last executing test programs: 36m18.943146184s ago: executing program 2 (id=659): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000240)) 36m17.414694179s ago: executing program 2 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 36m17.030082359s ago: executing program 2 (id=671): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 36m15.995288379s ago: executing program 2 (id=673): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) 36m14.732460665s ago: executing program 2 (id=676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf2510000000", @ANYRES32, @ANYBLOB="050011000c0000000c00060003000000000000000c00060001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) 36m14.208266908s ago: executing program 2 (id=679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001400)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 35m58.261098605s ago: executing program 32 (id=679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001400)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 35m50.37577286s ago: executing program 3 (id=748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) 35m44.090032246s ago: executing program 3 (id=765): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) lseek(r0, 0x0, 0x4) 35m43.884842136s ago: executing program 3 (id=767): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 35m43.684984361s ago: executing program 3 (id=771): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000100)='./file0\x00') write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x10, 0x10000000, 0x8001, 0x64, 0x18, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002dc0)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000004dc0)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2d, 0x0, 0x6438207, 0x0, 0xffff, 0x0, 0xf84}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 35m42.235141858s ago: executing program 3 (id=773): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) 35m40.940822284s ago: executing program 3 (id=777): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 35m25.844359009s ago: executing program 33 (id=777): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 34m48.982152698s ago: executing program 1 (id=904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000004520000504"], 0x20) 34m48.506002645s ago: executing program 1 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x28, 0xea5, '.\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x0, 0xfb, 0x15, 0x3, 0x0, "5e29253e9121f814ade0feb2a4ef0efe"}, 0x15, 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) socket(0x1e, 0x1, 0x0) 34m45.52613205s ago: executing program 1 (id=909): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071101c0000000000950000000000000072c9ed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020e00001800000000000000ffdbdf25030005000000000002000000ac1e00010000000000000000030006000000000002000000000000000000000000000000040004000000000000000000000000000000000000000000000000000000000008001200000002000000000000000000060000000000000000000000000000c32f676300000000000000000000000001000000000000000000000000000000000400"], 0xc0}}, 0x0) 34m44.922404427s ago: executing program 4 (id=910): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m44.813836209s ago: executing program 1 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 34m44.633753489s ago: executing program 4 (id=913): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) fallocate(r3, 0x0, 0x42d7, 0x4) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 34m39.861168944s ago: executing program 4 (id=921): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)={0xa, 0x4e20, 0x80000, @loopback, 0x7}, 0x1c, 0x0}, 0xc044) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m39.573544384s ago: executing program 1 (id=922): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x41, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 34m39.480013465s ago: executing program 4 (id=923): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) unshare(0x800) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_io_uring_setup(0x45, 0x0, &(0x7f00000001c0), &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x22, 0x0, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_open_dev$loop(&(0x7f0000000380), 0x2, 0x103382) r4 = syz_open_dev$loop(&(0x7f00000002c0), 0xfffffffd, 0x80) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000300)={r4, 0x8, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x9, "cd218b3132a4d4ae906ce16bdba23ec34356ef960143942fd48b868aeed5780feb4c5d8df7a0480155f5e5ec4600b09743f77e7db3e15d38762baf2969c0eed8", "27202f4e8495c391f89003f6da5cdf09b24610d2caeb4751575376a1fe4db4ea01027560bd30d0b7b5bb16610056bdeb5f91064b0b8f5e58ad60e5f4920f770c", "e5c5ff20ea69cb79a04070464e59ee98d887b65307afe1d944bbf3f713dbf5dc", [0x100000001, 0x56dcb862]}}) write$bt_hci(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xa) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$nl_rdma(0x10, 0x3, 0x14) pwrite64(r0, &(0x7f0000000500)="e06fc7fedb04072e476e843a8ef5bddc8ca66958fee60dae9e034b979e98cc50f5212e1f984608b3be34f4da88d6a899045af89c6409acc7cc0d59439995000e228d107ede6be71d0047fdb5c1b283eb9811d43f5e2bbd41ca4bd44648f30e137133a4df77f1ddfb63", 0x69, 0x10000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 34m38.381164881s ago: executing program 1 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c110c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb080b) 34m38.1426504s ago: executing program 4 (id=927): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34m37.673940174s ago: executing program 4 (id=929): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) fallocate(r3, 0x0, 0x42d7, 0x4) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 34m23.120067807s ago: executing program 34 (id=924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x2, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c110c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb080b) 34m22.489200186s ago: executing program 35 (id=929): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) fallocate(r3, 0x0, 0x42d7, 0x4) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 27m45.537719084s ago: executing program 0 (id=1720): r0 = socket$inet6(0xa, 0x80002, 0x0) io_uring_setup(0x4685, 0x0) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x12) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x7f, @mcast2, 0x7f}, 0x1c, 0x0}}], 0x1, 0x4041400) getrlimit(0xe, &(0x7f0000000040)) 27m44.936722632s ago: executing program 0 (id=1722): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getuid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x13000100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180), {0x30}, &(0x7f0000000300)=""/188, 0xbc, &(0x7f00000004c0)=""/4096, 0x0}, 0x58) getpid() r3 = getpgid(0x0) getpriority(0x0, r3) 27m39.837828634s ago: executing program 0 (id=1726): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3806, 0x1, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x6, 0xfe}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x101a02, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 27m39.091951776s ago: executing program 0 (id=1728): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27m38.845270728s ago: executing program 0 (id=1729): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x2}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') 27m37.117888113s ago: executing program 0 (id=1734): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getuid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x13000100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180), {0x30}, &(0x7f0000000300)=""/188, 0xbc, &(0x7f00000004c0)=""/4096, 0x0}, 0x58) getpid() r3 = getpgid(0x0) getpriority(0x0, r3) 27m21.655807021s ago: executing program 36 (id=1734): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getuid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000003c0)={0x13000100, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000180), {0x30}, &(0x7f0000000300)=""/188, 0xbc, &(0x7f00000004c0)=""/4096, 0x0}, 0x58) getpid() r3 = getpgid(0x0) getpriority(0x0, r3) 13.907585172s ago: executing program 6 (id=6025): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="c4e90a45a449e8551c9048eae503e9faa501f09b04dc0047ca8a17cf08709537b05b86e8326564e5379d27e9116e57ae0213d7832bb917bbb3c661b1ec8b6a1cb92d4262a17634675cde3dd85c4755843c6039a95323a7dc16c94534d91974789050a95c22b516b038e8bc19586b2434fe49b82778d2a9397df774665fc443578e89616e33f08550a70df1c440e0629d54c906ca", 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)="ecf58a1ecde205ab5103c262720c6c4cc906d9f8f13c73d6c8e8859e8ed76acd1c5e3602ab490986112152e53156671b9cc2cec51d0451a689b0550036e7f66e040e435f81f9ba1b5b6e119ea3941156f36db4f279ad746d2a178b0a5e22bba327e2eb55ada155a834d60a21e4ee92d860437e721293a35e1233196b474a81875593b126ce08e382e22de8a703e19b875495b4cf580acb58554838089e75297b3cdfc7fb599efc3736c859f4bc4676993d98d0befb7c6b7a18b458f441d0110aba6a59d1dede93216988452e19d15570636ec9d79ab73a41dde651e444161e", 0xdf}, {&(0x7f0000000880)="02431c2d4317f42f6ecb2669fa01", 0xe}], 0x2}}], 0x2, 0xc881) close(0x3) 13.586536014s ago: executing program 6 (id=6029): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 12.487186863s ago: executing program 9 (id=6031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000800)={0xf7b, 0x1f, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) syz_open_dev$dri(&(0x7f0000000000), 0x79c19548, 0x82840) unshare(0x22020600) r3 = fsopen(&(0x7f0000000000)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='gid', &(0x7f0000001900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\xf9\x99\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xfc8\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\x1e?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\x9f\xf1\xd9<\xb9k\x00qT\xda[\x93\b\xec\xa0\x8b\x17F\xf0]&S\xa3j\xf7L\x00=\xef\x969!D\x99\xa7}Y\x93\xb8\x8a\x8a\xc1\xa9\x80G\xdb-\xf0W\xe3\xc2W\x1coo\xc0\xdb\xf0S\xc6\x1cE\x00\xca\xac!$,\xe8\x80\x95M\xa8\xff\xfa\x7f\xf9', 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xab, 0x4, 0x100}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8161, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) 12.016355353s ago: executing program 9 (id=6034): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_pgetevents(0x0, 0x1, 0x1, &(0x7f00000000c0)=[{}], 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0xa) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000001580)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r2, r3}, 0xc) 11.705776531s ago: executing program 6 (id=6035): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b000100001000090459", @ANYBLOB="bdb0"], 0x0) 10.159992112s ago: executing program 6 (id=6038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x1ff, @remote, 0x9}}}, 0x84) 8.362251577s ago: executing program 6 (id=6044): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x28}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0xffff, 0x80002) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000180)={0x0}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0x301000, 0x8}) syz_emit_ethernet(0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r8, &(0x7f0000000440)="01000000", 0x4, 0x2a21}]) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000097c0)={0xffff1000, 0x11b000, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e64000000001000028004001f800800070006"], 0x40}}, 0x40000c0) 8.30911589s ago: executing program 5 (id=6045): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x24, &(0x7f0000000900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.63541283s ago: executing program 5 (id=6046): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000940)={0x18, &(0x7f00000000c0)={0x20, 0x12, 0xc0, {0xc0, 0x4, "7db7769892fb38bb7dac642c88aa57b598e1dafb3f76be0604c4f25606bcd93efe2c42cd0cf56c004097eb101853ef253c862cda3495e60f22e74cb775e26fe067c031db2f1185b656295f2542452176a8e5b8b89b8e4854b645efb48d0e9553b1529a618f2d0b0c2005a4233bcbdda26e4719b0eae5423a6f59ca6923adca5109d1a23fa86d0d731f76797dda254bd9de7a15fec61654c21025e8d0e67612b6e0554bb1e90db6ca8f74fe734d6cda77c35301d68dce8cf14dab97850539"}}, &(0x7f0000000780)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "a7e82ebb4c819d05c2c04650da9f180556f30a1052b0176a00996578dfed4262d4357a413aaf406cfec5a3dfb2ccb7aff7e8354c85d8e87aa58726056c8da56a505e5e9815547f278737814f94d5b9cd1009016775c05931b0af5b7d58b181779eb880d91ab7ef71e8dbc42f8371079476c587b107fc457a78c9c5cf0cf7f09f2cb6ed807c0e58c570bca39aeed493388cce90007a943336c82ec9288736bc4f2bd1125c686ea9d96b74a3e5f68a92209713d6d342d74a921fc01d10d041dcb65a4b8ed7c7"}}, &(0x7f0000000880)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "d9ac742d0d0c66a5a58531ab0348bd65"}]}}, &(0x7f00000008c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0x10, 0x9, 'Mo;(', "99f018bd"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb5, 0x60, 0xf7, 0xc, 0x7, 0x0, 0x1}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000980)={0x20, 0x16, 0x67, "4f0575ef85e17298469d4d58d75e70a110b9341538fd38737c5a6452ea0c1c506e9a5da7c69764179bc769b89d6fdb6f76cddb235b579a415bd9223f169489f3932119abc64020f46c00d68a4fe91772cfb626338054672eed4a449416deb81fc4e3eb73e266af"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xae}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000ac0)={0x20, 0x0, 0x8, {0x4, 0x80, [0xf]}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "94ee"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000c40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "7d97"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0xc}, &(0x7f0000000d00)={0x40, 0x1c, 0x1}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x1}}) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000000080)) 6.579808341s ago: executing program 9 (id=6047): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) 5.952942013s ago: executing program 9 (id=6049): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000240)="dca84fa25b395afae06401c529e474dbd8646e2c40d93c1f11", 0x19) 5.798232763s ago: executing program 5 (id=6050): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000000040)="d90077132dd512cf36818b740f406797e56c57a8a08e687399", 0x19}, {0x0}, {&(0x7f0000000140)="fce9b3ce7b5e620042567c6fff5dd8a3776d38f46019de2a8f9dea85ed5f3f8a2ca6c626d6a514dbaa0c249e9fbe909cc39151bc933a3e5332ff8e225ba8fce0638108cbf9e50816749aa4d9285bd740263b9438c2f2425000f070b31cc48ba57e8edafc79a033f6e10b10a1acc9c1b205ae9a140756eb", 0x77}, {&(0x7f00000004c0)="9a7a637d95d3bcd5", 0x8}], 0x4, 0x0, 0x0, 0x800}], 0x1, 0x150) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000940)=""/244, 0xf4}], 0x1}, 0x2042) 5.384434126s ago: executing program 5 (id=6053): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = syz_io_uring_setup(0x144d, &(0x7f0000000080)={0x0, 0x4, 0x1000, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) write(r0, 0x0, 0x0) 5.24486663s ago: executing program 8 (id=6054): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x7, 0xffffffff80050200, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x10, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x18, 0x0, 0x10001, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.057681762s ago: executing program 9 (id=6055): creat(&(0x7f0000000080)='./file0\x00', 0xa0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r4, {}, {0x10, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0x7}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000240)={0x4, 0x0, [{0x80000007, 0x0, 0x1, 0x8, 0x0, 0x2}, {0x4, 0x6, 0x4, 0x0, 0x0, 0xfffffffc}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0xb, 0x1, 0x80000001, 0x8}, {0xc0000000, 0xffffffff, 0x7, 0x1009, 0x5, 0x110, 0x5}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$video4linux(&(0x7f0000000380), 0x2, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x4006, 0x80000000, 0x300e, 0x1, 0xa, 0x3, 0x1, 0x6}}) r7 = openat$mice(0xffffff9c, &(0x7f0000000140), 0x880) connect$unix(r7, &(0x7f0000000380)=@file={0x1, './file1\x00'}, 0x6e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r8, &(0x7f0000000180)=[{&(0x7f0000000000)='\x00!', 0x2}], 0x1, 0xee, 0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400030000000900020073797a32000000000500010007000000070005000a000000140007800800114000000000080012400000ffff15000300686173683a69702c706f72742c6e657400000000"], 0x64}}, 0x0) r9 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) listen(r9, 0x3) listen(r9, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[], 0x0) 4.985119819s ago: executing program 5 (id=6057): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vicodec1(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r1, 0xc0245628, &(0x7f0000000100)={0x3, 0x1, 0x5, '\x00', &(0x7f0000000040)=0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40001019, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b7070000000002006a0000000000000007000000000000009500000000000000561cf53109c66825d874b16b2cba"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="83", 0x1}], 0x1) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f0000000000000000000000000000fdffffffffffffffffffffff9e3584c220e6185c0000000000000000000000000200ffff000000000080400000000000000000080000000000000000010000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00000000000000000000000000000000000300000700"/176], 0xfc}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r7 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000100)=0x40005) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x185b4661d8e50c38, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c40000000001010400000000000000000a0000023c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005400100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c000280050001000000000008000740000000000400164000000000000000020000000200008e5107d79d2463c20407000000000000008008000240000000050800024000000003080002400000000208000340000065480800034000000000"], 0xc4}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.736897873s ago: executing program 8 (id=6060): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) syz_emit_vhci(0x0, 0x16) 4.605823044s ago: executing program 7 (id=6061): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000800)={0xf7b, 0x1f, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) syz_open_dev$dri(&(0x7f0000000000), 0x79c19548, 0x82840) unshare(0x22020600) r4 = fsopen(&(0x7f0000000000)='devpts\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000200)='gid', &(0x7f0000001900)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\xf9\x99\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xfc8\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\x1e?