'. [ 360.956552][ T9786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'. [ 361.258037][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.926252][ T7017] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 364.543714][ T7017] usb 1-1: config 0 interface 0 has no altsetting 0 [ 364.550722][ T7017] usb 1-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 364.571896][ T7017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.016214][ T9821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.027864][ T7017] usb 1-1: config 0 descriptor?? [ 365.169799][ T9821] netlink: 148 bytes leftover after parsing attributes in process `syz.5.979'. [ 365.511968][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 365.527125][ T9815] bridge0: entered promiscuous mode [ 365.559569][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 365.596874][ T7017] usbhid 1-1:0.0: can't add hid device: -71 [ 365.603791][ T7017] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 365.622303][ T7017] usb 1-1: USB disconnect, device number 21 [ 366.936953][ T6994] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 367.127973][ T6994] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 367.146172][ T6994] usb 1-1: config 0 interface 0 has no altsetting 0 [ 367.176171][ T6994] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 367.192946][ T6994] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 367.208611][ T6994] usb 1-1: Product: syz [ 367.216258][ T6994] usb 1-1: Manufacturer: syz [ 367.220864][ T6994] usb 1-1: SerialNumber: syz [ 367.234178][ T6994] usb 1-1: config 0 descriptor?? [ 367.250914][ T6994] usb 1-1: selecting invalid altsetting 0 [ 367.977100][ T1227] usb 1-1: USB disconnect, device number 22 [ 368.240340][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.987'. [ 369.315022][ T9872] program syz.1.989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.329859][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.990'. [ 371.031747][ T9902] netlink: 56 bytes leftover after parsing attributes in process `syz.4.993'. [ 371.804473][ T9911] sctp: [Deprecated]: syz.5.995 (pid 9911) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.804473][ T9911] Use struct sctp_sack_info instead [ 371.868825][ T9914] IPVS: Error connecting to the multicast addr [ 371.900595][ T9911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.995'. [ 372.308327][ T9921] binder: 9917:9921 ioctl 400c620e 200000000100 returned -22 [ 372.468558][ T9921] batadv_slave_1: entered promiscuous mode [ 372.895199][ T9926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.914882][ T9926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.992024][ T9926] netlink: 148 bytes leftover after parsing attributes in process `syz.4.998'. [ 373.106298][ T9930] tipc: Failed to remove unknown binding: 66,1,1/0:150598417/150598419 [ 373.456226][ T7006] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 373.606067][ T7006] usb 2-1: Using ep0 maxpacket: 16 [ 373.613339][ T7006] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 373.675118][ T7006] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 374.056167][ T7017] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 374.331747][ T7017] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.343960][ T7017] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 374.362091][ T7017] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.396365][ T7017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.432986][ T9942] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 374.445697][ T7017] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.736164][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.753013][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.734853][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1002'. [ 376.154657][ T9954] openvswitch: netlink: IP tunnel dst address not specified [ 376.256388][ T7006] usb 2-1: string descriptor 0 read error: -71 [ 376.280272][ T7006] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.305286][ T7006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.322916][ T7006] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 376.331806][ T7006] usb 2-1: no configuration chosen from 1 choice [ 376.577809][ T7006] usb 2-1: USB disconnect, device number 24 [ 376.676083][ T7017] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 377.096303][ T6994] usb 3-1: USB disconnect, device number 21 [ 377.608658][ T7017] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 377.615325][ T7006] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 377.881055][ T7017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.913935][ T7006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.935791][ T7006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.940672][ T7017] usb 1-1: config 0 descriptor?? [ 377.973101][ T7017] pwc: Philips SPC 900NC USB webcam detected. [ 377.997797][ T7006] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 378.012996][ T7006] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 378.027276][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 378.111216][ T7006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.138301][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.166138][ T6994] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 378.212939][ T7006] usb 2-1: config 0 descriptor?? [ 378.383379][ T9954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1003'. [ 378.497360][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.504112][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.680338][ T7006] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 378.701406][ T7006] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 378.706215][ T6994] usb 3-1: Using ep0 maxpacket: 16 [ 378.735927][ T6994] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 378.743564][ T6994] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 378.776296][ T6994] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 378.785604][ T6994] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 378.802100][ T6994] usb 3-1: Product: syz [ 378.809739][ T6994] usb 3-1: SerialNumber: syz [ 378.850717][ T6994] usb 3-1: config 0 descriptor?? [ 379.080671][ T9976] could not allocate digest TFM handle md5 [ 379.649128][ T7017] pwc: send_video_command error -71 [ 379.673487][ T7017] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 379.694371][ T7017] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 379.730020][ T7017] usb 1-1: USB disconnect, device number 23 [ 380.002204][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 380.002222][ T30] audit: type=1326 audit(1769604814.124:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9981 comm="syz.0.1009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09bdf9aeb9 code=0x0 [ 380.126100][ T7006] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 380.427955][ T5894] usb 3-1: USB disconnect, device number 22 [ 380.493351][ T9995] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 380.502534][ T9995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.511486][ T9995] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 381.027156][ T1227] usb 2-1: USB disconnect, device number 25 [ 381.454736][T10002] pimreg: entered allmulticast mode [ 381.937573][ T9989] pimreg: left allmulticast mode [ 382.037948][ T7017] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 382.448698][T10010] netlink: 'syz.0.1014': attribute type 10 has an invalid length. [ 382.467027][ T7017] usb 3-1: Using ep0 maxpacket: 16 [ 382.474660][ T7017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.505594][ T7017] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.506735][T10010] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 382.540023][ T7017] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 382.559542][T10010] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 382.660562][ T7017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.685179][ T7017] usb 3-1: Product: syz [ 382.701743][ T7017] usb 3-1: Manufacturer: syz [ 382.712791][ T7017] usb 3-1: SerialNumber: syz [ 382.876543][ T6994] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 382.969470][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'. [ 382.986256][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.029253][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.091404][ T6994] usb 2-1: Using ep0 maxpacket: 32 [ 383.102189][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'. [ 383.161664][ T6994] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 383.182188][ T9995] bond0: (slave batadv0): Releasing backup interface [ 383.245589][ T6994] usb 2-1: config 0 has no interface number 0 [ 383.271187][ T6994] usb 2-1: config 0 interface 23 has no altsetting 0 [ 383.298454][ T6994] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 383.357965][T10023] pimreg: entered allmulticast mode [ 383.415517][ T6994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.537840][ T7017] usb 3-1: 0:2 : does not exist [ 383.545608][ T6994] usb 2-1: Product: syz [ 383.552731][ T6994] usb 2-1: Manufacturer: syz [ 383.560793][ T6994] usb 2-1: SerialNumber: syz [ 383.568553][ T7017] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 383.582672][ T6994] usb 2-1: config 0 descriptor?? [ 383.904347][T10012] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1015'. [ 383.968203][ T7017] usb 3-1: USB disconnect, device number 23 [ 384.133343][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.256994][T10015] pimreg: left allmulticast mode [ 386.017663][ T6994] usb 2-1: USB disconnect, device number 26 [ 386.683161][T10058] fuse: Bad value for 'fd' [ 388.167118][T10077] pimreg: entered allmulticast mode [ 388.465382][T10083] fuse: Unknown parameter 'us00000000000000000000' [ 389.365271][T10073] pimreg: left allmulticast mode [ 389.512893][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1029'. [ 389.899065][T10098] openvswitch: netlink: Flow key attr not present in new flow. [ 391.130437][T10101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.200331][T10106] hub 9-0:1.0: USB hub found [ 391.206164][T10106] hub 9-0:1.0: 1 port detected [ 391.397951][T10107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.421859][T10101] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1033'. [ 391.931375][T10118] netlink: 'syz.2.1035': attribute type 12 has an invalid length. [ 392.147064][T10120] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 392.154817][T10120] batadv1: entered promiscuous mode [ 392.164306][T10120] team0: Port device batadv1 added [ 392.188000][T10120] hub 9-0:1.0: USB hub found [ 392.196186][T10120] hub 9-0:1.0: 1 port detected [ 393.837148][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 394.321637][T10140] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 394.456129][ T30] audit: type=1326 audit(1769604828.594:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.4.1040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90af39aeb9 code=0x0 [ 395.628829][T10158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.932134][T10158] netlink: 'syz.2.1039': attribute type 10 has an invalid length. [ 395.943982][T10158] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.953556][T10158] bond0: (slave team0): Enslaving as an active interface with an up link [ 396.178004][T10157] pimreg: entered allmulticast mode [ 396.445594][T10153] pimreg: left allmulticast mode [ 396.836193][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1044'. [ 397.225805][T10168] pimreg: entered allmulticast mode [ 397.543289][T10178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1046'. [ 397.739687][T10160] pimreg: left allmulticast mode [ 398.487057][T10182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1047'. [ 399.887889][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 400.156172][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 400.220768][T10213] xt_TCPMSS: Only works on TCP SYN packets [ 400.272188][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 400.345890][ T10] usb 2-1: config 4 interface 0 has no altsetting 0 [ 400.367875][ T10] usb 2-1: string descriptor 0 read error: -22 [ 400.374325][ T10] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 400.421203][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.626566][ T10] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 400.693236][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 400.734194][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 400.758417][ T10] usb 2-1: media controller created [ 400.816944][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.470432][T10217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.496125][T10217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.915544][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 402.344588][T10222] pimreg: entered allmulticast mode [ 402.881014][T10218] pimreg: left allmulticast mode [ 403.062327][ T796] usb 2-1: USB disconnect, device number 27 [ 403.860123][T10243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'. [ 405.079685][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 405.406089][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 405.556223][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 