last executing test programs: 8.474372736s ago: executing program 1 (id=1320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0xe, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0xacecc787ffad8d56, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x0, 0x1, {0x0, 0x4, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x80000000, 0x3, 0xfffffffd, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r8, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) 8.368315638s ago: executing program 3 (id=1321): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0, 0x0, {0x2b00}}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 8.326016802s ago: executing program 3 (id=1322): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r3, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005"], 0x66) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x0, {0x0, 0x9416}, {0x350, 0xfffffffd, 0x10000000}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x8, 0x4) syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 8.250257415s ago: executing program 2 (id=1323): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) r0 = semget$private(0x0, 0x7, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x40000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x4) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x8, 0x2, 0x2, "4a5ae5f6f99826beb34789a56a62b5b92b9010128130e6d352b97b35207cf97d", 0x43353039}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000080)={0x2, 0x2, 0x16f, 0x7fff, 'syz1\x00', 0x20}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, &(0x7f0000000040)) 8.167027424s ago: executing program 2 (id=1324): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}) 8.071550069s ago: executing program 2 (id=1325): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xc000, @mcast1, 0x9}, 0x1c) unshare(0x800) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r1, 0x7, r0, &(0x7f0000000080)={r0, r0, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_usb_connect(0x0, 0x79b, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0xf, 0xae, 0x40, 0x4dd, 0x8003, 0x3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x789, 0x4, 0x0, 0xf7, 0x90, 0xc, [{{0x9, 0x4, 0x6e, 0x2, 0xa, 0xff, 0x2, 0x71, 0x80, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, ' '}, {0x5, 0x24, 0x0, 0x1dea}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x80}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x2, 0x6}, @obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0xe3, 0x24, 0x13, 0x4, "4580faa1198928e48549495470edaa66003486d8022ead5d24e34b3004a43bf0cb023bf7e570e341d1dead29d154f2fb69a66449b2a9324924183fcebdc1388188381d3ab8339a79553fb3e5faba7bb5d98859b0ce6adfd3b3ab953dc3cff372d3e8a575f81bc5c02bdaef1499b2429f596b76a47c97c48297397244dada1e38b5bb2bcd15ee0919778842a0d09d8365adedaf9b20d53b10b450dfc5bac4bc457c9f1162499db4c028c3a4c144db80bdbcf02d33e744dc8a96f94bcd86f023e24434a84866875d3c9ce5112f79b3809dea1fbe1890c1a990b903522c70cba5"}, @acm={0x4, 0x24, 0x2, 0xc}]}, @generic={0xba, 0xd, "573b788c4d21924e1c4d822279d59c1c7ee058b98e55c996d5e746ad1337188af28f17342db5af5527de337c34e8fc1d26b415f9a1c6ba2bac1c583856bd9bacc627ed43fd3d0e9471cce11252bf817d0611b5178ed43f2bb95b6e1bd674297b84d8703236deb8bc8fede8c5538d701d5177d12b8133c14651c90b6ae30971855e699a18d5357118357039575797e5e51699020bb0e4e3a72702c638f47512f83341cd395c1d602b0c10af53e323e6e0c5d93f23c618ead6"}], [{{0x9, 0x5, 0x80, 0x2c, 0x8, 0x7, 0xc, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x1}, @generic={0xa, 0x11, "2eb5e58f4574a5ce"}]}}, {{0x9, 0x5, 0x47, 0x0, 0x20, 0x0, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x8}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x5, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x4, 0xd7}, @generic={0x7e, 0xf, "1436e7b46c53126e6f221efe654db0d6ce1113cc62fa4db0e7f23171d9e0cf021fcecc9d840523968d22bd41eecefd6ba801abac0d10c9f669cfe0a2c6b60b8b55bdf405e3f1f2d9ebf1c845db8e31d0f1cc6813c656ee4399f55764b135b5a9103b13c1aa22e6c92a875d26197f1a03d25eab1a381203cc3415881e"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xb}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6, 0xc3, 0xb, [@generic={0xa3, 