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\x9f\xf1\xd9<\xb9k\x00qT\xda[\x93\b\xec\xa0\x8b\x17F\xf0]&S\xa3j\xf7L\x00=\xef\x969!D\x99\xa7}Y\x93\xb8\x8a\x8a\xc1\xa9\x80G\xdb-\xf0W\xe3\xc2W\x1coo\xc0\xdb\xf0S\xc6\x1cE\x00\xca\xac!$,\xe8\x80\x95M\xa8\xff\xfa\x7f\xf9', 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xab, 0x4, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8161, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) r7 = fcntl$dupfd(r3, 0x0, r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a6a35a08460d1220ec4d0102030109021b00010000a000090494000108ca6d000905070310"], 0x0) write$vhost_msg(r7, &(0x7f0000001900)={0x1, {&(0x7f0000000840)=""/4096, 0x1000, &(0x7f0000001840)=""/134, 0x2, 0x1}}, 0x44) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) 4.342660409s ago: executing program 8 (id=6062): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg(r0, 0x0, 0x0, 0xc881) close(0x3) 4.02057429s ago: executing program 8 (id=6063): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000000040)="d90077132dd512cf36818b740f406797e56c57a8a08e687399", 0x19}, {0x0}, {&(0x7f0000000140)="fce9b3ce7b5e620042567c6fff5dd8a3776d38f46019de2a8f9dea85ed5f3f8a2ca6c626d6a514dbaa0c249e9fbe909cc39151bc933a3e5332ff8e225ba8fce0638108cbf9e50816749aa4d9285bd740263b9438c2f2425000f070b31cc48ba57e8edafc79a033f6e10b10a1acc9c1b205ae9a140756eb", 0x77}, {&(0x7f00000004c0)="9a7a637d95d3bcd5", 0x8}], 0x4, 0x0, 0x0, 0x800}], 0x1, 0x150) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000940)=""/244, 0xf4}], 0x1}, 0x2042) 3.742555349s ago: executing program 8 (id=6064): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x10, 0x10, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r3) creat(&(0x7f0000000300)='./bus\x00', 0x0) 3.000227952s ago: executing program 5 (id=6065): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000240)="dca84fa25b395afae06401c529", 0xd) 2.193388315s ago: executing program 6 (id=6066): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x13, 0x0}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x5, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x10, 0x1, 0x3, 0x7}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x81, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0xe, 0x6, @multicast}, 0x14) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0xfffe, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffff801, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) syz_open_dev$dri(0x0, 0x7, 0x220042) socketpair$unix(0x1, 0x3, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) 1.333405735s ago: executing program 7 (id=6067): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x4, @loopback={0x2000000}, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 809.555944ms ago: executing program 7 (id=6068): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0x2) 768.734157ms ago: executing program 8 (id=6069): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdir(0x0, 0x8) r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000030904000001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c8100030900090b000300020000000904010000020d"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x490, 0xec000000, 0xffffffffffffffff}]}) 670.495566ms ago: executing program 7 (id=6070): fanotify_mark(0xffffffffffffffff, 0x10, 0x10, 0xffffffffffffffff, 0x0) 365.843572ms ago: executing program 7 (id=6071): r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0xb, 0x9, 0xffffffff}, 0xc) 231.870922ms ago: executing program 7 (id=6072): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a", @ANYBLOB="bdb0"], 0x0) 0s ago: executing program 9 (id=6073): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e0000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x24, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): different from the interface descriptor's value: 3 [ 2335.996239][T14442] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2335.998069][T14442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.998814][T14442] usb 7-1: Product: syz [ 2335.998832][T14442] usb 7-1: Manufacturer: syz [ 2335.998847][T14442] usb 7-1: SerialNumber: syz [ 2336.227325][T14442] usb 7-1: config 0 descriptor?? [ 2336.296486][ T5820] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2336.296507][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.349692][ T5820] usb 10-1: config 0 descriptor?? [ 2336.351427][ T5820] usb 10-1: can't set config #0, error -32 [ 2336.566308][T13257] usb 9-1: new full-speed USB device number 117 using dummy_hcd [ 2336.731041][T13257] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2336.731075][T13257] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2336.731102][T13257] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2336.758248][T13257] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2336.758329][T13257] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2336.758388][T13257] usb 9-1: Product: syz [ 2336.758429][T13257] usb 9-1: Manufacturer: syz [ 2336.758462][T13257] usb 9-1: SerialNumber: syz [ 2336.891641][T13257] usb 9-1: config 0 descriptor?? [ 2336.892850][T25908] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 2336.934097][T14442] usb 10-1: USB disconnect, device number 95 [ 2337.123445][T25913] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2337.130757][T13257] usb 9-1: selecting invalid altsetting 0 [ 2337.224471][T25908] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5500'. [ 2337.224520][T25908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5500'. [ 2337.651184][T25914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2337.888334][T25914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2340.485345][ T5820] usb 7-1: USB disconnect, device number 74 [ 2341.003229][T13257] usb 9-1: USB disconnect, device number 117 [ 2341.116240][T16048] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 2341.195361][T25642] udevd[25642]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2341.272578][T21942] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2341.275936][T16048] usb 10-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 2341.275961][T16048] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2341.287392][T16048] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2341.287418][T16048] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2341.287438][T16048] usb 10-1: SerialNumber: syz [ 2341.416223][T21942] usb 7-1: Using ep0 maxpacket: 32 [ 2341.419999][T21942] usb 7-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 1023 [ 2341.420019][T21942] usb 7-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2341.420036][T21942] usb 7-1: config 1 interface 0 has no altsetting 0 [ 2341.423857][T21942] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2341.423893][T21942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2341.424298][T21942] usb 7-1: Product: 쇝跜䡂쟅⚁ꬲ낞轷㓵䕯熳䩖撌⁻ʘ貎쨇諲穄慛챬ṁ峲鬵鵱콓쭋뭻 [ 2341.424317][T21942] usb 7-1: Manufacturer: 䂋톢䛑娉䶙柛꽸띡脜뼨麀꭫ヘ愵获⬡ᣰ嬓淝䧇㕡懦ꜵ梱•ꚩ櫸谼㨌흜鷀퀐즵퀮饘ᣯ萞䝟ꋆ몐㔱䰟鉀䕝ⷞ垍憴쾅蜃ffi䃌꥾叼暵`㊦欌ꈨ䪰醛뫅중穄꽉黀⠲⫁읿껩솦꺁蒇糃Ꮵ䧢凩٫⟐㯎柂䯄֠ᎆ랞∦뼜굋滺깬흞斩뒷├穃닳蓎㭺 [ 2341.424345][T21942] usb 7-1: SerialNumber: syz [ 2341.555631][T25924] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 2341.604063][T16048] usb 10-1: 0:2 : does not exist [ 2341.831100][T21942] usb 7-1: USB disconnect, device number 75 [ 2341.835710][T16048] usb 10-1: USB disconnect, device number 96 [ 2342.017913][T25630] udevd[25630]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2342.125072][T25938] binder: 25937:25938 ioctl c0306201 200000000000 returned -22 [ 2342.550629][T16048] usb 9-1: new full-speed USB device number 118 using dummy_hcd [ 2342.577126][T21942] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 2342.638699][T25951] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2342.770945][T21942] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 2342.771303][T21942] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.771327][T21942] usb 10-1: config 0 has no interface number 0 [ 2342.771678][T21942] usb 10-1: config 0 interface 117 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2342.771740][T21942] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2342.924522][T21942] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2342.924565][T21942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.924587][T21942] usb 10-1: Product: syz [ 2342.924601][T21942] usb 10-1: Manufacturer: syz [ 2342.924616][T21942] usb 10-1: SerialNumber: syz [ 2342.962500][T16048] usb 9-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2342.962631][T16048] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2342.962664][T16048] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2343.164228][T16048] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2343.164270][T16048] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2343.164344][T16048] usb 9-1: Product: syz [ 2343.164403][T16048] usb 9-1: Manufacturer: syz [ 2343.164472][T16048] usb 9-1: SerialNumber: syz [ 2343.512788][T21942] usb 10-1: config 0 descriptor?? [ 2343.574091][T16048] usb 9-1: config 0 descriptor?? [ 2343.975694][T25943] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2344.299873][T25943] netlink: 68 bytes leftover after parsing attributes in process `syz.8.5513'. [ 2344.647006][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.647210][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.182843][T16048] usb 9-1: selecting invalid altsetting 0 [ 2345.447862][T25943] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5513'. [ 2345.447893][T25943] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5513'. [ 2346.330160][ T5820] usb 10-1: USB disconnect, device number 97 [ 2346.531844][T16048] usb 9-1: USB disconnect, device number 118 [ 2346.745439][T25930] udevd[25930]: setting mode of /dev/audio3 to 020660 failed: No such file or directory [ 2346.745588][T25930] udevd[25930]: setting owner of /dev/audio3 to uid=0, gid=29 failed: No such file or directory [ 2346.771525][T25639] udevd[25639]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2346.906467][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 2347.156189][T16048] usb 9-1: new high-speed USB device number 119 using dummy_hcd [ 2347.308958][T16048] usb 9-1: Using ep0 maxpacket: 8 [ 2347.327167][T16048] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2347.327199][T16048] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2347.327222][T16048] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2347.327247][T16048] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2347.327286][T16048] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2347.327308][T16048] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2347.596376][T16048] usb 9-1: GET_CAPABILITIES returned 0 [ 2347.596423][T16048] usbtmc 9-1:16.0: can't read capabilities [ 2347.835193][T25962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2347.835859][T25962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2347.940088][T16048] usb 9-1: USB disconnect, device number 119 [ 2348.081113][T25980] binder: 25979:25980 ioctl c0306201 200000000000 returned -22 [ 2348.496251][T14442] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 2348.678630][T14442] usb 10-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 2348.678696][T14442] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2348.728940][T25991] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2348.769077][T14442] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2348.769193][T14442] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2348.769259][T14442] usb 10-1: SerialNumber: syz [ 2350.589916][T14442] usb 10-1: 0:2 : does not exist [ 2353.532863][T14442] usb 10-1: USB disconnect, device number 98 [ 2353.658386][T25630] udevd[25630]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2353.778034][T26023] netlink: 'syz.8.5540': attribute type 2 has an invalid length. [ 2354.194378][T26030] erspan0: entered allmulticast mode [ 2354.876210][ T5820] usb 9-1: new high-speed USB device number 120 using dummy_hcd [ 2355.028289][ T5820] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2355.028352][ T5820] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2355.031244][ T5820] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2355.031275][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.031298][ T5820] usb 9-1: Product: syz [ 2355.031315][ T5820] usb 9-1: Manufacturer: syz [ 2355.031332][ T5820] usb 9-1: SerialNumber: syz [ 2355.131694][ T5820] cdc_ncm 9-1:1.0: skipping garbage [ 2356.394140][ T5820] cdc_ncm 9-1:1.0: bind() failure [ 2356.451474][ T5820] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 2356.486604][ T5820] usb 9-1: USB disconnect, device number 120 [ 2356.728496][T26052] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2360.740778][T26066] netlink: 'syz.9.5552': attribute type 2 has an invalid length. [ 2360.836888][T26068] erspan0: entered allmulticast mode [ 2362.316240][T16048] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 2362.466189][T16048] usb 6-1: Using ep0 maxpacket: 32 [ 2362.468300][T16048] usb 6-1: config 4 has too many interfaces: 223, using maximum allowed: 32 [ 2362.468326][T16048] usb 6-1: config 4 has 1 interface, different from the descriptor's value: 223 [ 2362.468373][T16048] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2362.468398][T16048] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2362.471217][T16048] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2362.471243][T16048] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2362.471263][T16048] usb 6-1: Product: syz [ 2362.471277][T16048] usb 6-1: Manufacturer: syz [ 2362.624169][T16048] hub 6-1:4.0: USB hub found [ 2362.904306][T26087] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2364.029592][T16048] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 2366.775497][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2366.849958][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2366.851889][T25717] usb 6-1: USB disconnect, device number 67 [ 2366.874615][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2366.880936][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2366.885059][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2367.256223][T16048] usb 7-1: new low-speed USB device number 76 using dummy_hcd [ 2367.407965][T16048] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2367.408014][T16048] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2367.408052][T16048] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2367.408075][T16048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2367.480545][T16048] usb 7-1: config 0 descriptor?? [ 2367.530107][T16048] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2367.759067][T26109] netlink: 'syz.5.5567': attribute type 2 has an invalid length. [ 2367.796233][T25717] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 2367.941556][T15664] syz_tun (unregistering): left allmulticast mode [ 2367.966142][T25717] usb 10-1: Using ep0 maxpacket: 16 [ 2367.969030][T25717] usb 10-1: config index 0 descriptor too short (expected 16456, got 72) [ 2367.969047][T25717] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2367.969061][T25717] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2367.969073][T25717] usb 10-1: config 0 has an invalid interface number: 125 but max is 1 [ 2367.969093][T25717] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2367.969106][T25717] usb 10-1: config 0 has no interface number 0 [ 