405.574113][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.621814][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.720084][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.738461][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.749798][ T10] usb 2-1: Product: syz [ 405.754117][ T10] usb 2-1: Manufacturer: syz [ 405.759936][ T10] usb 2-1: SerialNumber: syz [ 406.120294][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'. [ 408.126805][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.136064][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.202847][T10287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.210161][T10287] IPv6: NLM_F_CREATE should be set when creating new route [ 408.217492][T10287] IPv6: NLM_F_CREATE should be set when creating new route [ 408.224711][T10287] IPv6: NLM_F_CREATE should be set when creating new route [ 409.224034][T10293] pimreg: entered allmulticast mode [ 409.453284][ T10] usb 2-1: 0:2 : does not exist [ 409.467929][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 409.505720][ T10] usb 2-1: USB disconnect, device number 28 [ 409.592792][T10288] pimreg: left allmulticast mode [ 409.911105][ T30] audit: type=1326 audit(1769604843.944:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 409.956171][ T30] audit: type=1326 audit(1769604843.944:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 409.979195][ T30] audit: type=1326 audit(1769604843.954:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.064483][ T30] audit: type=1326 audit(1769604843.954:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.156403][ T30] audit: type=1326 audit(1769604843.954:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.246074][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 410.270422][ T30] audit: type=1326 audit(1769604843.954:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.378498][ T30] audit: type=1326 audit(1769604843.954:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.427704][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 410.516165][ T30] audit: type=1326 audit(1769604843.954:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.546379][ T30] audit: type=1326 audit(1769604843.954:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.571344][ T10] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 410.579830][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.590117][ T30] audit: type=1326 audit(1769604843.954:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10297 comm="syz.1.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 410.612716][ T10] usb 2-1: config 0 has no interface number 0 [ 410.799381][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 410.967367][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.006990][ T10] usb 2-1: Product: syz [ 411.023553][ T10] usb 2-1: Manufacturer: syz [ 411.038426][ T10] usb 2-1: SerialNumber: syz [ 411.119031][T10313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1075'. [ 411.156774][ T10] usb 2-1: config 0 descriptor?? [ 411.220191][ T10] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 411.305409][ T10] uvcvideo 2-1:0.105: No valid video chain found. [ 411.868806][T10321] binder: BINDER_SET_CONTEXT_MGR already set [ 411.875946][T10321] binder: 10316:10321 ioctl 4018620d 200000004a80 returned -16 [ 412.119907][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 412.682262][ T7006] usb 2-1: USB disconnect, device number 29 [ 413.110938][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'. [ 413.252903][T10336] tipc: Started in network mode [ 413.261338][T10336] tipc: Node identity , cluster identity 4711 [ 413.268598][T10336] tipc: Failed to obtain node identity [ 413.274737][T10336] tipc: Enabling of bearer rejected, failed to enable media [ 413.289178][T10329] IPVS: length: 149 != 17667290688 [ 413.434412][T10336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.886137][ T7014] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 414.099255][ T7014] usb 5-1: config 8 has no interfaces? [ 414.104476][ T7014] usb 5-1: New USB device found, idVendor=0bda, idProduct=8053, bcdDevice=71.df [ 414.104496][ T7014] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.104507][ T7014] usb 5-1: Product: syz [ 414.104515][ T7014] usb 5-1: Manufacturer: syz [ 414.104524][ T7014] usb 5-1: SerialNumber: syz [ 414.111316][ T7014] r8152-cfgselector 5-1: Unknown version 0x0000 [ 416.470556][ T796] r8152-cfgselector 5-1: USB disconnect, device number 25 [ 416.869284][T10374] pimreg: entered allmulticast mode [ 417.072928][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.207401][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.219904][T10380] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1088'. [ 417.277048][T10366] pimreg: left allmulticast mode [ 417.729966][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1089'. [ 418.300433][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 419.079853][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.096585][T10395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.108845][T10395] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1092'. [ 419.425272][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1091'. [ 419.624124][T10409] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 420.006201][ T796] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 420.445196][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'. [ 420.454350][ T796] usb 6-1: Using ep0 maxpacket: 16 [ 420.528472][ T796] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.627406][ T796] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 420.636630][ T796] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.657037][ T796] usb 6-1: Product: syz [ 420.676873][ T796] usb 6-1: Manufacturer: syz [ 420.688811][ T796] usb 6-1: SerialNumber: syz [ 420.716500][ T796] usb 6-1: config 0 descriptor?? [ 420.816116][ T7014] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 420.989258][ T7014] usb 3-1: Using ep0 maxpacket: 16 [ 421.023012][ T7014] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.064784][ T7014] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.115905][ T7014] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.125633][ T7014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.153406][ T7014] usb 3-1: Product: syz [ 421.222415][ T7014] usb 3-1: Manufacturer: syz [ 421.281350][ T7014] usb 3-1: SerialNumber: syz [ 421.313658][T10423] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 421.320223][T10423] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 421.347516][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 421.406471][T10423] vhci_hcd vhci_hcd.0: Device attached [ 421.579689][T10434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1098'. [ 421.584991][T10425] vhci_hcd: connection closed [ 421.616298][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 421.636499][ T8857] vhci_hcd vhci_hcd.1: stop threads [ 421.641753][ T8857] vhci_hcd vhci_hcd.1: release socket [ 421.650833][ T8857] vhci_hcd vhci_hcd.1: disconnect device [ 422.704652][ T10] usb 6-1: USB disconnect, device number 3 [ 423.110228][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 423.110245][ T30] audit: type=1326 audit(1769604857.274:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 423.224849][T10444] program syz.5.1099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.234633][T10444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 423.246788][T10444] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 423.314783][ T30] audit: type=1326 audit(1769604857.274:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 423.346298][ T30] audit: type=1326 audit(1769604857.274:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 423.377069][ T30] audit: type=1326 audit(1769604857.274:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 423.523938][ T30] audit: type=1326 audit(1769604857.274:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 423.576184][ T30] audit: type=1326 audit(1769604857.274:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 424.119427][ T30] audit: type=1326 audit(1769604857.274:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 424.196157][ T30] audit: type=1326 audit(1769604857.274:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 424.371243][T10460] trusted_key: encrypted_key: insufficient parameters specified [ 424.403728][T10460] misc userio: The device must be registered before sending interrupts [ 424.426277][ T7014] usb 3-1: 0:2 : does not exist [ 424.483611][ T30] audit: type=1326 audit(1769604857.324:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 424.507317][ T7014] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 424.523679][T10462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.540552][T10462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.551156][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.671719][ T7014] usb 3-1: USB disconnect, device number 24 [ 424.697561][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.746097][ T30] audit: type=1326 audit(1769604857.334:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.4.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 424.895316][T10463] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1102'. [ 425.238866][T10467] input: syz1 as /devices/virtual/input/input27 [ 425.989079][T10473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.021966][T10473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.720096][T10485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.773345][T10485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.020539][T10485] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1107'. [ 427.243233][T10489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1109'. [ 427.391698][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1109'. [ 428.680210][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 428.680225][ T30] audit: type=1326 audit(1769604862.844:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 428.790515][ T30] audit: type=1326 audit(1769604862.934:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 428.861111][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1111'. [ 428.916182][ T30] audit: type=1326 audit(1769604862.934:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.004713][T10509] capability: warning: `syz.5.1112' uses 32-bit capabilities (legacy support in use) [ 429.189523][ T30] audit: type=1326 audit(1769604862.944:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.239479][ T30] audit: type=1326 audit(1769604862.944:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.284235][ T30] audit: type=1326 audit(1769604862.944:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.326307][ T30] audit: type=1326 audit(1769604862.944:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.437146][ T30] audit: type=1326 audit(1769604862.944:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.491152][ T6994] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 429.730901][ T30] audit: type=1326 audit(1769604862.944:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.756238][ T30] audit: type=1326 audit(1769604863.004:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffbac19aeb9 code=0x7ffc0000 [ 429.857000][ T6994] usb 3-1: Using ep0 maxpacket: 32 [ 429.946116][ T6994] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 429.988670][ T6994] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 430.016342][ T6994] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 430.186199][ T6994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 430.236177][ T6994] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 430.266141][ T6994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 430.296153][ T6994] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 430.376197][ T6994] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 430.457065][ T6994] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 430.539796][ T6994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.575683][ T6994] usb 3-1: config 0 descriptor?? [ 430.596887][T10514] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 430.725287][T10529] batadv_slave_0: entered promiscuous mode [ 430.866794][ T6994] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 431.006730][T10530] fuse: Bad value for 'fd' [ 431.013515][T10530] fuse: Bad value for 'fd' [ 431.019768][T10530] x_tables: duplicate underflow at hook 4 [ 431.057321][ C0] usblp0: nonzero read bulk status received: -71 [ 431.290046][T10514] usblp0: error -71 reading from printer [ 431.318814][ C0] usblp0: nonzero read bulk status received: -71 [ 431.870801][T10545] kvm: pic: non byte read [ 431.876590][T10545] kvm: pic: non byte read [ 431.881248][T10545] kvm: pic: non byte read [ 431.888280][T10545] kvm: pic: non byte read [ 431.892856][T10545] kvm: pic: non byte read [ 431.897500][T10545] kvm: pic: non byte read [ 431.902008][T10545] kvm: pic: non byte read [ 431.906582][T10545] kvm: pic: non byte read [ 431.911071][T10545] kvm: pic: non byte read [ 431.915549][T10545] kvm: pic: non byte read [ 432.376172][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 432.552786][ T5896] usb 6-1: config 0 has no interfaces? [ 432.582429][ T5896] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 