2367.969135][T25717] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2367.969154][T25717] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2367.969168][T25717] usb 10-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2367.969190][T25717] usb 10-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2367.969208][T25717] usb 10-1: config 0 interface 125 has no altsetting 0 [ 2367.969220][T25717] usb 10-1: config 0 interface 125 has no altsetting 2 [ 2367.971135][T25717] usb 10-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2367.971153][T25717] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.971181][T25717] usb 10-1: Product: syz [ 2367.971196][T25717] usb 10-1: Manufacturer: syz [ 2367.971210][T25717] usb 10-1: SerialNumber: syz [ 2368.025984][T25717] usb 10-1: config 0 descriptor?? [ 2368.149932][T25717] usb 10-1: selecting invalid altsetting 2 [ 2368.495858][T26118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.506531][T26118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.933786][T26119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.958565][T26119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.961531][T26105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.962065][T26105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2368.994882][T26119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2369.010953][T26119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2369.208133][ C0] usb 10-1: async_complete: urb error -71 [ 2369.208229][ C0] usb 10-1: async_complete: urb error -71 [ 2369.208310][ C0] usb 10-1: async_complete: urb error -71 [ 2369.211742][T25717] get_1284_register: usb error -71 [ 2369.217745][T24034] Bluetooth: hci1: command tx timeout [ 2369.303155][T25717] usb 10-1: USB disconnect, device number 99 [ 2369.580733][ T3604] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2370.106966][T26127] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 2370.889410][T13257] usb 7-1: USB disconnect, device number 76 [ 2371.334125][T24034] Bluetooth: hci1: command tx timeout [ 2373.378603][T24034] Bluetooth: hci1: command tx timeout [ 2374.112221][T26136] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5574'. [ 2374.166435][T26145] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5574'. [ 2375.365486][T26151] netlink: 'syz.6.5578': attribute type 2 has an invalid length. [ 2375.426574][T26089] chnl_net:caif_netlink_parms(): no params data found [ 2375.456153][T24034] Bluetooth: hci1: command tx timeout [ 2375.791957][ T3604] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2375.836117][T13257] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2375.988850][T13257] usb 7-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 2375.988876][T13257] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2375.990334][T13257] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2375.990360][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2375.990381][T13257] usb 7-1: SerialNumber: syz [ 2376.079532][T25717] usb 10-1: new low-speed USB device number 100 using dummy_hcd [ 2376.252105][T25717] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2376.252165][T25717] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2376.252205][T25717] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2376.252228][T25717] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2376.290837][T25717] usb 10-1: config 0 descriptor?? [ 2376.333259][T13257] usb 7-1: 0:2 : does not exist [ 2376.333355][T13257] usb 7-1: unit 5 not found! [ 2376.338701][T25717] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 2376.415190][T13257] usb 7-1: USB disconnect, device number 77 [ 2376.480962][T26166] Invalid logical block size (8192) [ 2376.510430][ T3604] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2376.517859][T25630] udevd[25630]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2377.035708][ T3604] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.106699][T26089] bridge0: port 1(bridge_slave_0) entered blocking state [ 2377.106805][T26089] bridge0: port 1(bridge_slave_0) entered disabled state [ 2377.107033][T26089] bridge_slave_0: entered allmulticast mode [ 2377.111343][T26089] bridge_slave_0: entered promiscuous mode [ 2377.115644][T26089] bridge0: port 2(bridge_slave_1) entered blocking state [ 2377.115768][T26089] bridge0: port 2(bridge_slave_1) entered disabled state [ 2377.115890][T26089] bridge_slave_1: entered allmulticast mode [ 2377.138873][T26089] bridge_slave_1: entered promiscuous mode [ 2377.214318][T26176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.224001][T26176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2377.336423][T26089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2377.365154][T26089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2377.542360][T26089] team0: Port device team_slave_0 added [ 2377.557079][T26089] team0: Port device team_slave_1 added [ 2377.646952][T26180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.659416][T26180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2377.700595][T26180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.704192][T26180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2377.789495][T26089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2377.789511][T26089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2377.789539][T26089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2377.819507][T26089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2377.819583][T26089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2377.819659][T26089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2378.068061][T26089] hsr_slave_0: entered promiscuous mode [ 2378.069700][T26089] hsr_slave_1: entered promiscuous mode [ 2378.070632][T26089] debugfs: 'hsr0' already exists in 'hsr' [ 2378.070656][T26089] Cannot create hsr debugfs directory [ 2378.858772][T13257] usb 10-1: USB disconnect, device number 100 [ 2380.330905][T26196] netlink: 'syz.5.5590': attribute type 2 has an invalid length. [ 2380.817998][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5591'. [ 2381.084550][T26194] erspan0: entered allmulticast mode [ 2381.297363][T13257] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2381.471004][T13257] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.471031][T13257] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2381.471078][T13257] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2381.471101][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2381.516278][ T5820] usb 10-1: new full-speed USB device number 101 using dummy_hcd [ 2381.542469][T13257] usb 7-1: config 0 descriptor?? [ 2381.694605][ T5820] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2381.694713][ T5820] usb 10-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2381.694741][ T5820] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2381.750064][ T5820] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2381.750093][ T5820] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2381.750170][ T5820] usb 10-1: Product: syz [ 2381.750186][ T5820] usb 10-1: Manufacturer: syz [ 2381.750201][ T5820] usb 10-1: SerialNumber: syz [ 2381.805666][T13257] Bluetooth: Can't get state to change to load ram patch err [ 2381.805685][T13257] Bluetooth: Loading patch file failed [ 2381.805934][T13257] ath3k 7-1:0.0: probe with driver ath3k failed with error -32 [ 2381.977230][ T3604] bridge_slave_1: left allmulticast mode [ 2381.977375][ T3604] bridge_slave_1: left promiscuous mode [ 2381.981338][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 2382.048882][ T5820] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 2382.073766][ T5820] usb 10-1: USB disconnect, device number 101 [ 2382.099338][ T3604] bridge_slave_0: left allmulticast mode [ 2382.099362][ T3604] bridge_slave_0: left promiscuous mode [ 2382.099622][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 2383.566516][T26226] netlink: 'syz.8.5600': attribute type 2 has an invalid length. [ 2383.786930][ T3604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2383.846740][ T3604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2383.888310][ T3604] bond0 (unregistering): Released all slaves [ 2383.968280][T13257] usb 7-1: USB disconnect, device number 78 [ 2384.261115][T26235] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5603'. [ 2384.316610][ T3604] IPVS: stopping backup sync thread 20183 ... [ 2384.318150][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5603'. [ 2384.936239][T26245] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5604'. [ 2385.110953][T26253] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5608'. [ 2385.526179][ T5881] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2385.676148][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 2385.678463][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2385.678495][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2385.678521][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2385.678544][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2385.678569][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2385.691818][ T5881] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2385.691923][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2385.691943][ T5881] usb 7-1: Product: syz [ 2385.691979][ T5881] usb 7-1: Manufacturer: syz [ 2385.692031][ T5881] usb 7-1: SerialNumber: syz [ 2385.757958][ T5881] usb 7-1: config 0 descriptor?? [ 2386.116504][T26269] netlink: 'syz.8.5610': attribute type 2 has an invalid length. [ 2386.213063][ T5881] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 2386.213119][ T5881] input input61: Device does not respond to id packet M [ 2386.214174][ T5881] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 2386.214224][ T5881] input input61: Device does not respond to id packet P [ 2386.215200][ T5881] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 2386.215243][ T5881] input input61: Device does not respond to id packet B [ 2386.215910][ T5881] input input61: Device does not respond to id packet N [ 2386.435963][ T5881] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 2386.437417][ T5881] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 2386.439092][ T5881] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 2386.444532][ T5881] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 2386.531825][ T5881] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input61 [ 2386.564196][ T5881] usb 7-1: USB disconnect, device number 79 [ 2387.364821][T26282] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2387.965683][T26285] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5615'. [ 2387.995822][T26285] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5615'. [ 2387.995850][T26285] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5615'. [ 2389.576280][ T3604] hsr_slave_0: left promiscuous mode [ 2389.611982][T26300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5619'. [ 2389.617668][ T3604] hsr_slave_1: left promiscuous mode [ 2389.618483][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2389.618516][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2389.638135][ T3604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2389.638153][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2389.822346][ T3604] veth1_macvtap: left promiscuous mode [ 2389.822472][ T3604] veth0_macvtap: left promiscuous mode [ 2389.823355][ T3604] veth1_vlan: left promiscuous mode [ 2389.823500][ T3604] veth0_vlan: left promiscuous mode [ 2390.946737][T26304] netlink: 'syz.9.5621': attribute type 2 has an invalid length. [ 2391.296227][ T5881] usb 10-1: new full-speed USB device number 102 using dummy_hcd [ 2391.391021][ T3604] team0 (unregistering): Port device team_slave_1 removed [ 2391.447731][ T3604] team0 (unregistering): Port device C removed [ 2391.449399][ T5881] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2391.449954][ T5881] usb 10-1: not running at top speed; connect to a high speed hub [ 2391.453753][ T5881] usb 10-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 2391.453784][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2391.453808][ T5881] usb 10-1: Product: syz [ 2391.453824][ T5881] usb 10-1: Manufacturer: syz [ 2391.453841][ T5881] usb 10-1: SerialNumber: syz [ 2391.565878][ T5881] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 2391.851824][ T5881] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2391.943392][ T5881] snd-usb-hiface 10-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 2392.054706][ T5881] usb 10-1: can't set first interface for hiFace device. [ 2392.054812][ T5881] snd-usb-hiface 10-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 2392.078717][ T5881] usb 10-1: can't set first interface for hiFace device. [ 2392.078761][ T5881] snd-usb-hiface 10-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 2392.083171][ T5881] usb 10-1: USB disconnect, device number 102 [ 2392.131388][T25630] udevd[25630]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2392.556430][T26308] fuse: Unknown parameter 'user_id00000000000000000000' [ 2392.739071][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 2393.376144][T21942] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 2393.384646][T26314] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5625'. [ 2393.409451][T26314] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5625'. [ 2393.409480][T26314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5625'. [ 2393.588066][T21942] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2393.588097][T21942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2393.588117][T21942] usb 10-1: Product: syz [ 2393.588132][T21942] usb 10-1: Manufacturer: syz [ 2393.588146][T21942] usb 10-1: SerialNumber: syz [ 2393.705046][T21942] usb 10-1: config 0 descriptor?? [ 2394.457966][T21942] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2394.521557][T26089] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2394.601473][T26089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2394.602876][T26089] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2394.630210][T21942] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2394.630235][T21942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2394.630255][T21942] usb 7-1: Product: syz [ 2394.630269][T21942] usb 7-1: Manufacturer: syz [ 2394.630282][T21942] usb 7-1: SerialNumber: syz [ 2394.681752][T26089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2394.690822][T26089] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2394.892137][T26089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2394.903302][T26089] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2395.015152][T26089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2395.082271][T21942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2395.082314][T21942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2395.321846][ T3604] IPVS: stop unused estimator thread 0... [ 2395.586190][T25717] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 2395.627280][T26089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2395.712555][T26089] 8021q: adding VLAN 0 to HW filter on device team0 [ 2395.738686][T25717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2395.738764][T25717] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2395.738794][T25717] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2395.738812][T25717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2395.785728][T23898] bridge0: port 1(bridge_slave_0) entered blocking state [ 2395.785854][T23898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2395.808270][T25717] usb 6-1: config 0 descriptor?? [ 2395.868947][T23898] bridge0: port 2(bridge_slave_1) entered blocking state [ 2395.869090][T23898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2396.052724][T14442] usb 10-1: USB disconnect, device number 103 [ 2396.291111][T21942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2396.292802][T21942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 2396.399141][T25717] aquacomputer_d5next 0003:0C70:F0B6.0022: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 2396.440656][T26353] netlink: 'syz.9.5631': attribute type 2 has an invalid length. [ 2397.187215][T26358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.188971][T21942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 2397.189011][T21942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2397.235066][T26358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.260975][T21942] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2397.279781][T26349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2397.280137][T26349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2397.283021][T16048] usb 6-1: USB disconnect, device number 68 [ 2397.313562][T21942] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 2397.404118][T21942] usb 7-1: USB disconnect, device number 80 [ 2397.509584][T26089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2398.246236][ T5820] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 2398.317972][T26089] veth0_vlan: entered promiscuous mode [ 2398.344149][T26089] veth1_vlan: entered promiscuous mode [ 2398.428667][ T5820] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 2398.428692][ T5820] usb 7-1: config 0 has no interface number 0 [ 2398.428733][ T5820] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2398.428758][ T5820] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2398.432012][ T5820] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2398.432041][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2398.432064][ T5820] usb 7-1: Product: syz [ 2398.432079][ T5820] usb 7-1: Manufacturer: syz [ 2398.432096][ T5820] usb 7-1: SerialNumber: syz [ 2398.503588][ T5820] usb 7-1: config 0 descriptor?? [ 2398.513475][T26373] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2398.535208][ T5820] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2398.595653][T26089] veth0_macvtap: entered promiscuous mode [ 2398.631058][T26089] veth1_macvtap: entered promiscuous mode [ 2398.713543][T26089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2398.786850][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 2398.789463][ T5820] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2398.849013][T26089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2398.911074][T18355] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.915847][T18355] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.955329][T18355] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2398.979290][T18355] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2399.091486][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5634'. [ 2399.157471][T26385] mmap: syz.6.5633 (26385) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2400.638316][ T5820] usb 9-1: new high-speed USB device number 121 using dummy_hcd [ 2400.802590][ T5820] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2400.802646][ T5820] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2400.809275][T25717] usb 7-1: USB disconnect, device number 81 [ 2400.840572][ T5820] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2400.840616][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2400.840636][ T5820] usb 9-1: Product: syz [ 2400.840651][ T5820] usb 9-1: Manufacturer: syz [ 2400.840664][ T5820] usb 9-1: SerialNumber: syz [ 2400.943182][T18355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2400.943203][T18355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2400.979359][T25717] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2400.980229][T25717] cyberjack 7-1:0.69: device disconnected [ 2401.098854][ T5820] cdc_ncm 9-1:1.0: skipping garbage [ 2401.207377][ T3604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2401.207397][ T3604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2401.703201][ T5820] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 2401.703278][ T5820] cdc_ncm 9-1:1.0: bind() failure [ 2401.763184][ T5820] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 2401.763217][ T5820] cdc_ncm 9-1:1.1: bind() failure [ 2401.809457][ T5820] usb 9-1: USB disconnect, device number 121 [ 2402.141332][T26399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2402.586928][T25717] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 2402.748481][T25717] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2402.748508][T25717] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2402.749591][T25717] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2402.749614][T25717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2402.749632][T25717] usb 9-1: SerialNumber: syz [ 2403.063340][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2403.123521][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2403.134763][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2403.148536][T25717] usb 9-1: 0:2 : does not exist [ 2403.180767][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2403.183949][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2403.458830][T25717] usb 9-1: USB disconnect, device number 122 [ 2403.505379][T26417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5647'. [ 2403.521696][T26417] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5647'. [ 2403.521726][T26417] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5647'. [ 2403.522368][T26417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5647'. [ 2403.525123][T26417] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5647'. [ 2403.685648][T25630] udevd[25630]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2404.090719][T26428] netlink: 'syz.9.5649': attribute type 1 has an invalid length. [ 2404.092292][T16684] syz_tun (unregistering): left allmulticast mode [ 2404.166155][T25717] usb 9-1: new full-speed USB device number 123 using dummy_hcd [ 2404.177734][T26431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5646'. [ 2404.318716][T26425] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5649'. [ 2404.320137][T25717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2404.320174][T25717] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2404.320215][T25717] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2404.320242][T25717] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.379964][T25717] usb 9-1: config 0 descriptor?? [ 2404.515610][T26428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2404.691740][T26430] bond1: (slave veth3): Enslaving as an active interface with a down link [ 2404.812973][T25717] hid_parser_main: 28 callbacks suppressed [ 2404.812997][T25717] elan 0003:04F3:0755.0023: unknown main item tag 0x0 [ 2404.813037][T25717] elan 0003:04F3:0755.0023: unknown main item tag 0x0 [ 2404.813062][T25717] elan 0003:04F3:0755.0023: unknown main item tag 0x0 [ 2404.813086][T25717] elan 0003:04F3:0755.0023: unknown main item tag 0x0 [ 2404.813111][T25717] elan 0003:04F3:0755.0023: unknown main item tag 0x0 [ 2404.814497][T25717] elan 0003:04F3:0755.0023: failed to start in urb: -90 [ 2404.890600][T25717] elan 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 2404.935152][T26433] bond1: (slave dummy0): making interface the new active one [ 2404.948399][T26433] dummy0: entered promiscuous mode [ 2404.948996][T26433] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2405.055065][T26439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2405.055676][T26439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2405.177111][T26425] bond1: (slave dummy0): Releasing active interface [ 2405.177290][T26425] dummy0 (unregistering): left promiscuous mode [ 2405.376708][T24034] Bluetooth: hci5: command tx timeout [ 2405.945028][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2405.945105][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.077278][T23898] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.956516][ T5881] usb 9-1: USB disconnect, device number 123 [ 2407.008822][T23898] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.457935][T24034] Bluetooth: hci5: command tx timeout [ 2407.576973][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5658'. [ 2407.606962][T26471] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5658'. [ 2407.607005][T26471] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5658'. [ 2407.636442][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5658'. [ 2407.664852][T26471] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5658'. [ 2408.274663][T23898] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.402240][T26408] chnl_net:caif_netlink_parms(): no params data found [ 2408.458084][T26467] netlink: 'syz.6.5657': attribute type 25 has an invalid length. [ 2408.458110][T26467] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5657'. [ 2409.215892][T23898] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.536133][T24034] Bluetooth: hci5: command tx timeout [ 2409.741918][T26408] bridge0: port 1(bridge_slave_0) entered blocking state [ 2409.742225][T26408] bridge0: port 1(bridge_slave_0) entered disabled state [ 2409.742397][T26408] bridge_slave_0: entered allmulticast mode [ 2409.745207][T26408] bridge_slave_0: entered promiscuous mode [ 2409.754706][T26408] bridge0: port 2(bridge_slave_1) entered blocking state [ 2409.755098][T26408] bridge0: port 2(bridge_slave_1) entered disabled state [ 2409.755551][T26408] bridge_slave_1: entered allmulticast mode [ 2409.762894][T26408] bridge_slave_1: entered promiscuous mode [ 2410.119551][T26408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2410.158924][T26408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2411.616322][T24034] Bluetooth: hci5: command tx timeout [ 2411.760553][T26408] team0: Port device team_slave_0 added [ 2412.045106][T26408] team0: Port device team_slave_1 added [ 2412.364176][T26408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2412.364195][T26408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2412.364226][T26408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2412.428766][T26408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2412.428778][T26408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2412.428797][T26408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2412.591064][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5669'. [ 2412.607859][T26509] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5669'. [ 2412.607961][T26509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5669'. [ 2412.609574][T26509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5669'. [ 2412.635529][T26509] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5669'. [ 2412.816832][T25782] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 2412.987536][T25782] usb 10-1: Using ep0 maxpacket: 32 [ 2412.994855][T25782] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 2412.994902][T25782] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 2412.994929][T25782] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2412.994954][T25782] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 2413.048261][T25782] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 2413.048347][T25782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2413.048407][T25782] usb 10-1: Product: syz [ 2413.048466][T25782] usb 10-1: Manufacturer: syz [ 2413.048499][T25782] usb 10-1: SerialNumber: syz [ 2413.238684][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 2413.409342][T26408] hsr_slave_0: entered promiscuous mode [ 2413.410346][T26408] hsr_slave_1: entered promiscuous mode [ 2413.424843][T26408] debugfs: 'hsr0' already exists in 'hsr' [ 2413.424885][T26408] Cannot create hsr debugfs directory [ 2413.840763][T25782] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input62 [ 2414.057580][T25360] usb 7-1: new full-speed USB device number 82 using dummy_hcd [ 2414.346599][T23898] bridge_slave_1: left allmulticast mode [ 2414.346631][T23898] bridge_slave_1: left promiscuous mode [ 2414.346881][T23898] bridge0: port 2(bridge_slave_1) entered disabled state [ 2414.364928][T25360] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2414.364953][T25360] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2414.365001][T25360] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2414.365031][T25360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2414.441250][T25360] usb 7-1: config 0 descriptor?? [ 2414.524080][T25360] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2414.547410][T25360] dvb-usb: bulk message failed: -22 (3/0) [ 2414.572139][T25360] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2414.573090][T25360] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2414.573147][T25360] usb 7-1: media controller created [ 2414.601206][T23898] bridge_slave_0: left allmulticast mode [ 2414.601232][T23898] bridge_slave_0: left promiscuous mode [ 2414.601462][T23898] bridge0: port 1(bridge_slave_0) entered disabled state [ 2414.635835][T25360] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2414.700200][T25360] dvb-usb: bulk message failed: -22 (6/0) [ 2414.700332][T25360] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2414.730562][T25360] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input63 [ 2414.754138][T25360] dvb-usb: schedule remote query interval to 150 msecs. [ 2414.754162][T25360] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2414.813337][T25782] imon:send_packet: packet tx failed (-71) [ 2414.827010][T25782] imon 10-1:155.0: panel buttons/knobs setup failed [ 2414.827030][T25782] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 2414.827042][T25782] (id 0x00) [ 2414.917336][T25360] dvb-usb: bulk message failed: -22 (1/0) [ 2414.917418][T25360] dvb-usb: error while querying for an remote control event. [ 2414.974626][T26522] dibusb: i2c wr: len=67 is too big! [ 2414.974626][T26522] [ 2415.041419][T25782] rc_core: IR keymap rc-imon-pad not found [ 2415.041441][T25782] Registered IR keymap rc-empty [ 2415.041500][T25782] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 2415.041511][T25782] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 2415.042846][T25782] imon:send_packet: packet tx failed (-71) [ 2415.063752][T25782] imon 10-1:155.0: remote input dev register failed [ 2415.064202][T25782] imon 10-1:155.0: imon_init_intf0: rc device setup failed [ 2415.085753][T13257] usb 7-1: USB disconnect, device number 82 [ 2415.092514][T25360] dvb-usb: bulk message failed: -22 (1/0) [ 2415.092539][T25360] dvb-usb: error while querying for an remote control event. [ 2415.838915][T25782] imon 10-1:155.0: unable to initialize intf0, err 0 [ 2415.838939][T25782] imon:imon_probe: failed to initialize context! [ 2415.838951][T25782] imon 10-1:155.0: unable to register, err -19 [ 2415.889861][T25782] usb 10-1: USB disconnect, device number 104 [ 2415.941385][T26545] netlink: 'syz.6.5677': attribute type 1 has an invalid length. [ 2416.307547][T13257] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2416.369416][T26549] netlink: 'syz.8.5678': attribute type 2 has an invalid length. [ 2416.386164][T25782] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 2416.626329][T25782] usb 10-1: Using ep0 maxpacket: 32 [ 2416.633063][T25782] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 2416.633090][T25782] usb 10-1: config 0 has no interface number 0 [ 2416.633137][T25782] usb 10-1: config 0 interface 12 has no altsetting 0 [ 2416.668368][T25782] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2416.668395][T25782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.668414][T25782] usb 10-1: Product: syz [ 2416.668428][T25782] usb 10-1: Manufacturer: syz [ 2416.668442][T25782] usb 10-1: SerialNumber: syz [ 2416.680152][T25782] usb 10-1: config 0 descriptor?? [ 2416.941962][T23898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2417.018293][T23898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2417.063784][T23898] bond0 (unregistering): Released all slaves [ 2417.118660][T25782] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2417.120637][T25782] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 2417.120669][T25782] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2417.120755][T25782] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 2417.303337][T25782] usb 10-1: USB disconnect, device number 105 [ 2417.489272][T26555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5680'. [ 2417.490211][T26555] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5680'. [ 2417.490250][T26555] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5680'. [ 2417.490943][T26555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5680'. [ 2417.492034][T26555] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5680'. [ 2417.656652][ T5480] 8021q: adding VLAN 0 to HW filter on device eth21 [ 2417.759862][T23898] IPVS: stopping backup sync thread 23284 ... [ 2418.276292][T25782] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 2418.445367][T25782] usb 9-1: Using ep0 maxpacket: 16 [ 2418.462012][T25782] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2418.462045][T25782] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2418.462076][T25782] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2418.462098][T25782] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2418.509074][T25782] usb 9-1: config 0 descriptor?? [ 2418.619909][T24034] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 2419.161538][T25782] usbhid 9-1:0.0: can't add hid device: -71 [ 2419.161650][T25782] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2419.221767][T25782] usb 9-1: USB disconnect, device number 124 [ 2419.401370][T26585] binder: BINDER_SET_CONTEXT_MGR already set [ 2419.401382][T26585] binder: 26582:26585 ioctl 4018620d 200000004a80 returned -16 [ 2419.636206][T21942] usb 7-1: new full-speed USB device number 83 using dummy_hcd [ 2419.642363][ T5480] 8021q: adding VLAN 0 to HW filter on device eth22 [ 2419.798917][T21942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2419.798946][T21942] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2419.798995][T21942] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2419.799020][T21942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2419.799329][T26588] netlink: 