432.602164][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.618769][ T5896] usb 6-1: Product: syz [ 432.645298][ T7014] usb 3-1: USB disconnect, device number 25 [ 432.649108][ T5896] usb 6-1: Manufacturer: syz [ 432.665954][ T5896] usb 6-1: SerialNumber: syz [ 432.666235][ T7014] usblp0: removed [ 432.706732][ T5896] usb 6-1: config 0 descriptor?? [ 432.949561][T10555] bond1: Removing last ns target with arp_interval on [ 434.811091][ T6994] usb 6-1: USB disconnect, device number 4 [ 435.066312][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.084723][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.096085][T10575] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1123'. [ 435.332988][T10583] input: syz1 as /devices/virtual/input/input28 [ 435.636794][ T7014] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 435.951951][ T7014] usb 6-1: Using ep0 maxpacket: 32 [ 435.979646][ T7014] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 436.132629][ T7014] usb 6-1: config 0 has no interface number 0 [ 436.173137][ T7014] usb 6-1: config 0 interface 23 has no altsetting 0 [ 436.251344][ T7014] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 436.271258][ T7014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.311802][ T7014] usb 6-1: Product: syz [ 436.323322][ T7014] usb 6-1: Manufacturer: syz [ 436.335246][ T7014] usb 6-1: SerialNumber: syz [ 436.371178][ T7014] usb 6-1: config 0 descriptor?? [ 436.496311][ T6994] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 436.835962][ T6994] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 436.881535][ T6994] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 436.902399][ T6994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.931341][ T6994] usb 5-1: Product: syz [ 436.943232][ T6994] usb 5-1: Manufacturer: syz [ 436.957734][ T6994] usb 5-1: SerialNumber: syz [ 436.979150][ T6994] usb 5-1: config 0 descriptor?? [ 437.405819][ T6994] usb-storage 5-1:0.0: USB Mass Storage device detected [ 437.439245][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 438.702247][ T6994] usb 5-1: USB disconnect, device number 26 [ 438.972014][ T7014] usb 6-1: USB disconnect, device number 5 [ 439.380468][T10623] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.488075][T10623] overlayfs: missing 'lowerdir' [ 439.910388][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.919400][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.616580][ T5896] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 440.924722][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 441.023605][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1135'. [ 441.189597][ T5896] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 441.205375][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.215507][ T5896] usb 5-1: Product: syz [ 441.229921][ T5896] usb 5-1: Manufacturer: syz [ 441.234499][ T5896] usb 5-1: SerialNumber: syz [ 441.241828][ T5896] usb 5-1: config 0 descriptor?? [ 441.248798][ T5896] hub 5-1:0.0: bad descriptor, ignoring hub [ 441.255101][ T5896] hub 5-1:0.0: probe with driver hub failed with error -5 [ 442.694176][T10650] bond2: entered promiscuous mode [ 442.700809][T10650] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.756346][T10656] fuse: Bad value for 'fd' [ 442.805197][T10652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 442.813542][T10652] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 442.827596][T10652] bond2: (slave gre1): Error -95 calling set_mac_address [ 442.995069][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 443.039208][ T7014] usb 5-1: USB disconnect, device number 27 [ 443.049710][T10666] netlink: 'syz.0.1141': attribute type 10 has an invalid length. [ 443.253730][T10666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.368535][T10666] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 445.104726][T10680] input: syz1 as /devices/virtual/input/input29 [ 445.526190][ T6994] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 445.692494][ T6994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 8224, setting to 1024 [ 445.731771][ T6994] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 445.764313][ T6994] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.825176][ T6994] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 445.834764][ T6994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.853904][ T6994] usb 5-1: Product: syz [ 445.864136][ T6994] usb 5-1: Manufacturer: syz [ 445.873085][ T6994] usb 5-1: SerialNumber: syz [ 445.895276][T10681] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 445.935456][ T6994] hub 5-1:1.0: bad descriptor, ignoring hub [ 445.949556][ T6994] hub 5-1:1.0: probe with driver hub failed with error -5 [ 446.126927][ T6994] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 446.616639][ T7006] usb 5-1: USB disconnect, device number 28 [ 446.680400][ T7006] usblp0: removed [ 447.181491][T10702] netlink: 'syz.2.1149': attribute type 2 has an invalid length. [ 447.189413][T10702] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1149'. [ 447.266183][T10702] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.858544][T10708] pimreg: entered allmulticast mode [ 448.520610][T10703] pimreg: left allmulticast mode [ 449.261085][T10726] hub 1-0:1.0: USB hub found [ 449.286412][T10726] hub 1-0:1.0: 1 port detected [ 451.326158][ T7014] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 451.536855][T10750] kAFS: unable to lookup cell '(,' [ 451.633336][ T7014] usb 3-1: config 0 has no interfaces? [ 451.642061][ T7014] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 451.723124][ T7014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.774984][ T7014] usb 3-1: config 0 descriptor?? [ 452.118034][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 452.118051][ T30] audit: type=1326 audit(1769604886.244:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.168581][ T30] audit: type=1326 audit(1769604886.244:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.214961][ T30] audit: type=1326 audit(1769604886.244:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.241871][ T30] audit: type=1326 audit(1769604886.244:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.355006][ T30] audit: type=1326 audit(1769604886.244:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.396182][ T6994] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 452.446157][ T7014] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 452.506132][ T30] audit: type=1326 audit(1769604886.244:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.815180][ T7014] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 452.835211][ T6994] usb 2-1: Using ep0 maxpacket: 32 [ 452.856253][ T7014] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 452.865368][ T30] audit: type=1326 audit(1769604886.244:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.867788][ T7014] usb 6-1: config 0 interface 0 has no altsetting 0 [ 452.905720][ T6994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.935763][ T6994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.950371][ T7014] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 452.959648][ T30] audit: type=1326 audit(1769604886.244:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 452.982419][ T6994] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 452.991521][ T7014] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 453.001700][ T6994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.009721][ T7014] usb 6-1: Product: syz [ 453.013966][ T7014] usb 6-1: Manufacturer: syz [ 453.019550][ T7014] usb 6-1: SerialNumber: syz [ 453.025883][ T6994] usb 2-1: config 0 descriptor?? [ 453.033376][ T7014] usb 6-1: config 0 descriptor?? [ 453.086831][ T7014] usb 6-1: selecting invalid altsetting 0 [ 453.176210][ T30] audit: type=1326 audit(1769604886.254:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 453.286800][ T30] audit: type=1326 audit(1769604886.254:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10754 comm="syz.1.1162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808e79aeb9 code=0x7ffc0000 [ 453.525025][ T6994] ft260 0003:0403:6030.0017: unknown main item tag 0x7 [ 453.930970][ T6994] ft260 0003:0403:6030.0017: chip code: 6424 8183 [ 454.136615][ T6994] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 454.348968][ T6994] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 454.787043][ T7014] usb 2-1: reset high-speed USB device number 30 using dummy_hcd [ 455.666616][T10779] loop6: detected capacity change from 0 to 524288000 [ 455.896570][T10779] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1165'. [ 456.049335][T10780] bond1: option ad_user_port_key: invalid value (40434) [ 456.059891][T10780] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 456.231229][T10780] bond1 (unregistering): Released all slaves [ 456.714157][T10782] pimreg: entered allmulticast mode [ 456.722308][T10782] pimreg: left allmulticast mode [ 456.727630][ T7017] usb 6-1: USB disconnect, device number 6 [ 456.814052][ T10] usb 3-1: USB disconnect, device number 26 [ 456.893178][T10786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.504375][ T6994] usb 2-1: USB disconnect, device number 30 [ 457.611020][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.633152][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.646309][T10802] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1169'. [ 458.839049][T10807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1171'. [ 459.183862][T10814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1173'. [ 459.598020][T10824] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 459.624964][T10820] netlink: 'syz.4.1176': attribute type 33 has an invalid length. [ 461.147835][T10840] pimreg: entered allmulticast mode [ 461.196717][T10845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.723044][T10835] pimreg: left allmulticast mode [ 462.230628][T10856] program syz.2.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.331030][T10856] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 462.370019][T10864] libceph: resolve ' [ 462.370019][T10864] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 462.370019][T10864] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 462.987785][T10856] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 463.576126][ T796] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 463.770927][ T796] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 463.799923][ T796] usb 1-1: config 0 interface 0 has no altsetting 0 [ 463.848001][ T796] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 463.870889][ T796] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 463.902757][ T796] usb 1-1: Product: syz [ 463.912844][ T796] usb 1-1: Manufacturer: syz [ 463.935492][ T796] usb 1-1: SerialNumber: syz [ 463.947610][ T796] usb 1-1: config 0 descriptor?? [ 464.112748][ T796] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 464.305621][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.389025][T10904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 465.416358][T10904] overlayfs: missing 'lowerdir' [ 466.178593][T10914] pimreg: entered allmulticast mode [ 466.386378][ T8857] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.446464][ T796] usb 1-1: USB disconnect, device number 24 [ 466.577789][T10908] pimreg: left allmulticast mode [ 466.841225][T10924] input: syz1 as /devices/virtual/input/input31 [ 466.895628][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1206'. [ 467.044205][T10928] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1207'. [ 468.056635][T10947] kAFS: unable to lookup cell 'ÿ' [ 468.063131][T10947] kAFS: unable to lookup cell '(,c¾Ì' [ 468.275819][ T7016] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 468.289467][T10951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.556831][ T7016] usb 5-1: Using ep0 maxpacket: 32 [ 468.581589][ T7016] usb 5-1: config 0 has an invalid interface number: 23 but max is 0 [ 468.609096][ T7016] usb 5-1: config 0 has no interface number 0 [ 468.738051][ T7016] usb 5-1: config 0 interface 23 has no altsetting 0 [ 468.772002][ T7016] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice=f9.bf [ 468.798426][ T7016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.818882][ T7016] usb 5-1: Product: syz [ 468.828691][ T7016] usb 5-1: Manufacturer: syz [ 468.833320][ T7016] usb 5-1: SerialNumber: syz [ 468.869061][ T7016] usb 5-1: config 0 descriptor?? [ 469.886378][T10987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.964491][T10987] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1225'. [ 470.163115][T10985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.485098][T10994] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1229'. [ 470.519492][T10994] loop2: detected capacity change from 0 to 7 [ 470.541350][T10994] Dev loop2: unable to read RDB block 7 [ 470.550419][T10994] loop2: AHDI p2 p3 [ 470.554464][T10994] loop2: partition table partially beyond EOD, truncated [ 470.562550][T10994] loop2: p2 start 1702059890 is beyond EOD, truncated [ 470.876142][ T5896] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 471.066139][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 