'syz.9.5688': attribute type 1 has an invalid length. [ 2419.858256][T21942] usb 7-1: config 0 descriptor?? [ 2419.877929][T21942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2419.877974][T21942] dvb-usb: bulk message failed: -22 (3/0) [ 2419.936734][T21942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2419.941530][T21942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2419.941580][T21942] usb 7-1: media controller created [ 2419.943395][T21942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2419.982965][T21942] dvb-usb: bulk message failed: -22 (6/0) [ 2420.024087][T21942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2420.040585][T21942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input65 [ 2420.062991][T26586] dibusb: i2c wr: len=67 is too big! [ 2420.062991][T26586] [ 2420.063493][T21942] dvb-usb: schedule remote query interval to 150 msecs. [ 2420.063514][T21942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2420.105407][T21942] usb 7-1: USB disconnect, device number 83 [ 2420.141958][T23898] hsr_slave_0: left promiscuous mode [ 2420.177820][T23898] hsr_slave_1: left promiscuous mode [ 2420.178875][T23898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2420.178914][T23898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2420.238716][T23898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2420.238743][T23898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2420.308114][T21942] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2420.431347][T26593] netlink: 'syz.8.5689': attribute type 2 has an invalid length. [ 2420.445880][T23898] veth1_macvtap: left promiscuous mode [ 2420.445973][T23898] veth0_macvtap: left promiscuous mode [ 2420.449084][T23898] veth1_vlan: left promiscuous mode [ 2420.450549][T23898] veth0_vlan: left promiscuous mode [ 2420.686211][T14442] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 2420.836084][T14442] usb 10-1: Using ep0 maxpacket: 32 [ 2420.838815][T14442] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2420.838850][T14442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2420.838880][T14442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2420.838907][T14442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2420.838937][T14442] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2420.842538][T14442] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2420.842566][T14442] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2420.842587][T14442] usb 10-1: Product: syz [ 2420.842601][T14442] usb 10-1: Manufacturer: syz [ 2420.842616][T14442] usb 10-1: SerialNumber: syz [ 2421.015874][T14442] usb 10-1: config 0 descriptor?? [ 2421.448019][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.448066][T14442] input input66: Device does not respond to id packet M [ 2421.448463][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.448503][T14442] input input66: Device does not respond to id packet P [ 2421.448902][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.448942][T14442] input input66: Device does not respond to id packet B [ 2421.449328][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.449367][T14442] input input66: Device does not respond to id packet N [ 2421.450588][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.451082][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.451529][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.451958][T14442] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 2421.541248][T14442] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input66 [ 2421.625562][T14442] usb 10-1: USB disconnect, device number 106 [ 2421.776624][T21942] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 2421.879795][ T37] audit: type=1326 audit(1889456152.340:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26603 comm="syz.6.5695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897dc4c819 code=0x0 [ 2421.936669][T21942] usb 9-1: Using ep0 maxpacket: 32 [ 2421.938658][T21942] usb 9-1: config 4 has too many interfaces: 223, using maximum allowed: 32 [ 2421.938683][T21942] usb 9-1: config 4 has 1 interface, different from the descriptor's value: 223 [ 2421.938730][T21942] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2421.938756][T21942] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2421.941140][T21942] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2421.941167][T21942] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2421.941187][T21942] usb 9-1: Product: syz [ 2421.941202][T21942] usb 9-1: Manufacturer: syz [ 2422.084271][T21942] hub 9-1:4.0: USB hub found [ 2422.295776][T21942] hub 9-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 2422.320477][T26607] binder: 26606:26607 ioctl c0306201 0 returned -14 [ 2423.036985][T23898] team0 (unregistering): Port device team_slave_1 removed [ 2423.203196][T23898] team0 (unregistering): Port device team_slave_0 removed [ 2424.726152][T21942] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 2424.897806][T21942] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2424.897833][T21942] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2424.899294][T21942] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2424.899322][T21942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2424.899342][T21942] usb 7-1: SerialNumber: syz [ 2425.015919][T25360] usb 9-1: USB disconnect, device number 125 [ 2425.368057][T21942] usb 7-1: 0:2 : does not exist [ 2425.500770][T21942] usb 7-1: USB disconnect, device number 84 [ 2425.793902][T25630] udevd[25630]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2426.122252][T26653] binder: 26650:26653 ioctl c0306201 0 returned -14 [ 2426.586130][T25360] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 2426.778083][T25360] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2426.778145][T25360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2426.778171][T25360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2426.778193][T25360] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2426.779430][T25360] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2426.779458][T25360] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2426.779479][T25360] usb 9-1: Manufacturer: syz [ 2426.914589][T25360] usb 9-1: config 0 descriptor?? [ 2427.108278][T26659] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5708'. [ 2427.108305][T26659] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 2427.160371][T23898] IPVS: stop unused estimator thread 0... [ 2427.471693][T26669] binder: BINDER_SET_CONTEXT_MGR already set [ 2427.471711][T26669] binder: 26667:26669 ioctl 4018620d 200000004a80 returned -16 [ 2427.721585][T26670] pim6reg0: tun_chr_ioctl cmd 35111 [ 2427.855000][T25360] appleir 0003:05AC:8243.0024: unknown main item tag 0x0 [ 2427.896187][T14442] usb 7-1: new full-speed USB device number 85 using dummy_hcd [ 2428.025957][T25360] appleir 0003:05AC:8243.0024: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 2428.026164][ T5881] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 2428.059004][T14442] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2428.059535][T14442] usb 7-1: not running at top speed; connect to a high speed hub [ 2428.060562][T14442] usb 7-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 2428.062898][T14442] usb 7-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 2428.062924][T14442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.062944][T14442] usb 7-1: Product: syz [ 2428.062958][T14442] usb 7-1: Manufacturer: syz [ 2428.062972][T14442] usb 7-1: SerialNumber: syz [ 2428.176140][ T5881] usb 10-1: Using ep0 maxpacket: 32 [ 2428.178376][ T5881] usb 10-1: config 4 has too many interfaces: 223, using maximum allowed: 32 [ 2428.178398][ T5881] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2428.178415][ T5881] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 223 [ 2428.180624][ T5881] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2428.180651][ T5881] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2428.180671][ T5881] usb 10-1: Product: syz [ 2428.180685][ T5881] usb 10-1: Manufacturer: syz [ 2428.404098][T14442] qmi_wwan 7-1:251.0: probe with driver qmi_wwan failed with error -22 [ 2428.425236][T14442] usb 7-1: USB disconnect, device number 85 [ 2429.229400][T25782] usb 9-1: USB disconnect, device number 126 [ 2429.662177][T26714] binder: 26713:26714 ioctl c0306201 0 returned -14 [ 2431.102079][T14442] usb 10-1: USB disconnect, device number 107 [ 2431.629293][T26408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2431.681219][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2431.685795][T26408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2431.742893][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2431.760057][T26408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2431.798509][T26745] binder: BINDER_SET_CONTEXT_MGR already set [ 2431.798522][T26745] binder: 26744:26745 ioctl 4018620d 200000004a80 returned -16 [ 2431.799678][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2431.800706][T26408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2431.965837][T26408] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2432.097093][T16048] usb 10-1: new full-speed USB device number 108 using dummy_hcd [ 2432.276468][T16048] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2432.277008][T16048] usb 10-1: not running at top speed; connect to a high speed hub [ 2432.277965][T16048] usb 10-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 2432.280058][T16048] usb 10-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 2432.280076][T16048] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2432.280089][T16048] usb 10-1: Product: syz [ 2432.280099][T16048] usb 10-1: Manufacturer: syz [ 2432.280108][T16048] usb 10-1: SerialNumber: syz [ 2432.725257][T16048] qmi_wwan 10-1:251.0: probe with driver qmi_wwan failed with error -22 [ 2432.744827][T26408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2432.775141][T16048] usb 10-1: USB disconnect, device number 108 [ 2432.834478][T26408] 8021q: adding VLAN 0 to HW filter on device team0 [ 2432.894213][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 2432.894370][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2432.989053][T13034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2432.995392][T13034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2433.376964][ T5881] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 2434.462117][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 2434.464972][ T5881] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 2434.464996][ T5881] usb 7-1: config 0 has no interface number 0 [ 2434.465038][ T5881] usb 7-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2434.465061][ T5881] usb 7-1: config 0 interface 89 has no altsetting 0 [ 2434.516904][T16048] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 2434.520517][ T5881] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 2434.520545][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.520565][ T5881] usb 7-1: Product: syz [ 2434.520579][ T5881] usb 7-1: Manufacturer: syz [ 2434.520594][ T5881] usb 7-1: SerialNumber: syz [ 2434.525773][ T5881] usb 7-1: config 0 descriptor?? [ 2434.535105][ T5881] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 2434.535146][ T5881] em28xx 7-1:0.89: Video interface 89 found: [ 2435.126153][T25782] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 2435.284483][T25782] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.284524][T25782] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2435.318424][T25782] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2435.318459][T25782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2435.318484][T25782] usb 10-1: SerialNumber: syz [ 2435.479544][T16048] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2435.479574][T16048] usb 9-1: config 0 has no interface number 0 [ 2435.487804][T16048] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2435.487832][T16048] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.487908][T16048] usb 9-1: Product: syz [ 2435.487923][T16048] usb 9-1: Manufacturer: syz [ 2435.487937][T16048] usb 9-1: SerialNumber: syz [ 2435.586638][T16048] usb 9-1: config 0 descriptor?? [ 2435.998349][T16048] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 2436.023168][T25782] usb 10-1: 0:2 : does not exist [ 2436.039921][ T5881] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 2436.233823][T26408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2436.247352][T16048] usb 9-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 2436.247381][T16048] usb 9-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 2436.296816][T25782] usb 10-1: USB disconnect, device number 109 [ 2436.358624][ T5881] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 2436.358652][ T5881] em28xx 7-1:0.89: board has no eeprom [ 2436.416661][ T5881] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 2436.416699][ T5881] em28xx 7-1:0.89: analog set to bulk mode. [ 2436.435021][T21942] em28xx 7-1:0.89: Registering V4L2 extension [ 2436.549857][T25644] udevd[25644]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2436.601847][ T5881] usb 7-1: USB disconnect, device number 86 [ 2436.644610][ T5881] em28xx 7-1:0.89: Disconnecting em28xx [ 2436.762000][T21942] em28xx 7-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 2436.762068][T21942] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 2436.762084][T21942] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 2436.762097][T21942] em28xx 7-1:0.89: No AC97 audio processor [ 2436.931880][T21942] usb 7-1: Decoder not found [ 2436.931899][T21942] em28xx 7-1:0.89: failed to create media graph [ 2436.931929][T21942] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 2437.009804][T21942] em28xx 7-1:0.89: Registering snapshot button... [ 2437.138885][T26830] binder: BINDER_SET_CONTEXT_MGR already set [ 2437.138904][T26830] binder: 26829:26830 ioctl 4018620d 200000004a80 returned -16 [ 2437.400203][T26840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5743'. [ 2437.400872][T26840] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5743'. [ 2437.400910][T26840] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5743'. [ 2437.401539][T26840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5743'. [ 2437.426368][T25717] usb 10-1: new full-speed USB device number 110 using dummy_hcd [ 2437.476868][T26840] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5743'. [ 2437.562868][T21942] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input67 [ 2437.613927][T25717] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2437.614654][T25717] usb 10-1: not running at top speed; connect to a high speed hub [ 2437.637810][T25717] usb 10-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 2437.641885][T25717] usb 10-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00 [ 2437.641910][T25717] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2437.641931][T25717] usb 10-1: Product: syz [ 2437.641945][T25717] usb 10-1: Manufacturer: syz [ 2437.641959][T25717] usb 10-1: SerialNumber: syz [ 2437.758461][T26408] veth0_vlan: entered promiscuous mode [ 2437.833557][T26408] veth1_vlan: entered promiscuous mode [ 2437.960705][T26408] veth0_macvtap: entered promiscuous mode [ 2437.998911][T26408] veth1_macvtap: entered promiscuous mode [ 2438.018374][T25717] qmi_wwan 10-1:251.0: probe with driver qmi_wwan failed with error -22 [ 2438.050825][T26408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2438.062729][T25717] usb 10-1: USB disconnect, device number 110 [ 2438.089230][T21942] em28xx 7-1:0.89: Remote control support is not available for this card. [ 2438.089304][ T5881] em28xx 7-1:0.89: Closing input extension [ 2438.119124][T26408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2438.135833][ T5881] em28xx 7-1:0.89: Deregistering snapshot button [ 2438.201440][T23898] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.201817][T23898] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.224996][T23898] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2438.271453][T23898] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2439.539817][T23898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2439.539837][T23898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.735173][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2439.735198][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2439.771832][ T5881] em28xx 7-1:0.89: Freeing device [ 2439.986130][T21942] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 2440.138795][T21942] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2440.138822][T21942] usb 10-1: config 0 has no interface number 0 [ 2440.146207][ T5881] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 2440.146460][T21942] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2440.146485][T21942] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2440.146504][T21942] usb 10-1: Product: syz [ 2440.146518][T21942] usb 10-1: Manufacturer: syz [ 2440.146533][T21942] usb 10-1: SerialNumber: syz [ 2440.207929][T21942] usb 10-1: config 0 descriptor?? [ 2440.296164][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 2440.359791][ T5881] usb 7-1: device descriptor read/all, error -71 [ 2440.432041][T21942] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 2440.577750][T26872] openvswitch: netlink: Message has 1 unknown bytes. [ 2440.577773][T26872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2441.393766][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2441.463854][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2441.482640][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2441.506182][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2441.516410][T25782] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 2441.517718][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2441.686297][T25782] usb 6-1: Using ep0 maxpacket: 8 [ 2441.690610][T25782] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2441.690640][T25782] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2441.690653][T25782] usb 6-1: Product: syz [ 2441.690663][T25782] usb 6-1: Manufacturer: syz [ 2441.690672][T25782] usb 6-1: SerialNumber: syz [ 2441.741567][T25782] usb 6-1: config 0 descriptor?? [ 2441.782218][T25782] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2441.986366][T26889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5761'. [ 2442.385592][ T37] audit: type=1326 audit(1889456172.840:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26893 comm="syz.7.5764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9484dc819 code=0x0 [ 2442.433095][T25782] gspca_zc3xx: reg_r err -71 [ 2442.433167][T25782] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2442.460561][T25782] usb 6-1: USB disconnect, device number 69 [ 2442.492481][T25644] udevd[25644]: setting mode of /dev/bus/usb/006/069 to 020664 failed: No such file or directory [ 2442.492615][T25644] udevd[25644]: setting owner of /dev/bus/usb/006/069 to uid=0, gid=0 failed: No such file or directory [ 2442.682867][T16979] syz_tun (unregistering): left allmulticast mode [ 2442.906212][T13257] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 2443.072447][T13257] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2443.072473][T13257] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 2443.072536][T13257] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 2443.072560][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2443.135063][T13257] usb 7-1: config 0 descriptor?? [ 2443.453436][T13257] Bluetooth: Can't get state to change to load ram patch err [ 2443.453457][T13257] Bluetooth: Loading patch file failed [ 2443.453497][T13257] ath3k 7-1:0.0: probe with driver ath3k failed with error -32 [ 2443.625446][T13034] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2443.697046][ T5836] Bluetooth: hci2: command tx timeout [ 2443.843230][ T10] usb 7-1: USB disconnect, device number 89 [ 2443.976353][T13257] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 2444.128117][T13257] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2444.128143][T13257] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2444.129317][T13257] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2444.129341][T13257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2444.129363][T13257] usb 6-1: SerialNumber: syz [ 2444.347868][T13034] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2444.478017][T13257] usb 6-1: 0:2 : does not exist [ 2444.541260][T13257] usb 6-1: USB disconnect, device number 70 [ 2444.653834][T25644] udevd[25644]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2445.064338][T26883] chnl_net:caif_netlink_parms(): no params data found [ 2445.293171][T26925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5776'. [ 2445.454846][T13034] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2445.646324][ T5881] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 2445.786294][ T5836] Bluetooth: hci2: command tx timeout [ 2445.800940][ T5881] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 2445.801005][ T5881] usb 7-1: config 0 has no interface number 0 [ 2445.814213][ T5881] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2445.814304][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2445.814369][ T5881] usb 7-1: Product: syz [ 2445.814413][ T5881] usb 7-1: Manufacturer: syz [ 2445.814458][ T5881] usb 7-1: SerialNumber: syz [ 2445.858586][ T5881] usb 7-1: config 0 descriptor?? [ 2445.913196][T13034] netdevsim netdevsim8  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2445.936343][T13257] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 2446.070570][ T5881] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 2446.110363][T13257] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2446.110392][T13257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2446.110410][T13257] usb 6-1: Product: syz [ 2446.110424][T13257] usb 6-1: Manufacturer: syz [ 2446.110445][T13257] usb 6-1: SerialNumber: syz [ 2446.195513][T26883] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.195698][T26883] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.195925][T26883] bridge_slave_0: entered allmulticast mode [ 2446.205558][T26883] bridge_slave_0: entered promiscuous mode [ 2446.217348][T26883] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.217533][T26883] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.217847][T26883] bridge_slave_1: entered allmulticast mode [ 2446.224762][T26883] bridge_slave_1: entered promiscuous mode [ 2446.352935][T26883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2446.409170][T26883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2446.505061][T26883] team0: Port device team_slave_0 added [ 2446.516893][T26883] team0: Port device team_slave_1 added [ 2446.590603][T13257] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2446.590669][T13257] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2446.595546][T26883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2446.595560][T26883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2446.595585][T26883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2446.604806][T26883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2446.604821][T26883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2446.604901][T26883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2446.882551][T26883] hsr_slave_0: entered promiscuous mode [ 2446.886594][T26883] hsr_slave_1: entered promiscuous mode [ 2447.856101][ T5836] Bluetooth: hci2: command tx timeout [ 2449.026938][T13034] bridge_slave_1: left allmulticast mode [ 2449.026967][T13034] bridge_slave_1: left promiscuous mode [ 2449.027439][T13034] bridge0: port 2(bridge_slave_1) entered disabled state [ 2449.030638][T13257] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 2449.030690][T13257] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 2449.030711][T13257] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2449.097484][T13257] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2449.143316][T13257] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 2449.159313][T13034] bridge_slave_0: left allmulticast mode [ 2449.159331][T13034] bridge_slave_0: left promiscuous mode [ 2449.159521][T13034] bridge0: port 1(bridge_slave_0) entered disabled state [ 2449.184983][T13257] usb 6-1: USB disconnect, device number 71 [ 2449.958664][ T5836] Bluetooth: hci2: command tx timeout [ 2450.039639][T13034] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 2450.276656][T13034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2450.346642][T13034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2450.369991][T13034] bond0 (unregistering): Released all slaves [ 2450.382260][T13034] bond1 (unregistering): Released all slaves [ 2450.869310][T13034] IPVS: stopping backup sync thread 19807 ... [ 2451.236146][T14442] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 2451.398746][T14442] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2451.398782][T14442] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2451.398808][T14442] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2451.401791][T14442] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2451.401819][T14442] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2451.401839][T14442] usb 6-1: Product: syz [ 2451.401853][T14442] usb 6-1: Manufacturer: syz [ 2451.401867][T14442] usb 6-1: SerialNumber: syz [ 2451.473409][T14442] usb 6-1: config 0 descriptor?? [ 2451.474606][T26996] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2451.569112][T14442] usb 6-1: selecting invalid altsetting 0 [ 2451.685680][T26996] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5805'. [ 2451.730739][T26996] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5805'. [ 2451.730758][T26996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5805'. [ 2451.775193][ T10] usb 6-1: USB disconnect, device number 72 [ 2452.910821][ T5836] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 2452.987638][T13034] hsr_slave_0: left promiscuous mode [ 2453.027585][T13034] hsr_slave_1: left promiscuous mode [ 2453.038920][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2453.039009][T13034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2453.067008][T13034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2453.067037][T13034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2453.147398][T13034] veth1_macvtap: left promiscuous mode [ 2453.147463][T13034] veth0_macvtap: left promiscuous mode [ 2453.147641][T13034] veth1_vlan: left promiscuous mode [ 2453.147742][T13034] veth0_vlan: left promiscuous mode [ 2453.997384][T13034] team0 (unregistering): Port device team_slave_1 removed [ 2454.057546][T13034] team0 (unregistering): Port device team_slave_0 removed [ 2454.570125][T27024] bridge0: port 2(bridge_slave_1) entered disabled state [ 2454.589839][T27024] bridge0: port 1(bridge_slave_0) entered disabled state [ 2455.120762][T27024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2455.134917][T27024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2456.406282][T16231] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.412833][T16231] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.540057][T16231] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.575966][T16231] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.797348][T25717] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 2456.926166][T25717] usb 6-1: device descriptor read/64, error -71 [ 2457.218752][T25717] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 2457.346133][T25717] usb 6-1: device descriptor read/64, error -71 [ 2457.415025][T26883] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2457.471569][T25717] usb usb6-port1: attempt power cycle [ 2457.525265][T26883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2457.534488][T26883] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2457.634815][T26883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2457.635665][T26883] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2457.859008][T25717] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 2457.879293][T25717] usb 6-1: device descriptor read/8, error -71 [ 2457.897961][T26883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2457.937161][T26883] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2457.980447][T26883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2458.015801][T13034] IPVS: stop unused estimator thread 0... [ 2458.116130][T25717] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 2458.136987][T25717] usb 6-1: device descriptor read/8, error -71 [ 2458.188014][T26883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2458.214856][T26883] 8021q: adding VLAN 0 to HW filter on device team0 [ 2458.233074][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 2458.233186][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2458.254390][T25717] usb usb6-port1: unable to enumerate USB device [ 2458.290345][T12752] bridge0: port 2(bridge_slave_1) entered blocking state [ 2458.290430][T12752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2458.751707][T27075] bond2: Removing last ns target with arp_interval on [ 2458.778175][T26883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2459.215669][T26883] veth0_vlan: entered promiscuous mode [ 2459.237972][T26883] veth1_vlan: entered promiscuous mode [ 2459.301062][T26883] veth0_macvtap: entered promiscuous mode [ 2459.323838][T26883] veth1_macvtap: entered promiscuous mode [ 2459.357528][T26883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2459.389681][T26883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2459.408618][T12752] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.408662][T12752] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.408697][T12752] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2459.408731][T12752] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2460.509720][ T3604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2460.509743][ T3604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2460.703776][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2460.703793][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2461.089637][T27102] binder: 27101:27102 ioctl 4018620d 0 returned -22 [ 2462.616275][T13257] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2462.769117][T13257] usb 6-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 2462.769148][T13257] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2462.770549][T13257] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2462.770578][T13257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2462.770601][T13257] usb 6-1: SerialNumber: syz [ 2463.039108][T13257] usb 6-1: 0:2 : does not exist [ 2463.086744][T13257] usb 6-1: USB disconnect, device number 77 [ 2463.115083][T25639] udevd[25639]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2463.593367][ T37] audit: type=1326 audit(1889456194.050:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27125 comm="syz.5.5838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47b44bc819 code=0x0 [ 2464.291440][T27131] binder: 27130:27131 ioctl 4018620d 0 returned -22 [ 2464.669610][T27140] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5842'. [ 2466.733600][T27162] binder: 27161:27162 ioctl c0306201 0 returned -14 [ 2467.381120][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.381190][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.086400][ T5831] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 2468.240849][ T5831] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2468.240879][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2468.240897][ T5831] usb 6-1: Product: syz [ 2468.240914][ T5831] usb 6-1: Manufacturer: syz [ 2468.240923][ T5831] usb 6-1: SerialNumber: syz [ 2468.245057][ T5831] usb 6-1: config 0 descriptor?? [ 2468.900607][ T5831] usb 6-1: Firmware version (0.0) predates our first public release. [ 2468.900626][ T5831] usb 6-1: Please update to version 0.2 or newer [ 2468.991258][ T5831] usb 6-1: USB disconnect, device number 78 [ 2469.638840][T27187] ipvlan2: entered promiscuous mode [ 2469.749824][T27190] binder: 27189:27190 ioctl c0306201 0 returned -14 [ 2470.382556][ T37] audit: type=1326 audit(1889456200.840:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27213 comm="syz.6.5870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897dc4c819 code=0x0 [ 2471.272911][T27228] binder: 27227:27228 ioctl c0306201 0 returned -14 [ 2472.296200][ T5831] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 2472.450498][ T5831] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 2472.450519][ T5831] usb 6-1: config 0 has no interface number 0 [ 2472.450546][ T5831] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2472.450562][ T5831] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2472.453027][ T5831] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2472.453057][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2472.453072][ T5831] usb 6-1: Product: syz [ 2472.453083][ T5831] usb 6-1: Manufacturer: syz [ 2472.453094][ T5831] usb 6-1: SerialNumber: syz [ 2472.532442][ T5831] usb 6-1: config 0 descriptor?? [ 2472.534632][T27238] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2472.549569][ T5831] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2472.569802][ T5831] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2472.744640][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 2473.048936][ T5831] usb 6-1: USB disconnect, device number 79 [ 2473.070122][ T5831] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2473.070936][ T5831] cyberjack 6-1:0.69: device disconnected [ 2473.197540][ T37] audit: type=1326 audit(1889456203.650:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27250 comm="syz.9.5885" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ee624c819 code=0x0 [ 2475.157438][T27284] netlink: 'syz.5.5896': attribute type 1 has an invalid length. [ 2475.546155][T14442] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 2475.717040][T14442] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 