471.090191][ T5896] usb 3-1: config 8 has an invalid interface number: 159 but max is 0 [ 471.129759][ T5896] usb 3-1: config 8 has no interface number 0 [ 471.157996][ T5896] usb 3-1: config 8 interface 159 has no altsetting 0 [ 471.193296][ T5896] usb 3-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 471.316406][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.346128][ T5896] usb 3-1: Product: syz [ 471.368023][ T5896] usb 3-1: Manufacturer: syz [ 471.372653][ T5896] usb 3-1: SerialNumber: syz [ 471.918357][T11008] fuse: Unknown parameter '000000000000000000040x0000000000000006' [ 471.988773][T11008] geneve2: entered allmulticast mode [ 472.036538][ T7016] usb 5-1: USB disconnect, device number 29 [ 473.810452][ T5896] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 473.853272][ T5896] gspca_sonixj: reg_w1 err -71 [ 473.876251][ T5896] sonixj 3-1:8.159: probe with driver sonixj failed with error -71 [ 474.003434][ T5896] usb 3-1: USB disconnect, device number 27 [ 474.043031][T11024] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.1232'. [ 474.888211][T11045] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 475.100520][T11045] bond2: entered promiscuous mode [ 475.106320][T11045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.208697][T11046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 475.321014][T11046] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 475.516478][T11060] block device autoloading is deprecated and will be removed. [ 475.550013][T11046] bond2: (slave gre1): Error -95 calling set_mac_address [ 475.636691][T11060] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 475.663983][T11054] IPVS: Unknown mcast interface: hsr0 [ 475.693282][T11060] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 475.746498][T11063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 475.794122][ T7006] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 476.033826][ T7006] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 476.076210][ T7006] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.257461][ T7006] usb 3-1: config 0 descriptor?? [ 476.300285][ T7006] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 476.482527][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1254'. [ 476.772121][T11083] netlink: 'syz.5.1252': attribute type 4 has an invalid length. [ 476.906364][ T7006] gspca_sunplus: reg_w_riv err -110 [ 476.911682][ T7006] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 476.956187][ T7016] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 477.136264][ T7016] usb 2-1: Using ep0 maxpacket: 32 [ 477.156282][ T7014] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 477.195567][ T7016] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 477.216137][ T7016] usb 2-1: config 0 has no interface number 0 [ 477.243885][ T7016] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 477.290602][ T7016] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 477.454381][ T7014] usb 6-1: Using ep0 maxpacket: 16 [ 477.483727][ T7016] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 477.498213][ T7016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.521350][ T7014] usb 6-1: config 0 has no interfaces? [ 477.539774][ T7014] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 477.552410][ T7016] usb 2-1: Product: syz [ 477.566713][ T7014] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 477.575788][ T7016] usb 2-1: Manufacturer: syz [ 477.586898][ T7016] usb 2-1: SerialNumber: syz [ 477.591769][ T7014] usb 6-1: Manufacturer: syz [ 477.699843][ T7016] usb 2-1: config 0 descriptor?? [ 477.716552][ T7014] usb 6-1: config 0 descriptor?? [ 478.150747][ T7006] usb 3-1: USB disconnect, device number 28 [ 478.263107][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 479.230953][T11112] usb usb7: usbfs: process 11112 (syz.4.1263) did not claim interface 0 before use [ 479.343940][ T7016] usb 2-1: USB disconnect, device number 31 [ 479.415287][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.785525][ T7016] usb 6-1: USB disconnect, device number 7 [ 480.055334][T11131] tipc: Started in network mode [ 480.060866][T11131] tipc: Node identity , cluster identity 4711 [ 480.068437][T11131] tipc: Failed to set node id, please configure manually [ 480.077041][T11131] tipc: Enabling of bearer rejected, failed to enable media [ 480.223697][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1271'. [ 480.547304][ T7017] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 480.728310][ T7017] usb 3-1: Using ep0 maxpacket: 16 [ 480.738827][ T7017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.749515][ T7017] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.781519][ T7017] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.793366][ T7017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.806139][ T7017] usb 3-1: Product: syz [ 480.810322][ T7017] usb 3-1: Manufacturer: syz [ 480.815073][ T7017] usb 3-1: SerialNumber: syz [ 481.299725][T11169] xt_hashlimit: max too large, truncated to 1048576 [ 481.415644][T11176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1283'. [ 482.257069][T11187] Dead loop on virtual device ip6_vti0, fix it urgently! [ 482.686291][ T796] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 482.854617][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.906154][ T796] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.956901][ T796] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 482.999613][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.092056][ T796] usb 5-1: config 0 descriptor?? [ 483.349335][T11209] netlink: 'syz.5.1301': attribute type 1 has an invalid length. [ 483.456179][ T7014] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 483.505445][T11209] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 483.531026][T11209] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 483.616954][ T796] aureal 0003:0755:2626.0018: unknown main item tag 0x0 [ 483.623977][ T796] aureal 0003:0755:2626.0018: unknown main item tag 0x0 [ 483.664883][ T796] aureal 0003:0755:2626.0018: unknown main item tag 0x0 [ 483.683192][ T796] aureal 0003:0755:2626.0018: unknown main item tag 0x0 [ 483.694029][ T7014] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 483.704119][ T7014] usb 2-1: config 0 has no interface number 0 [ 483.718122][ T7017] usb 3-1: 0:2 : does not exist [ 483.740218][T11209] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.767278][ T7014] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 483.778449][ T7014] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 483.787289][ T796] aureal 0003:0755:2626.0018: unknown main item tag 0x0 [ 483.789556][ T7014] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 483.833749][ T7017] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 483.866217][ T7014] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 483.888733][T11209] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 483.896618][ T796] aureal 0003:0755:2626.0018: unknown main item tag 0x0 [ 483.901252][ T7014] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 483.925314][ T796] aureal 0003:0755:2626.0018: unknown main item tag 0x0 [ 483.925880][ T7017] usb 3-1: USB disconnect, device number 29 [ 483.955451][ T7014] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 483.973879][ T796] aureal 0003:0755:2626.0018: hidraw0: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.4-1/input0 [ 484.015245][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 484.025903][ T7014] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 484.056410][ T7014] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.074202][ T7014] usb 2-1: config 0 descriptor?? [ 484.088302][T11205] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 484.109135][T11205] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 484.215825][T11209] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 484.229651][T11219] vlan2: entered promiscuous mode [ 484.234881][T11219] bridge0: entered promiscuous mode [ 484.243665][T11209] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 484.258285][ T7014] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 484.287222][T11209] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 484.310691][T11209] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 484.349536][T11209] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 484.364056][T11209] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 484.373423][T11223] bridge_slave_1: left allmulticast mode [ 484.381434][T11223] bridge_slave_1: left promiscuous mode [ 484.418658][T11205] ldusb 2-1:0.55: Write buffer overflow, 1 bytes dropped [ 484.445876][T11223] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.468424][T11223] bridge_slave_0: left allmulticast mode [ 484.474145][T11223] bridge_slave_0: left promiscuous mode [ 484.483134][ T7006] usb 2-1: USB disconnect, device number 32 [ 484.493767][ T7006] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 484.495815][T11223] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.910071][T11236] tipc: Failed to obtain node identity [ 484.920208][T11236] tipc: Enabling of bearer rejected, failed to enable media [ 485.067849][T11240] input: syz1 as /devices/virtual/input/input32 [ 485.216264][ T7014] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 485.393611][ T7014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.405800][ T7014] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.421047][ T7014] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 485.431390][ T7014] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.454047][ T7014] usb 3-1: config 0 descriptor?? [ 485.834072][ T7016] usb 5-1: USB disconnect, device number 30 [ 485.893991][ T7014] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 485.923508][ T7014] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 485.972254][ T7014] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 486.004872][ T7014] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 486.078593][ T7016] usb 3-1: USB disconnect, device number 30 [ 486.109675][T11266] fido_id[11266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 486.196322][T11272] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 486.483349][T11272] bond3: entered promiscuous mode [ 486.489823][T11272] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.525946][T11274] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.536671][T11274] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 486.550727][T11274] bond3: (slave gre1): Error -95 calling set_mac_address [ 486.588209][T11275] pimreg: entered allmulticast mode [ 486.737597][T11260] pimreg: left allmulticast mode [ 487.462215][ T7016] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 487.660105][ T7016] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 487.669606][ T7016] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.832593][ T7016] usb 6-1: config 0 descriptor?? [ 487.876182][ T796] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 487.945347][ T7016] usb 6-1: selecting invalid altsetting 3 [ 487.964129][ T7016] comedi comedi5: could not set alternate setting 3 in high speed [ 487.972291][ T7016] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 488.021102][ T7016] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 488.036191][ T796] usb 1-1: Using ep0 maxpacket: 32 [ 488.044397][ T796] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 488.097959][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.098226][T11311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.193786][ T796] usb 1-1: config 0 descriptor?? [ 488.466389][ T796] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 488.486877][ T796] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 488.533708][ T796] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 488.615483][ T796] usb 1-1: media controller created [ 488.672399][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 488.771106][ T796] az6027: usb out operation failed. (-71) [ 488.790911][ T796] az6027: usb out operation failed. (-71) [ 488.820874][ T796] stb0899_attach: Driver disabled by Kconfig [ 488.863121][ T796] az6027: no front-end attached [ 488.863121][ T796] [ 488.894539][ T796] az6027: usb out operation failed. (-71) [ 488.915037][ T796] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 488.968682][ T796] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 489.033138][ T796] dvb-usb: schedule remote query interval to 400 msecs. [ 489.072276][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 489.081468][ T796] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 489.111459][T11317] netlink: 'syz.2.1338': attribute type 2 has an invalid length. [ 489.130382][ T796] usb 1-1: USB disconnect, device number 25 [ 489.298407][ T796] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 489.887211][T11337] fuse: Unknown parameter 'us00000000000000000000' [ 490.143585][ T7006] usb 6-1: USB disconnect, device number 8 [ 491.485556][T11369] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 491.535303][T11369] bond1: entered promiscuous mode [ 491.599478][ T7016] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 491.649803][T11369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.697898][T11372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.720722][T11372] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 491.847428][T11372] bond1: (slave gre1): Error -95 calling set_mac_address [ 491.869097][ T7016] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.983025][ T7016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.018930][ T7016] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.040801][ T7016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.062938][ T7016] usb 3-1: SerialNumber: syz [ 492.369924][ T7016] usb 3-1: 0:2 : does not exist [ 492.410308][ T7016] usb 3-1: USB disconnect, device number 31 [ 492.535835][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.719363][T11400] pimreg: entered allmulticast mode [ 494.951722][T11397] pimreg: left allmulticast mode [ 495.566947][T11434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1377'. [ 495.585960][T11438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 495.640021][ T7017] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 495.710142][T11443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.731818][T11443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.749282][T11444] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1382'. [ 495.885930][ T7017] usb 5-1: Using ep0 maxpacket: 16 [ 495.900363][T11447] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1380'. [ 496.036617][ T7017] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.060729][ T7017] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 496.089328][ T7017] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 496.098605][ T7017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.112177][ T7017] usb 5-1: Product: syz [ 496.140437][ T7017] usb 5-1: Manufacturer: syz [ 496.145167][ T7017] usb 5-1: SerialNumber: syz [ 496.501265][T11454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 496.510787][T11454] 8021q: VLANs not supported on gre0 [ 496.541152][ T7017] usb 5-1: 0:2 : does not exist [ 496.556751][ T7017] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 496.641546][ T7017] usb 5-1: USB disconnect, device number 31 [ 497.522756][T11463] pimreg: entered allmulticast mode [ 497.807493][T11460] pimreg: left allmulticast mode [ 498.181047][T11492] sctp: [Deprecated]: syz.2.1402 (pid 11492) Use of int in max_burst socket option deprecated. [ 498.181047][T11492] Use struct sctp_assoc_value instead [ 498.197175][ T796] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 498.294905][ T66] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 498.366197][ T7006] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 498.380638][ T796] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 498.402083][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.488421][ T796] usb 1-1: config 0 descriptor?? [ 498.509190][ T796] cp210x 1-1:0.0: cp210x converter detected [ 498.556400][ T7006] usb 2-1: Using ep0 maxpacket: 16 [ 498.576360][ T7006] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.590414][ T7006] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.656183][ T7006] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.675262][ T7006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.699032][ T7006] usb 2-1: Product: syz [ 498.711099][ T7006] usb 2-1: Manufacturer: syz [ 498.758230][ T7006] usb 2-1: SerialNumber: syz [ 498.922180][ T796] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 499.022546][ T7006] usb 2-1: 0:2 : does not exist [ 499.046366][ T796] usb 1-1: cp210x converter now attached to ttyUSB0 [ 499.055042][ T7006] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 499.106800][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1401'. [ 499.130715][ T7006] usb 2-1: USB disconnect, device number 33 [ 499.148879][T11500] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.156508][T11500] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.163433][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.248894][ T7016] usb 1-1: USB disconnect, device number 26 [ 499.259177][ T7016] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 499.280888][ T7016] cp210x 1-1:0.0: device disconnected [ 499.803557][T11516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1409'. [ 500.457265][T11528] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1412'. [ 501.316128][T11540] loop5: detected capacity change from 0 to 7 [ 501.369325][T11541] netlink: 'syz.4.1417': attribute type 4 has an invalid length. [ 501.402175][T11540] Dev loop5: unable to read RDB block 7 [ 501.402294][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.407815][T11540] loop5: unable to read partition table [ 501.408029][T11540] loop5: partition table beyond EOD, [ 501.414794][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.419831][T11540] truncated [ 501.450546][T11540] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.966107][ T796] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 502.126103][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 502.204104][ T796] usb 5-1: config 0 has no interfaces? [ 502.237276][ T796] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.259947][ T796] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.276795][ T796] usb 5-1: Manufacturer: syz [ 502.294644][ T796] usb 5-1: config 0 descriptor?? [ 502.426221][T11558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.445340][T11558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.469681][T11558] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1424'. [ 504.146928][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1430'. [ 504.245173][ T10] usb 5-1: USB disconnect, device number 32 [ 504.423930][T11578] netlink: 1336 bytes leftover after parsing attributes in process `syz.0.1431'. [ 505.027112][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1433'. [ 505.406999][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 506.708457][T11621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.737360][T11621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.776717][T11621] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1446'. [ 506.833842][T11623] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 507.999395][T11637] pimreg: entered allmulticast mode [ 508.018829][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1456'. [ 508.568891][T11656] xt_hashlimit: size too large, truncated to 1048576 [ 508.654748][T11660] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 508.844574][T11630] pimreg: left allmulticast mode [ 509.128785][T11669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'. [ 509.562348][T11685] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1468'. [ 509.714412][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1471'. [ 510.160940][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1481'. [ 510.875686][T11730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'. [ 511.038780][T11718] pimreg: entered allmulticast mode [ 511.044573][T11718] pimreg: left allmulticast mode [ 512.044741][T11753] netlink: 'syz.5.1495': attribute type 12 has an invalid length. [ 512.112374][T11753] netlink: 'syz.5.1495': attribute type 29 has an invalid length. [ 512.136133][T11753] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1495'. [ 512.157830][T11753] netlink: 'syz.5.1495': attribute type 2 has an invalid length. [ 512.222483][T11753] netlink: 23 bytes leftover after parsing attributes in process `syz.5.1495'. [ 512.901343][T11791] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1509'. [ 513.696334][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 513.785022][T11785] pimreg: entered allmulticast mode [ 513.879710][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 513.889258][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.897901][ T10] usb 2-1: Product: syz [ 513.906316][ T10] usb 2-1: Manufacturer: syz [ 513.922453][ T10] usb 2-1: SerialNumber: syz [ 513.950591][T11784] pimreg: left allmulticast mode [ 514.345807][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 514.350186][T11810] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1516'. [ 514.411444][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 514.506270][ T7016] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 514.668159][ T7016] usb 6-1: Using ep0 maxpacket: 32 [ 514.677584][ T7016] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 514.689474][ T7016] usb 6-1: config 2 has no interface number 0 [ 514.695656][ T7016] usb 6-1: config 2 interface 88 has no altsetting 0 [ 514.705703][ T7016] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 514.716998][ T7016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.725214][ T7016] usb 6-1: Product: syz [ 514.732126][ T7016] usb 6-1: Manufacturer: syz [ 514.738423][ T7016] usb 6-1: SerialNumber: syz [ 514.964311][ T7016] asix 6-1:2.88: probe with driver asix failed with error -71 [ 514.980892][ T7016] usb 6-1: USB disconnect, device number 9 [ 515.081226][ T7014] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 515.317536][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 515.348142][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 515.367900][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 515.393357][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 515.440669][ T7014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.468961][ T7014] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.486339][ T10] usb 2-1: USB disconnect, device number 34 [ 515.512940][ T7014] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.548052][ T7014] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.573107][ T7014] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.613409][ T7014] usb 5-1: config 0 descriptor?? [ 516.123566][ T7014] hid_parser_main: 2 callbacks suppressed [ 516.123581][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.165770][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.179779][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.188631][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.225292][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.341470][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.355354][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.365768][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.497410][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.513848][ T7014] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 516.683618][ T7014] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 516.869592][ T7014] usb 5-1: USB disconnect, device number 33 [ 516.951231][T11850] fido_id[11850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 517.395033][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1532'. [ 517.460547][T11856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 517.527229][T11861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 517.659914][T11867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.707816][ T7006] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 517.731586][T11870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.745609][ T7006] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 517.769981][ T8857] wlan1: authenticated [ 517.818969][ T8857] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 517.834202][T11867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.849171][ T8857] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 517.861684][ T8857] wlan1: associated [ 517.889171][T11874] pimreg: entered allmulticast mode [ 517.903108][T11874] pimreg: left allmulticast mode [ 518.437515][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 518.579333][T11881] pimreg: entered allmulticast mode [ 518.787291][ T796] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 519.026338][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 519.061140][ T796] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.092593][ T796] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.175057][T11871] pimreg: left allmulticast mode [ 519.192064][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'. [ 519.506342][ T796] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.515756][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.531569][ T796] usb 5-1: Product: syz [ 519.556160][ T796] usb 5-1: Manufacturer: syz [ 519.560881][ T796] usb 5-1: SerialNumber: syz [ 520.916615][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 521.040534][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1544'. [ 521.120533][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 521.134940][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.282679][ T10] usb 2-1: config 0 descriptor?? [ 521.316976][ T796] usb 5-1: 0:2 : does not exist [ 521.327348][ T10] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 521.352460][ T796] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 521.429812][ T796] usb 5-1: USB disconnect, device number 34 [ 521.466727][T11917] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1549'. [ 521.494635][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.551899][T11917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.570160][T11917] bond_slave_0: left promiscuous mode [ 521.699340][T11917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.747104][T11917] bond_slave_1: left promiscuous mode [ 