2475.717068][T14442] usb 6-1: config 0 has no interface number 0 [ 2475.717111][T14442] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 2475.717155][T14442] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2475.720228][T14442] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2475.720260][T14442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2475.720274][T14442] usb 6-1: Product: syz [ 2475.720283][T14442] usb 6-1: Manufacturer: syz [ 2475.720293][T14442] usb 6-1: SerialNumber: syz [ 2475.795867][T14442] usb 6-1: config 0 descriptor?? [ 2475.804667][T27286] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2475.817534][T14442] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 2475.839161][T14442] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 2476.011929][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 2476.312221][T25360] usb 6-1: USB disconnect, device number 80 [ 2476.339518][T25360] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 2476.344865][T25360] cyberjack 6-1:0.69: device disconnected [ 2478.048891][T27309] netlink: 'syz.6.5907': attribute type 1 has an invalid length. [ 2478.086183][ T5820] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 2478.236124][ T5820] usb 6-1: Using ep0 maxpacket: 16 [ 2478.239245][ T5820] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 2478.239271][ T5820] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2478.239290][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2478.239309][ T5820] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2478.239328][ T5820] usb 6-1: config 0 has no interface number 0 [ 2478.239370][ T5820] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2478.239395][ T5820] usb 6-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2478.239420][ T5820] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2478.243632][ T5820] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2478.243661][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2478.243685][ T5820] usb 6-1: Product: syz [ 2478.243701][ T5820] usb 6-1: Manufacturer: syz [ 2478.243719][ T5820] usb 6-1: SerialNumber: syz [ 2478.356538][ T5820] usb 6-1: config 0 descriptor?? [ 2479.097209][ T5836] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 2479.264159][T27323] bridge0: port 2(bridge_slave_1) entered disabled state [ 2479.265047][T27323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2479.744020][T27323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2479.764746][T27323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2480.849359][T25360] usb 6-1: USB disconnect, device number 81 [ 2480.919706][ T68] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.921147][ T68] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.921242][ T68] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2480.921279][ T68] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2481.023003][T27338] netlink: 'syz.9.5918': attribute type 1 has an invalid length. [ 2481.252823][ T37] audit: type=1326 audit(1889456211.710:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27346 comm="syz.9.5922" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f8ee6246597 code=0x0 [ 2481.346140][T25360] usb 6-1: new low-speed USB device number 82 using dummy_hcd [ 2481.500933][T25360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2481.500967][T25360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2481.501002][T25360] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2481.501025][T25360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.545867][T25360] usb 6-1: config 0 descriptor?? [ 2481.995460][T25360] aquacomputer_d5next 0003:0C70:F0B6.0025: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 2482.223725][T27357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5926'. [ 2482.224283][T27357] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5926'. [ 2482.224309][T27357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5926'. [ 2482.224822][T27357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5926'. [ 2482.225883][T27357] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5926'. [ 2482.692012][T27367] netlink: 'syz.7.5930': attribute type 1 has an invalid length. [ 2484.016506][T25360] usb 6-1: reset low-speed USB device number 82 using dummy_hcd [ 2484.743001][T27373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.743734][T27373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2484.955397][T27373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.968924][T27373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2484.993456][T27373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2484.994118][T27373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2485.018831][T25360] usbhid 6-1:0.0: can't add hid device: -71 [ 2485.018939][T25360] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2485.084478][T14442] usb 6-1: USB disconnect, device number 82 [ 2485.251174][T27381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5937'. [ 2485.251830][T27381] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5937'. [ 2485.251906][T27381] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5937'. [ 2485.252425][T27381] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5937'. [ 2485.253421][T27381] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5937'. [ 2485.578053][T27390] netlink: 'syz.8.5941': attribute type 1 has an invalid length. [ 2485.926170][T27092] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 2486.080617][T27092] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2486.080649][T27092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2486.080669][T27092] usb 6-1: Product: syz [ 2486.080683][T27092] usb 6-1: Manufacturer: syz [ 2486.080697][T27092] usb 6-1: SerialNumber: syz [ 2486.531189][T27092] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2486.531257][T27092] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2488.564305][T27092] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPIPE [ 2488.564354][T27092] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPIPE [ 2488.564370][T27092] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2488.565135][T27092] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2488.618041][T27092] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 2488.625496][T27092] usb 6-1: USB disconnect, device number 83 [ 2488.876218][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5949'. [ 2488.876856][T27406] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5949'. [ 2488.876889][T27406] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5949'. [ 2488.877451][T27406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5949'. [ 2488.878568][T27406] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5949'. [ 2489.413239][T27419] netlink: 'syz.5.5955': attribute type 1 has an invalid length. [ 2489.886116][ T5820] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 2489.936246][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 2490.054644][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2490.054673][ T5820] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2490.054723][ T5820] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2490.054748][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2490.103863][ T5820] usb 6-1: config 0 descriptor?? [ 2490.132867][ T5820] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2490.132918][ T5820] dvb-usb: bulk message failed: -22 (3/0) [ 2490.167268][ T5820] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2490.168518][ T5820] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2490.168585][ T5820] usb 6-1: media controller created [ 2490.170802][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2490.253896][ T5820] dvb-usb: bulk message failed: -22 (6/0) [ 2490.253987][ T5820] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2490.273137][ T5820] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input68 [ 2490.292430][ T5820] dvb-usb: schedule remote query interval to 150 msecs. [ 2490.292479][ T5820] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2490.339598][T27092] usb 6-1: USB disconnect, device number 84 [ 2490.497550][T27092] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2491.196181][ T5820] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 2491.348679][ T5820] usb 6-1: config 0 has no interfaces? [ 2491.351503][ T5820] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2491.351534][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2491.351549][ T5820] usb 6-1: Product: syz [ 2491.351559][ T5820] usb 6-1: Manufacturer: syz [ 2491.351569][ T5820] usb 6-1: SerialNumber: syz [ 2491.355504][ T5820] usb 6-1: config 0 descriptor?? [ 2491.572650][T14442] usb 6-1: USB disconnect, device number 85 [ 2491.886243][T14442] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 2492.038242][T14442] usb 6-1: config 0 has no interfaces? [ 2492.040899][T14442] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2492.040929][T14442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2492.040944][T14442] usb 6-1: Product: syz [ 2492.040954][T14442] usb 6-1: Manufacturer: syz [ 2492.040965][T14442] usb 6-1: SerialNumber: syz [ 2492.059350][T14442] usb 6-1: config 0 descriptor?? [ 2492.297369][ T10] usb 6-1: USB disconnect, device number 86 [ 2492.314925][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5961'. [ 2492.315534][T27433] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5961'. [ 2492.315573][T27433] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5961'. [ 2492.343605][T27433] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5961'. [ 2492.345517][T27433] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5961'. [ 2492.811605][T27442] bond1: Removing last ns target with arp_interval on [ 2493.898438][T27452] netlink: 'syz.5.5967': attribute type 1 has an invalid length. [ 2494.376136][T13257] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 2494.529673][T13257] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2494.529703][T13257] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2494.529742][T13257] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2494.529759][T13257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2494.534118][T13257] usb 6-1: config 0 descriptor?? [ 2494.583976][T13257] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2494.584027][T13257] dvb-usb: bulk message failed: -22 (3/0) [ 2494.615001][T13257] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2494.620529][T13257] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2494.620680][T13257] usb 6-1: media controller created [ 2494.625135][T13257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2494.698511][T13257] dvb-usb: bulk message failed: -22 (6/0) [ 2494.698594][T13257] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2494.739683][T13257] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input69 [ 2494.744342][T13257] dvb-usb: schedule remote query interval to 150 msecs. [ 2494.744365][T13257] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2494.794468][T13257] usb 6-1: USB disconnect, device number 87 [ 2494.913549][T13257] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2495.481862][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5972'. [ 2495.482412][T27462] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5972'. [ 2495.482444][T27462] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5972'. [ 2495.482857][T27462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5972'. [ 2495.483737][T27462] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5972'. [ 2496.026237][T14442] usb 6-1: new low-speed USB device number 88 using dummy_hcd [ 2496.188304][T14442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2496.188338][T14442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2496.188373][T14442] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2496.188398][T14442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2496.193737][T14442] usb 6-1: config 0 descriptor?? [ 2496.809782][T14442] hid (null): invalid report_size 37528 [ 2496.830972][T14442] aquacomputer_d5next 0003:0C70:F0B6.0026: collection stack underflow [ 2496.830994][T14442] aquacomputer_d5next 0003:0C70:F0B6.0026: item 0 0 0 12 parsing failed [ 2496.831503][T14442] aquacomputer_d5next 0003:0C70:F0B6.0026: probe with driver aquacomputer_d5next failed with error -22 [ 2497.017514][T27467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2497.018121][T27467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2497.025779][T27467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2497.032235][T27467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2497.060078][T25360] usb 6-1: USB disconnect, device number 88 [ 2497.561921][T27475] netlink: 'syz.7.5978': attribute type 1 has an invalid length. [ 2497.938204][T25360] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 2497.941179][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5984'. [ 2497.941771][T27488] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5984'. [ 2497.941794][T27488] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5984'. [ 2497.942253][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5984'. [ 2497.943141][T27488] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5984'. [ 2498.094737][T25360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2498.094760][T25360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2498.094784][T25360] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2498.094799][T25360] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2498.150189][T25360] usb 6-1: config 0 descriptor?? [ 2498.188914][T21942] usb 10-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2498.188988][T21942] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 2498.189087][ T5881] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 2498.189134][ T5881] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -2 [ 2498.325911][T21942] usb 10-1: USB disconnect, device number 111 [ 2498.328871][ T5881] usb 7-1: USB disconnect, device number 90 [ 2498.493724][T16048] usb 9-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 2498.493875][T16048] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 2498.626788][T25360] aquacomputer_d5next 0003:0C70:F0B6.0027: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 2498.746221][ T5881] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 2498.773797][T16048] usb 9-1: USB disconnect, device number 127 [ 2498.896594][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 2498.900046][ T5881] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 2498.900072][ T5881] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2498.900092][ T5881] usb 7-1: config 0 has no interface number 0 [ 2498.900136][ T5881] usb 7-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2498.900165][ T5881] usb 7-1: config 0 interface 12 has no altsetting 0 [ 2498.923550][ T5881] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2498.923618][ T5881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2498.923682][ T5881] usb 7-1: Product: syz [ 2498.923735][ T5881] usb 7-1: Manufacturer: syz [ 2498.923766][ T5881] usb 7-1: SerialNumber: syz [ 2499.005227][ T5881] usb 7-1: config 0 descriptor?? [ 2499.080779][ T5881] usb 7-1: can't set config #0, error -71 [ 2499.090942][ T5881] usb 7-1: USB disconnect, device number 91 [ 2499.188682][T27500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2499.194479][T27500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2499.212705][T27500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2499.224934][T27500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2499.359411][T13257] usb 6-1: USB disconnect, device number 89 [ 2499.396452][ T5820] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 2499.556387][ T5820] usb 9-1: Using ep0 maxpacket: 16 [ 2499.561434][ T5820] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2499.562698][ T5820] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2499.562724][ T5820] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2499.562744][ T5820] usb 9-1: Manufacturer: syz [ 2499.571942][T14442] usb 7-1: new low-speed USB device number 92 using dummy_hcd [ 2499.622536][ T5820] usb 9-1: config 0 descriptor?? [ 2499.770808][T14442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2499.770856][T14442] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2499.770895][T14442] usb 7-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 2499.770938][T14442] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2499.793299][T27506] netlink: 'syz.9.5991': attribute type 1 has an invalid length. [ 2499.815403][T14442] usb 7-1: config 0 descriptor?? [ 2500.387275][ T5820] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2500.466129][T14442] hid (null): invalid report_size 37528 [ 2500.496283][T14442] aquacomputer_d5next 0003:0C70:F0B6.0028: collection stack underflow [ 2500.496315][T14442] aquacomputer_d5next 0003:0C70:F0B6.0028: item 0 0 0 12 parsing failed [ 2500.497239][T14442] aquacomputer_d5next 