521.855224][ T10] gspca_sunplus: reg_w_riv err -110 [ 521.906739][T11917] bond0 (unregistering): Released all slaves [ 521.915246][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 523.400560][ T7006] usb 2-1: USB disconnect, device number 35 [ 523.463668][T11935] pimreg: entered allmulticast mode [ 523.782778][ T7006] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 523.796974][T11928] pimreg: left allmulticast mode [ 523.976059][ T7006] usb 1-1: Using ep0 maxpacket: 8 [ 524.036101][ T7006] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.065767][ T7006] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.090187][ T7006] usb 1-1: config 0 interface 0 has no altsetting 0 [ 524.107335][ T7006] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 524.120685][T11952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.151891][ T7006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.198197][ T7006] usb 1-1: config 0 descriptor?? [ 524.219706][T11950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.499132][ T7006] usbhid 1-1:0.0: can't add hid device: -71 [ 524.506456][ T7006] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 524.579465][ T7006] usb 1-1: USB disconnect, device number 27 [ 525.753160][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 527.019133][T11984] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 527.070936][T11987] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 527.116904][T11984] team0: Port device dummy0 added [ 527.160355][T11987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 527.176847][ T7014] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 527.553783][T11987] team0: Failed to send options change via netlink (err -105) [ 527.562573][T11987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 527.567667][ T7014] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 527.585337][ T7014] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.588265][T11987] team0: Port device dummy0 removed [ 527.610554][ T7014] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 527.688308][T11987] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 527.726191][ T7014] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.752682][ T7014] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 527.762748][ T7014] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 527.771009][ T7014] usb 3-1: Product: syz [ 527.775730][ T7014] usb 3-1: Manufacturer: syz [ 527.786245][ T7014] cdc_wdm 3-1:1.0: skipping garbage [ 527.791566][ T7014] cdc_wdm 3-1:1.0: skipping garbage [ 527.802769][ T7014] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 527.828891][ T7014] cdc_wdm 3-1:1.0: Unknown control protocol [ 528.234225][T11998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.247215][T11998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.264268][T11998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.277781][T11998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.286980][T11998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.308114][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 528.315755][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 528.326426][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 528.334948][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 528.342986][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.399529][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 528.399855][ T1227] usb 3-1: USB disconnect, device number 32 [ 528.406281][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 528.418037][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 528.424102][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 528.903041][T12002] chnl_net:caif_netlink_parms(): no params data found [ 528.976529][ T7016] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 528.982547][T12010] bond0: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 529.000046][T12010] bond0 (unregistering): Released all slaves [ 529.099628][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.107410][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.114820][T12002] bridge_slave_0: entered allmulticast mode [ 529.122903][T12002] bridge_slave_0: entered promiscuous mode [ 529.132079][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.139881][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.148229][T12002] bridge_slave_1: entered allmulticast mode [ 529.155404][ T7016] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 529.165097][ T7016] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 529.177655][T12002] bridge_slave_1: entered promiscuous mode [ 529.189074][ T7016] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 529.198340][ T7016] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 529.213275][ T7016] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 529.226767][ T7016] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 529.237376][ T7016] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 529.256595][ T7016] usb 2-1: Product: syz [ 529.260791][ T7016] usb 2-1: Manufacturer: syz [ 529.284437][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.298982][ T7016] cdc_wdm 2-1:1.0: skipping garbage [ 529.304218][ T7016] cdc_wdm 2-1:1.0: skipping garbage [ 529.313310][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.324677][ T7016] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 529.346151][ T7016] cdc_wdm 2-1:1.0: Unknown control protocol [ 529.466379][T12002] team0: Port device team_slave_0 added [ 529.475015][T12002] team0: Port device team_slave_1 added [ 529.544528][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.572921][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.579582][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.585994][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.592604][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.598971][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.605583][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.611888][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.618487][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.624765][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.631361][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.638131][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.644826][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.651550][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.658159][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.664581][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 529.671180][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 529.677519][ T7016] usb 2-1: USB disconnect, device number 36 [ 529.700614][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.728659][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.741715][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.750823][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.794523][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.984762][T12002] hsr_slave_0: entered promiscuous mode [ 529.997585][T12002] hsr_slave_1: entered promiscuous mode [ 530.237471][T12002] debugfs: 'hsr0' already exists in 'hsr' [ 530.243241][T12002] Cannot create hsr debugfs directory [ 530.506168][T11998] Bluetooth: hci3: command tx timeout [ 530.545843][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 530.876333][ T1227] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 531.046527][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1582'. [ 531.146155][ T1227] usb 2-1: Using ep0 maxpacket: 16 [ 531.216934][ T1227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.260988][ T1227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.330717][ T1227] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.348364][T12043] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.355868][T12043] bridge0: port 1(1¾x9ÿ) entered disabled state [ 531.382594][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.430857][ T7014] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 531.474819][ T1227] usb 2-1: Product: syz [ 531.550596][ T1227] usb 2-1: Manufacturer: syz [ 531.555237][ T1227] usb 2-1: SerialNumber: syz [ 531.616136][ T7014] usb 1-1: Using ep0 maxpacket: 16 [ 531.776074][ T7014] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.817954][ T7014] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.861377][ T7014] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.883905][ T7014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.921543][ T7014] usb 1-1: Product: syz [ 531.939448][ T7014] usb 1-1: Manufacturer: syz [ 531.976363][ T7014] usb 1-1: SerialNumber: syz [ 532.158341][T12002] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 532.397474][T12002] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 532.608779][T11998] Bluetooth: hci3: command tx timeout [ 532.626783][T12002] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 532.667965][T12002] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 532.836522][T12063] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 532.845510][T12063] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 532.965925][T12002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.996446][T12002] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.024064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.031263][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.048278][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.055461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.174165][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.227691][T12002] veth0_vlan: entered promiscuous mode [ 533.245239][T12002] veth1_vlan: entered promiscuous mode [ 533.278323][T12002] veth0_macvtap: entered promiscuous mode [ 533.289408][T12002] veth1_macvtap: entered promiscuous mode [ 533.319173][T12002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.354686][T12002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.385985][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.411898][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.433640][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.469544][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.543004][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.567052][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.624579][ T1227] usb 2-1: 0:2 : does not exist [ 533.663207][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.663328][ T1227] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 533.702311][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.725955][ T1227] usb 2-1: USB disconnect, device number 37 [ 534.186141][ T7014] usb 1-1: 0:2 : does not exist [ 534.200522][ T7014] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 534.295504][ T7014] usb 1-1: USB disconnect, device number 28 [ 534.445857][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 534.638640][T11998] Bluetooth: hci3: command tx timeout [ 534.711565][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 535.806221][ T7014] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 536.026164][ T7014] usb 2-1: Using ep0 maxpacket: 32 [ 536.036784][ T7014] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 536.070277][ T7014] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 536.099863][ T7014] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 536.346327][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 536.418419][ T7014] usb 2-1: Product: syz [ 536.422878][ T7014] usb 2-1: Manufacturer: syz [ 536.429611][ T7014] usb 2-1: SerialNumber: syz [ 536.450752][ T7014] usb 2-1: config 0 descriptor?? [ 536.457238][T12090] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.482596][ T7014] hub 2-1:0.0: bad descriptor, ignoring hub [ 536.489921][ T7014] hub 2-1:0.0: probe with driver hub failed with error -5 [ 536.706231][ T7014] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 536.714338][T11998] Bluetooth: hci3: command tx timeout [ 536.801267][ T7016] usb 2-1: USB disconnect, device number 38 [ 536.886324][ T7014] usb 1-1: Using ep0 maxpacket: 16 [ 536.904354][ T7014] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 536.985835][ T7014] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.068624][ T7014] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.077953][ T7014] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.085938][ T7014] usb 1-1: Product: syz [ 537.115313][ T7014] usb 1-1: Manufacturer: syz [ 537.154315][ T7014] usb 1-1: SerialNumber: syz [ 537.187679][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 538.294260][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 538.418797][T12123] bridge4: port 1(veth0_to_bond) entered blocking state [ 538.436634][T12123] bridge4: port 1(veth0_to_bond) entered disabled state [ 538.660910][T12123] veth0_to_bond: entered allmulticast mode [ 538.710011][T12123] veth0_to_bond: entered promiscuous mode [ 539.512030][ T7014] usb 1-1: 0:2 : does not exist [ 539.568118][ T7014] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 539.686539][ T7016] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 539.750476][ T7014] usb 1-1: USB disconnect, device number 29 [ 539.792221][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.812830][T12146] batadv_slave_0: entered