0003:0C70:F0B6.0028: probe with driver aquacomputer_d5next failed with error -22 [ 2500.536131][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 2500.539823][ T5820] usb 6-1: config index 0 descriptor too short (expected 45245, got 27) [ 2500.539847][ T5820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2500.539866][ T5820] usb 6-1: config 0 has no interfaces? [ 2500.578201][ T5820] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 2500.578229][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2500.578249][ T5820] usb 6-1: Product: syz [ 2500.578263][ T5820] usb 6-1: Manufacturer: syz [ 2500.578277][ T5820] usb 6-1: SerialNumber: syz [ 2500.624505][ T5820] usb 6-1: config 0 descriptor?? [ 2500.642997][T16048] usb 9-1: USB disconnect, device number 2 [ 2500.683279][T27504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2500.684324][T27504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2500.709299][T27504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2500.710193][T27504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2500.736363][T25360] usb 7-1: USB disconnect, device number 92 [ 2500.833409][ T5881] usb 6-1: USB disconnect, device number 90 [ 2502.403247][T27545] __nla_validate_parse: 5 callbacks suppressed [ 2502.403269][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2502.428064][T27545] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2502.428104][T27545] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2502.428786][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2502.432751][T27545] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6006'. [ 2503.036229][ T5881] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 2503.186102][ T5881] usb 7-1: Using ep0 maxpacket: 16 [ 2503.189578][ T5881] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2503.199950][T25360] usb 10-1: new full-speed USB device number 112 using dummy_hcd [ 2503.229897][ T5881] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2503.229919][ T5881] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2503.229934][ T5881] usb 7-1: Manufacturer: syz [ 2503.233237][ T5881] usb 7-1: config 0 descriptor?? [ 2503.348118][T25360] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2503.348163][T25360] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2503.348184][T25360] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2503.389706][T25360] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2503.389737][T25360] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2503.389760][T25360] usb 10-1: Product: syz [ 2503.389776][T25360] usb 10-1: Manufacturer: syz [ 2503.389793][T25360] usb 10-1: SerialNumber: syz [ 2503.451000][T25360] usb 10-1: config 0 descriptor?? [ 2503.465685][T27552] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 2503.523463][T25360] usb 10-1: selecting invalid altsetting 0 [ 2503.625475][T27558] netlink: 'syz.8.6012': attribute type 1 has an invalid length. [ 2503.713093][T27552] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6009'. [ 2503.780272][T27561] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6009'. [ 2503.780300][T27561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6009'. [ 2503.937294][T25360] usb 10-1: USB disconnect, device number 112 [ 2504.118024][T25639] udevd[25639]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2504.330443][ T5881] usb 7-1: USB disconnect, device number 93 [ 2504.916285][T27575] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6017'. [ 2504.917032][T27575] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6017'. [ 2505.056586][T14442] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 2505.214478][T14442] usb 7-1: Using ep0 maxpacket: 32 [ 2505.224627][T14442] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 2505.224653][T14442] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2505.224672][T14442] usb 7-1: config 0 has no interface number 0 [ 2505.224713][T14442] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2505.339264][T14442] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2505.339294][T14442] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2505.339314][T14442] usb 7-1: Product: syz [ 2505.339327][T14442] usb 7-1: Manufacturer: syz [ 2505.339389][T14442] usb 7-1: SerialNumber: syz [ 2505.387569][T14442] usb 7-1: config 0 descriptor?? [ 2505.406380][T14442] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 2505.406432][T14442] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 2505.727292][T14442] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 2505.727683][T14442] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 2505.776240][T14442] usb 7-1: USB disconnect, device number 94 [ 2506.514093][T24034] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 2506.715929][T27592] netlink: 'syz.8.6023': attribute type 1 has an invalid length. [ 2507.276653][T27606] netlink: 'syz.8.6028': attribute type 25 has an invalid length. [ 2507.277020][ T5881] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2507.440027][ T5881] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2507.440048][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2507.440061][ T5881] usb 6-1: Product: syz [ 2507.440070][ T5881] usb 6-1: Manufacturer: syz [ 2507.440080][ T5881] usb 6-1: SerialNumber: syz [ 2507.477417][ T5881] usb 6-1: config 0 descriptor?? [ 2507.566100][T25360] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 2507.584525][T27609] __nla_validate_parse: 6 callbacks suppressed [ 2507.584556][T27609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6030'. [ 2507.605179][T27609] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6030'. [ 2507.605217][T27609] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6030'. [ 2507.632759][T27609] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6030'. [ 2507.733814][T27610] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6030'. [ 2507.751659][T25360] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2507.751677][T25360] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2507.780760][T25360] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2507.780780][T25360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2507.780793][T25360] usb 7-1: SerialNumber: syz [ 2507.904095][ T5881] usb 6-1: Firmware version (0.0) predates our first public release. [ 2507.904198][ T5881] usb 6-1: Please update to version 0.2 or newer [ 2508.110704][T25360] usb 7-1: 0:2 : does not exist [ 2508.306334][T25360] usb 7-1: USB disconnect, device number 95 [ 2508.360180][ T5881] usb 6-1: USB disconnect, device number 91 [ 2508.583187][T25644] udevd[25644]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2509.446221][ T5831] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 2509.606202][ T5831] usb 7-1: Using ep0 maxpacket: 32 [ 2509.608226][ T5831] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 2509.608252][ T5831] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2509.608271][ T5831] usb 7-1: config 0 has no interface number 0 [ 2509.608300][ T5831] usb 7-1: too many endpoints for config 0 interface 89 altsetting 189: 176, using maximum allowed: 30 [ 2509.608338][ T5831] usb 7-1: config 0 interface 89 altsetting 189 has 0 endpoint descriptors, different from the interface descriptor's value: 176 [ 2509.608363][ T5831] usb 7-1: config 0 interface 89 has no altsetting 0 [ 2509.610918][ T5831] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 2509.610936][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2509.610949][ T5831] usb 7-1: Product: syz [ 2509.610959][ T5831] usb 7-1: Manufacturer: syz [ 2509.610968][ T5831] usb 7-1: SerialNumber: syz [ 2509.614877][ T5831] usb 7-1: config 0 descriptor?? [ 2509.913850][ T5831] usb 7-1: USB disconnect, device number 96 [ 2512.806107][ T5881] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2512.964121][ T5881] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 2512.964146][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2512.964162][ T5881] usb 6-1: Product: syz [ 2512.964173][ T5881] usb 6-1: Manufacturer: syz [ 2512.964185][ T5881] usb 6-1: SerialNumber: syz [ 2513.021979][ T5881] usb 6-1: config 0 descriptor?? [ 2513.504241][ T5881] usb 6-1: Firmware version (0.0) predates our first public release. [ 2513.504260][ T5881] usb 6-1: Please update to version 0.2 or newer [ 2513.775164][ T5881] usb 6-1: USB disconnect, device number 92 [ 2514.375196][T27660] bond1: Removing last ns target with arp_interval on [ 2516.147621][ T5831] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 2516.315165][ T5831] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 2516.315198][ T5831] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 2516.315225][ T5831] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2516.370274][ T5831] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2516.370305][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2516.370327][ T5831] usb 6-1: Product: syz [ 2516.370342][ T5831] usb 6-1: Manufacturer: syz [ 2516.370356][ T5831] usb 6-1: SerialNumber: syz [ 2516.417552][ T5831] usb 6-1: config 0 descriptor?? [ 2516.418297][T27689] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2516.441006][ T5831] usb 6-1: selecting invalid altsetting 0 [ 2516.654712][T27689] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6057'. [ 2516.682480][T27689] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6057'. [ 2516.682499][T27689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6057'. [ 2516.725824][ T5881] usb 6-1: USB disconnect, device number 93 [ 2516.803986][T27704] netlink: 'syz.9.6055': attribute type 5 has an invalid length. [ 2517.136392][T21942] usb 10-1: new full-speed USB device number 113 using dummy_hcd [ 2517.311818][T21942] usb 10-1: device descriptor read/64, error -71 [ 2517.596313][T21942] usb 10-1: new full-speed USB device number 114 using dummy_hcd [ 2517.729299][T21942] usb 10-1: device descriptor read/64, error -71 [ 2517.836429][T21942] usb usb10-port1: attempt power cycle [ 2518.226147][T21942] usb 10-1: new full-speed USB device number 115 using dummy_hcd [ 2518.252574][T21942] usb 10-1: device descriptor read/8, error -71 [ 2518.486302][T21942] usb 10-1: new full-speed USB device number 116 using dummy_hcd [ 2518.515757][T21942] usb 10-1: device descriptor read/8, error -71 [ 2518.617979][T21942] usb usb10-port1: unable to enumerate USB device [ 2519.514516][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2519.598898][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2519.609152][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2519.617495][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2519.623352][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2520.446124][ T5881] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 2520.608239][ T5881] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2520.608307][ T5881] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2520.615359][ T5881] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2520.615386][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2520.615405][ T5881] usb 9-1: Product: syz [ 2520.615419][ T5881] usb 9-1: Manufacturer: syz [ 2520.615433][ T5881] usb 9-1: SerialNumber: syz [ 2520.699329][ T5881] cdc_ncm 9-1:1.0: skipping garbage [ 2520.699358][ T5881] usb 9-1: selecting invalid altsetting 1 [ 2521.109768][ T5881] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 2521.109821][ T5881] cdc_ncm 9-1:1.0: bind() failure [ 2521.160192][ T5881] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 2521.160221][ T5881] cdc_ncm 9-1:1.1: bind() failure [ 2521.205190][ T5881] usb 9-1: USB disconnect, device number 3 [ 2521.356218][ T5820] ================================================================== [ 2521.356230][ T5820] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.356329][ T5820] Read of size 8 at addr ffffc90007581008 by task kworker/1:3/5820 [ 2521.356341][ T5820] [ 2521.356350][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2521.356366][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2521.356376][ T5820] Workqueue: usb_hub_wq hub_event [ 2521.356427][ T5820] Call Trace: [ 2521.356432][ T5820] [ 2521.356438][ T5820] dump_stack_lvl+0xe8/0x150 [ 2521.356464][ T5820] print_address_description+0x55/0x1e0 [ 2521.356489][ T5820] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.356506][ T5820] print_report+0x58/0x70 [ 2521.356525][ T5820] kasan_report+0x117/0x150 [ 2521.356567][ T5820] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.356587][ T5820] __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.356604][ T5820] kcov_remote_start+0x2af/0x710 [ 2521.356670][ T5820] hub_event+0x150/0x4f60 [ 2521.356687][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 2521.356725][ T5820] ? look_up_lock_class+0x57/0x110 [ 2521.356746][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 2521.356766][ T5820] ? lock_acquire+0x106/0x350 [ 2521.356782][ T5820] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2521.356796][ T5820] ? __pfx_hub_event+0x10/0x10 [ 2521.356817][ T5820] ? process_scheduled_works+0xa70/0x1860 [ 2521.356842][ T5820] ? process_scheduled_works+0xa70/0x1860 [ 2521.356863][ T5820] ? process_scheduled_works+0xa70/0x1860 [ 2521.356884][ T5820] process_scheduled_works+0xb5d/0x1860 [ 2521.356916][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 2521.356939][ T5820] ? assign_work+0x3d5/0x5e0 [ 2521.356961][ T5820] worker_thread+0xa53/0xfc0 [ 2521.356983][ T5820] kthread+0x388/0x470 [ 2521.356999][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 2521.357011][ T5820] ? __pfx_kthread+0x10/0x10 [ 2521.357045][ T5820] ret_from_fork+0x514/0xb70 [ 2521.357060][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 2521.357074][ T5820] ? __switch_to+0xc79/0x1410 [ 2521.357095][ T5820] ? __pfx_kthread+0x10/0x10 [ 2521.357112][ T5820] ret_from_fork_asm+0x1a/0x30 [ 2521.357134][ T5820] [ 2521.357139][ T5820] [ 2521.357143][ T5820] The buggy address belongs to a vmalloc virtual mapping [ 2521.357156][ T5820] Memory state around the buggy address: [ 2521.357165][ T5820] ffffc90007580f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2521.357178][ T5820] ffffc90007580f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2521.357188][ T5820] >ffffc90007581000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2521.357196][ T5820] ^ [ 2521.357215][ T5820] ffffc90007581080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2521.357224][ T5820] ffffc90007581100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 2521.357232][ T5820] ================================================================== [ 2521.357318][ T5820] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2521.357328][ T5820] CPU: 1 UID: 0 PID: 5820 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2521.357344][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2521.357354][ T5820] Workqueue: usb_hub_wq hub_event [ 2521.357368][ T5820] Call Trace: [ 2521.357373][ T5820] [ 2521.357378][ T5820] vpanic+0x56c/0xa60 [ 2521.357393][ T5820] ? __pfx_vpanic+0x10/0x10 [ 2521.357409][ T5820] panic+0xc5/0xd0 [ 2521.357422][ T5820] ? __pfx_panic+0x10/0x10 [ 2521.357435][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 2521.357455][ T5820] ? preempt_schedule_thunk+0x16/0x30 [ 2521.357474][ T5820] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.357491][ T5820] check_panic_on_warn+0x89/0xb0 [ 2521.357529][ T5820] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.357545][ T5820] end_report+0x73/0x170 [ 2521.357558][ T5820] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.357577][ T5820] kasan_report+0x128/0x150 [ 2521.357591][ T5820] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.357610][ T5820] __list_del_entry_valid_or_report+0xb5/0x190 [ 2521.357628][ T5820] kcov_remote_start+0x2af/0x710 [ 2521.357650][ T5820] hub_event+0x150/0x4f60 [ 2521.357667][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 2521.357682][ T5820] ? look_up_lock_class+0x57/0x110 [ 2521.357700][ T5820] ? __lock_acquire+0x6b5/0x2cf0 [ 2521.357721][ T5820] ? lock_acquire+0x106/0x350 [ 2521.357736][ T5820] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2521.357751][ T5820] ? __pfx_hub_event+0x10/0x10 [ 2521.357765][ T5820] ? process_scheduled_works+0xa70/0x1860 [ 2521.357788][ T5820] ? process_scheduled_works+0xa70/0x1860 [ 2521.357814][ T5820] ? process_scheduled_works+0xa70/0x1860 [ 2521.357836][ T5820] process_scheduled_works+0xb5d/0x1860 [ 2521.357867][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 2521.357890][ T5820] ? assign_work+0x3d5/0x5e0 [ 2521.357912][ T5820] worker_thread+0xa53/0xfc0 [ 2521.357935][ T5820] kthread+0x388/0x470 [ 2521.357951][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 2521.357963][ T5820] ? __pfx_kthread+0x10/0x10 [ 2521.357998][ T5820] ret_from_fork+0x514/0xb70 [ 2521.358012][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 2521.358026][ T5820] ? __switch_to+0xc79/0x1410 [ 2521.358046][ T5820] ? __pfx_kthread+0x10/0x10 [ 2521.358063][ T5820] ret_from_fork_asm+0x1a/0x30 [ 2521.358085][ T5820] [ 2521.358796][ T5820] Kernel Offset: disabled