promiscuous mode [ 539.818802][T12146] batadv_slave_0: entered allmulticast mode [ 540.016370][ T7016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.256765][ T7016] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.287625][ T7016] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.316520][ T7016] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.339962][ T7016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.380824][ T7016] usb 5-1: config 0 descriptor?? [ 540.554815][ T8857] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.844620][ T8857] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.003486][ T8857] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.036277][ T5894] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 541.206157][ T7016] usbhid 5-1:0.0: can't add hid device: -71 [ 541.216197][ T7016] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 541.231442][ T7016] usb 5-1: USB disconnect, device number 35 [ 541.887344][ T5894] usb 1-1: config 0 has no interfaces? [ 541.892863][ T5894] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.976058][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.022056][ T5894] usb 1-1: config 0 descriptor?? [ 542.063410][ T8857] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.065109][T12215] wg1: left promiscuous mode [ 543.070557][T12215] wg1: left allmulticast mode [ 543.077647][T12215] batadv_slave_0: left promiscuous mode [ 543.091920][T12215] ip6gre1: left promiscuous mode [ 543.098402][T12215] ip6gre1: left allmulticast mode [ 543.198855][T12215] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 543.327817][T12215] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 543.531237][ T8857] bridge_slave_1: left allmulticast mode [ 543.559860][ T8857] bridge_slave_1: left promiscuous mode [ 543.599264][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.642293][ T8857] bridge_slave_0: left allmulticast mode [ 543.660845][ T8857] bridge_slave_0: left promiscuous mode [ 543.670209][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.266298][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 544.446237][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 544.542808][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 544.646385][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.666564][ T7014] usb 1-1: USB disconnect, device number 30 [ 544.686531][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.723832][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 544.786694][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.876840][ T10] usb 7-1: config 0 descriptor?? [ 544.911608][ T10] xbox_remote_probe: endpoint_in message size==0? [ 544.966203][ T796] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 545.186081][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 545.250413][ T796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.339094][ T796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.425393][ T796] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.626090][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.682878][ T796] usb 2-1: Product: syz [ 545.688896][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 545.703899][ T796] usb 2-1: Manufacturer: syz [ 545.703953][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 545.794443][ T796] usb 2-1: SerialNumber: syz [ 545.832303][ T10] usb 7-1: USB disconnect, device number 2 [ 546.434646][ T8857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.754968][ T8857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 546.849691][ T8857] bond0 (unregistering): Released all slaves [ 546.889088][ T8857] bond1 (unregistering): Released all slaves [ 546.927787][ T8857] bond2 (unregistering): Released all slaves [ 547.378895][T12267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.879525][ T8857] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 548.513973][ T796] usb 2-1: 0:2 : does not exist [ 548.667272][ T796] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 548.755272][ T796] usb 2-1: USB disconnect, device number 39 [ 548.830855][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.864390][T12275] vlan0: entered promiscuous mode [ 548.886619][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'. [ 548.907147][T12275] vlan0: entered allmulticast mode [ 548.912309][T12275] hsr_slave_1: entered allmulticast mode [ 549.306264][ T8857] hsr_slave_0: left promiscuous mode [ 549.332702][ T8857] hsr_slave_1: left promiscuous mode [ 549.356882][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.379782][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.529986][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.828284][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.066029][ T8857] batadv_slave_1: left promiscuous mode [ 550.084396][ T8857] veth1_macvtap: left promiscuous mode [ 550.110963][ T8857] veth0_macvtap: left promiscuous mode [ 551.196154][ T796] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 551.376101][ T796] usb 7-1: Using ep0 maxpacket: 32 [ 551.385159][ T796] usb 7-1: config 0 has an invalid interface number: 23 but max is 0 [ 551.402905][ T796] usb 7-1: config 0 has no interface number 0 [ 551.415033][ T796] usb 7-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 551.430792][ T796] usb 7-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 551.442495][ T796] usb 7-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 551.455824][ T796] usb 7-1: config 0 interface 23 altsetting 2 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 551.476105][ T796] usb 7-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 551.497784][ T796] usb 7-1: config 0 interface 23 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 551.574062][ T796] usb 7-1: config 0 interface 23 has no altsetting 0 [ 551.607453][ T796] usb 7-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 551.646057][ T796] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.705612][ T796] usb 7-1: config 0 descriptor?? [ 551.952422][ T8857] team0 (unregistering): Port device team_slave_1 removed [ 552.115512][ T8857] team0 (unregistering): Port device team_slave_0 removed [ 552.676225][ T796] usb 7-1: string descriptor 0 read error: -71 [ 552.820452][ T796] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 552.836334][ T796] gspca_mr97310a: reg write [21] error -8 [ 552.869814][ T796] mr97310a 7-1:0.23: probe with driver mr97310a failed with error -8 [ 552.966642][ T796] usb 7-1: USB disconnect, device number 3 [ 554.542164][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 554.542181][ T30] audit: type=1326 audit(1769604988.684:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 554.749089][ T30] audit: type=1326 audit(1769604988.694:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af39aeb9 code=0x7ffc0000 [ 554.889584][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1636'. [ 554.986623][ T7014] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 555.213094][ T7016] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 555.236509][ T7014] usb 5-1: device descriptor read/64, error -71 [ 555.396116][ T7016] usb 2-1: Using ep0 maxpacket: 16 [ 555.410797][ T7016] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.464059][ T7016] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 555.486164][ T7014] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 555.509068][ T7016] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 555.556238][ T7016] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.573535][ T7016] usb 2-1: Product: syz [ 555.578195][ T7016] usb 2-1: Manufacturer: syz [ 555.608342][ T7016] usb 2-1: SerialNumber: syz [ 555.646176][ T7014] usb 5-1: device descriptor read/64, error -71 [ 555.764135][ T7014] usb usb5-port1: attempt power cycle [ 556.171667][ T7014] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 556.215703][ T7014] usb 5-1: device descriptor read/8, error -71 [ 556.496342][ T7014] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 556.547104][ T7014] usb 5-1: device descriptor read/8, error -71 [ 556.657274][ T7014] usb usb5-port1: unable to enumerate USB device [ 557.433534][ T7016] usb 2-1: 0:2 : does not exist [ 557.494893][ T7016] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 557.848098][T12387] netlink: 'syz.1.1641': attribute type 13 has an invalid length. [ 557.855954][T12387] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1641'. [ 557.916192][ T7016] usb 2-1: USB disconnect, device number 40 [ 557.987658][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.589457][T12406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.657574][T12407] netlink: 'syz.1.1642': attribute type 10 has an invalid length. [ 559.785396][T12410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.797878][T12406] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1645'. [ 560.114541][T12404] loop6: detected capacity change from 0 to 524288000 [ 560.186230][T12408] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1643'. [ 560.213932][T12404] bond0: option ad_user_port_key: invalid value (30218) [ 560.235955][T12404] bond0: option ad_user_port_key: allowed values 0 - 1023 [ 560.275931][T12404] bond0 (unregistering): Released all slaves [ 560.546124][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1644'. [ 560.619461][T12420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 560.626012][T12420] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 560.696440][T12420] vhci_hcd vhci_hcd.0: Device attached [ 560.853597][T12419] pimreg: entered allmulticast mode [ 560.941276][T12418] pimreg: left allmulticast mode [ 561.017097][ T796] usb 38-1: SetAddress Request (2) to port 0 [ 561.023302][ T796] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 562.845251][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.851895][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.467886][T12423] vhci_hcd: connection reset by peer [ 563.481696][ T50] vhci_hcd vhci_hcd.2: stop threads [ 563.496349][ T50] vhci_hcd vhci_hcd.2: release socket [ 563.501971][ T50] vhci_hcd vhci_hcd.2: disconnect device [ 563.662899][T12463] fuse: Bad value for 'fd' [ 563.833990][T12467] program syz.0.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.906131][ T7016] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 564.929353][T12474] loop5: detected capacity change from 0 to 7 [ 564.950625][T12474] Dev loop5: unable to read RDB block 7 [ 564.966427][T12474] loop5: AHDI p1 p2 p3 [ 565.000523][T12474] loop5: partition table partially beyond EOD, truncated [ 565.052434][T12474] loop5: p1 start 1601398130 is beyond EOD, truncated [ 565.062761][T12474] loop5: p2 start 1702059890 is beyond EOD, truncated [ 565.132023][ T7016] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 565.167617][ T7016] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 565.220810][ T7016] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.268486][ T7016] usb 5-1: Product: syz [ 565.289768][T12474] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1656'. [ 565.341598][ T7016] usb 5-1: Manufacturer: syz [ 565.376369][ T7016] usb 5-1: SerialNumber: syz [ 565.393189][ T7016] usb 5-1: config 0 descriptor?? [ 565.610986][ T7016] usb-storage 5-1:0.0: USB Mass Storage device detected [ 565.699676][T12476] pimreg: entered allmulticast mode [ 565.816941][T12475] pimreg: left allmulticast mode [ 566.066180][ T796] usb 38-1: device descriptor read/8, error -110 [ 566.176100][ T1227] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 566.224493][T12491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.245523][T12491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.258675][T12491] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1659'. [ 566.478408][ T796] usb usb38-port1: attempt power cycle [ 567.073567][ T796] usb usb38-port1: unable to enumerate USB device [ 567.200870][ T5894] usb 5-1: USB disconnect, device number 40 [ 568.743392][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1664'. [ 568.776376][T12520] 8021q: VLANs not supported on vxcan1 [ 568.806676][ T1227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 568.825475][ T1227] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 568.844284][ T1227] usb 2-1: can't read configurations, error -71 [ 569.221980][T12193] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 570.913510][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 571.206149][ T1227] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 571.649167][T12542] pimreg: entered allmulticast mode [ 571.686166][ T1227] usb 3-1: Using ep0 maxpacket: 16 [ 571.696430][ T1227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.712813][T12541] pimreg: left allmulticast mode [ 571.721612][ T1227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.761856][ T1227] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.771156][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.842284][ T1227] usb 3-1: Product: syz [ 571.852130][ T1227] usb 3-1: Manufacturer: syz [ 571.879867][ T1227] usb 3-1: SerialNumber: syz [ 572.229166][ T7016] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 572.500687][T12572] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 572.517767][ T7016] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.533909][T12572] block device autoloading is deprecated and will be removed. [ 572.647182][ T7016] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 572.679000][ T7016] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 572.738855][ T7016] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 572.763984][ T7016] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.111596][T12556] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 573.393783][ T5909] kworker/1:6 (5909) used greatest stack depth: 15256 bytes left [ 573.995486][ T1227] usb 3-1: 0:2 : does not exist [ 574.029579][ T1227] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 574.108152][ T7016] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 574.120001][ T7016] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input34 [ 574.260455][T12584] tipc: Failed to remove unknown binding: 66,0,0/0:4126728614/4126728615 [ 574.270491][T12584] tipc: Failed to remove unknown binding: 66,0,0/0:4126728614/4126728615 [ 574.308228][ T1227] usb 3-1: USB disconnect, device number 33 [ 574.345059][ T7016] usb 1-1: USB disconnect, device number 31 [ 574.351124][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 574.561328][ T5820] udevd[5820]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 574.685738][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 575.116314][ T7017] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 575.310775][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.324930][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.336207][ C0] ------------[ cut here ]------------ [ 575.341949][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 575.351853][ C0] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: syz.2.1677/12581 [ 575.362646][ C0] Modules linked in: [ 575.366611][ C0] CPU: 0 UID: 0 PID: 12581 Comm: syz.2.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.377624][ C0] Tainted: [L]=SOFTLOCKUP [ 575.381960][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 575.392091][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 575.398349][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 575.418071][ C0] RSP: 0000:ffffc90000007838 EFLAGS: 00010246 [ 575.424136][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 575.432122][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff900037c0 [ 575.440149][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 575.449508][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88802f5e1ca8 [ 575.457502][ C0] R13: 0000000000000000 R14: ffffffff900037c0 R15: ffff88805a873138 [ 575.465456][ C0] FS: 00007f67597806c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 575.474401][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.480991][ C0] CR2: 0000200000236030 CR3: 0000000052012000 CR4: 00000000003526f0 [ 575.489059][ C0] Call Trace: [ 575.492333][ C0] [ 575.495167][ C0] rate_control_send_low+0x1a7/0x7b0 [ 575.500494][ C0] rate_control_get_rate+0x20b/0x5d0 [ 575.505781][ C0] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 575.511584][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 575.517908][ C0] ? __alloc_skb+0x27e/0x390 [ 575.522494][ C0] ? __ieee80211_beacon_get+0xce1/0x1880 [ 575.528132][ C0] __ieee80211_beacon_get+0xd3d/0x1880 [ 575.533575][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 575.539127][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 575.544572][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 575.550653][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 575.556210][ C0] __iterate_interfaces+0x2ab/0x590 [ 575.561386][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 575.567443][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 575.574631][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 575.580697][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 575.587724][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 575.592902][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 575.598795][ C0] __hrtimer_run_queues+0x527/0xc30 [ 575.603996][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 575.609707][ C0] ? read_tsc+0x9/0x20 [ 575.613760][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 575.618874][ C0] handle_softirqs+0x22a/0x7c0 [ 575.623628][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 575.628391][ C0] __irq_exit_rcu+0x5f/0x150 [ 575.632957][ C0] irq_exit_rcu+0x9/0x30 [ 575.637205][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 575.642818][ C0] [ 575.645727][ C0] [ 575.648700][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.654673][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 575.661093][ C0] Code: f7 e8 dd 57 07 f6 f7 c3 00 02 00 00 74 05 e8 e0 b5 32 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 23 f9 f5 65 8b 05 cd 15 59 07 85 c0 74 18 5b 41 5e c3 cc cc [ 575.680704][ C0] RSP: 0000:ffffc9001b24f688 EFLAGS: 00000206 [ 575.686791][ C0] RAX: 0000000000000002 RBX: 0000000000000286 RCX: 0000000080000001 [ 575.694777][ C0] RDX: 0000000000000006 RSI: ffffffff8dcc90a8 RDI: 0000000000000001 [ 575.702783][ C0] RBP: 0000000000000000 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 575.710780][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: 0000000000000001 [ 575.718750][ C0] R13: ffff88805c087940 R14: ffff88805c087900 R15: ffff88805c087940 [ 575.726745][ C0] __wake_up_common_lock+0x190/0x1f0 [ 575.732017][ C0] __unix_dgram_recvmsg+0x485/0xd50 [ 575.737228][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 575.742932][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 575.747872][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 575.752892][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 575.758439][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 575.763445][ C0] ____sys_recvmsg+0x3e3/0x4a0 [ 575.768211][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 575.773501][ C0] ? import_iovec+0x73/0xa0 [ 575.778008][ C0] ___sys_recvmsg+0x215/0x590 [ 575.782670][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 575.787896][ C0] do_recvmmsg+0x334/0x800 [ 575.792305][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.797324][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 575.802254][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 575.807284][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 575.812816][ C0] do_syscall_64+0xe2/0xf80 [ 575.817315][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.823546][ C0] ? trace_irq_disable+0x37/0x100 [ 575.828565][ C0] ? clear_bhb_loop+0x60/0xb0 [ 575.833230][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.839129][ C0] RIP: 0033:0x7f675899aeb9 [ 575.843536][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.863177][ C0] RSP: 002b:00007f6759780028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 575.871610][ C0] RAX: ffffffffffffffda RBX: 00007f6758c16090 RCX: 00007f675899aeb9 [ 575.879683][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 575.887697][ C0] RBP: 00007f6758a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 575.895655][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 575.903643][ C0] R13: 00007f6758c16128 R14: 00007f6758c16090 R15: 00007f6758d3fa48 [ 575.911629][ C0] [ 575.914635][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 575.921895][ C0] CPU: 0 UID: 0 PID: 12581 Comm: syz.2.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.932808][ C0] Tainted: [L]=SOFTLOCKUP [ 575.937113][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 575.947154][ C0] Call Trace: [ 575.950422][ C0] [ 575.953260][ C0] vpanic+0x1e0/0x670 [ 575.957227][ C0] panic+0xc5/0xd0 [ 575.960939][ C0] ? __pfx_panic+0x10/0x10 [ 575.965338][ C0] __warn+0x315/0x4a0 [ 575.969304][ C0] ? __rate_control_send_low+0x524/0x800 [ 575.974924][ C0] ? __rate_control_send_low+0x524/0x800 [ 575.980542][ C0] __report_bug+0x29a/0x540 [ 575.985046][ C0] ? irqentry_exit+0x59c/0x620 [ 575.989793][ C0] ? __rate_control_send_low+0x524/0x800 [ 575.995408][ C0] ? __pfx___report_bug+0x10/0x10 [ 576.000413][ C0] ? __rate_control_send_low+0x524/0x800 [ 576.006033][ C0] report_bug_entry+0x19a/0x290 [ 576.010864][ C0] ? __rate_control_send_low+0x5bb/0x800 [ 576.016473][ C0] ? __rate_control_send_low+0x5c0/0x800 [ 576.022091][ C0] handle_bug+0xca/0x200 [ 576.026320][ C0] exc_invalid_op+0x1a/0x50 [ 576.030801][ C0] asm_exc_invalid_op+0x1a/0x20 [ 576.035628][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 576.041875][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 576.061468][ C0] RSP: 0000:ffffc90000007838 EFLAGS: 00010246 [ 576.067518][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 576.075468][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff900037c0 [ 576.083415][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.091481][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88802f5e1ca8 [ 576.099429][ C0] R13: 0000000000000000 R14: ffffffff900037c0 R15: ffff88805a873138 [ 576.107393][ C0] ? __rate_control_send_low+0x58d/0x800 [ 576.113013][ C0] rate_control_send_low+0x1a7/0x7b0 [ 576.118296][ C0] rate_control_get_rate+0x20b/0x5d0 [ 576.123574][ C0] ieee80211_beacon_get_finish+0x3af/0x6f0 [ 576.129368][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 576.135671][ C0] ? __alloc_skb+0x27e/0x390 [ 576.140240][ C0] ? __ieee80211_beacon_get+0xce1/0x1880 [ 576.145886][ C0] __ieee80211_beacon_get+0xd3d/0x1880 [ 576.151331][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 576.156862][ C0] ieee80211_beacon_get_tim+0xbd/0x2c0 [ 576.162316][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 576.168625][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 576.174165][ C0] __iterate_interfaces+0x2ab/0x590 [ 576.179344][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 576.185386][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 576.192561][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 576.198603][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 576.205643][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 576.210825][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 576.216612][ C0] __hrtimer_run_queues+0x527/0xc30 [ 576.221801][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 576.227494][ C0] ? read_tsc+0x9/0x20 [ 576.231558][ C0] hrtimer_run_softirq+0x182/0x5a0 [ 576.236664][ C0] handle_softirqs+0x22a/0x7c0 [ 576.241416][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 576.246168][ C0] __irq_exit_rcu+0x5f/0x150 [ 576.250747][ C0] irq_exit_rcu+0x9/0x30 [ 576.254974][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 576.260613][ C0] [ 576.263527][ C0] [ 576.266440][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 576.272411][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 576.278811][ C0] Code: f7 e8 dd 57 07 f6 f7 c3 00 02 00 00 74 05 e8 e0 b5 32 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 23 f9 f5 65 8b 05 cd 15 59 07 85 c0 74 18 5b 41 5e c3 cc cc [ 576.298395][ C0] RSP: 0000:ffffc9001b24f688 EFLAGS: 00000206 [ 576.304440][ C0] RAX: 0000000000000002 RBX: 0000000000000286 RCX: 0000000080000001 [ 576.312414][ C0] RDX: 0000000000000006 RSI: ffffffff8dcc90a8 RDI: 0000000000000001 [ 576.320381][ C0] RBP: 0000000000000000 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e [ 576.328425][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: 0000000000000001 [ 576.336374][ C0] R13: ffff88805c087940 R14: ffff88805c087900 R15: ffff88805c087940 [ 576.344352][ C0] __wake_up_common_lock+0x190/0x1f0 [ 576.349631][ C0] __unix_dgram_recvmsg+0x485/0xd50 [ 576.354817][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 576.360523][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 576.365484][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 576.370486][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 576.376017][ C0] sock_recvmsg_nosec+0x186/0x1c0 [ 576.381036][ C0] ____sys_recvmsg+0x3e3/0x4a0 [ 576.385783][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 576.391062][ C0] ? import_iovec+0x73/0xa0 [ 576.395550][ C0] ___sys_recvmsg+0x215/0x590 [ 576.400208][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 576.405415][ C0] do_recvmmsg+0x334/0x800 [ 576.409816][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 576.414830][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 576.419767][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 576.424783][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 576.430317][ C0] do_syscall_64+0xe2/0xf80 [ 576.434803][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.440847][ C0] ? trace_irq_disable+0x37/0x100 [ 576.445845][ C0] ? clear_bhb_loop+0x60/0xb0 [ 576.450498][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.456365][ C0] RIP: 0033:0x7f675899aeb9 [ 576.460758][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.480347][ C0] RSP: 002b:00007f6759780028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 576.488742][ C0] RAX: ffffffffffffffda RBX: 00007f6758c16090 RCX: 00007f675899aeb9 [ 576.496694][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 576.504642][ C0] RBP: 00007f6758a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 576.512590][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 576.520557][ C0] R13: 00007f6758c16128 R14: 00007f6758c16090 R15: 00007f6758d3fa48 [ 576.528521][ C0] [ 576.531919][ C0] Kernel Offset: disabled [ 576.536227][ C0] Rebooting in 86400 seconds..