0xa, "b6625e738c00c50307cf1466e9abd46605a85ddf4f93426b719550b4be5b78d92932c5aaf371c6d75c509b619b3f6bbc33d33fb0e9e22010c60cb33cb65f2a30897b277ebe8ac85a75bb01f977fdbc55100a718ebe7cc80584305b5dd513d5e65a71c431dcf1fb3e94b6174982431934e28ac5cd58e45195342f36d45d0226e97638a53843a3f65bac4f4c1490398ce43d49376f23b3d24caffc961acc421346c4"}, @generic={0xc9, 0x23, "9b2c784d449f970838993d10dde3696c414c914f9de44a00f91c40177bf235f6d65c7ee5cb680903188cf3706a3a407511c02a5d005e91dfe3272d462414c374bd18edee05fc677ceb8bd6aa147616f6978970ca6e05404810c6f31fbf2981dd5786d7d7e9784d86130485b492f425a50b02720097d3386caffc9e753ea36936020556641ae98787752fad2fe978e9958cabb24dcbacaa6ece27ff2fda5107987f38a65231db86df261a1f2fa724d01ae74d715650b44320a13db64e077488b91c70d77df5aeb3"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x80, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xb}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0xb, 0x7f, 0xd, [@generic={0x5, 0xc, "bd8630"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x1, 0x1, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x4a, 0x3, 0xb3, [@generic={0x23, 0xd, "787c880b688b42de18ffcb59d80f3f611084e1342eecb33574a3382126efc47ec1"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x0, 0x4, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x2}]}}]}}, {{0x9, 0x4, 0x45, 0x3, 0x3, 0x25, 0x72, 0x9e, 0x4, [@hid_hid={0x9, 0x21, 0x3, 0x28, 0x1, {0x22, 0x77b}}], [{{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x0, 0x7f, 0x8, [@generic={0x6f, 0x11, "238efba616526e1ee9c5691bda3a83d2d76ae65a75f875f1b667f7aadb0df60822d32a30992264f0875c989866fb9671c507c82a835eb2709b87c593ab4fded7c6c9ccd8bd4a8dd3d6096d25615fe4b94f39ccff35ee2a09d5ca3970ebfa3ba8de8ef2e7a6d54e760fe08cd34d"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0xd, 0x4b, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x5, 0xa, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}]}}, {{0x9, 0x4, 0x6, 0x9, 0x4, 0xff, 0x1, 0x0, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "100e"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x400, 0x7ff, 0x1}, {0x6, 0x24, 0x1a, 0xfff8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x81}, @mdlm={0x15, 0x24, 0x12, 0xfff9}, @mdlm_detail={0x90, 0x24, 0x13, 0x7, "44754ae03ec5e94cd16de8d2965c1725e9867f7b3bb355dea85cef1e4069a2d900671fff2eba01a8a190ee2408477d3bf36fa18e7452ab89d251ca73dff2745a2c22a2207e7de46a9aca841df0eb0d5ffb170dfc8582d6768cfc64a63e1d52aea9e491f238f297ccae07f19554085f264bc96499eeeb88ab43fb09d22f2fccb94adf9649369376d1cd9fa109"}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x63, 0xfff}]}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0xd, 0xf5, 0x6, [@generic={0x4f, 0x11, "6886329d8a5301a21f36db3e5157af83e23419bd6d5befe20a6c3450737d8ece95802eb8a6cfbfc5df58138c616633a80df1379b268ae8cb8b5644950eeca47d4aff5adf7a442af0c1d3eb8cf4"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x9, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x74, 0xfffe}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x0, 0x9c, 0x8a, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x81}]}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x49, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2b, 0x4}]}}]}}, {{0x9, 0x4, 0x99, 0x11, 0x3, 0xd8, 0xfb, 0x8c, 0xf, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b642d8"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@country_functional={0xe, 0x24, 0x7, 0xd, 0x9, [0x6, 0x101, 0x0, 0xfffc]}]}], [{{0x9, 0x5, 0x6, 0x0, 0x3b3, 0xff, 0x2, 0xd0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1f, 0x1acc}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xdd, 0x1, 0xd, [@generic={0x28, 0x31, "64c427a3ceff27dcd61fe3dd7833eb1fb2245fb8a298810af9dfbe1c255941366b223d845253"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x200, 0xc9, 0x1, 0xc, [@generic={0x6e, 0x23, "325de7a3a6b1d173213bd4ea6350e24f16f10c87a10666079b8811d2a0ffdef4a6c6cc0d43421467dfe7820593517aa8be30ab33a86935a9a5bc238a77e1eaa9beddfefa1e85a508e95a118907cc24fe833b683f20f96c984102ccdf8f88bd2adfecaa11b20f42b9075a7921"}]}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x300, 0x5, 0x8, 0x23, 0x40, 0x1}, 0x8, &(0x7f0000000900)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x449}}]}) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f00000009c0)={0x40, 0x23, 0x2a, {0x2a, 0x6, "eeef2d1460778891a5d143842f1a9b1a011dcd0e80dc46d4d3b1be8c1c894e06a62215e82e6cdb9a"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000a40)={0x0, 0xf, 0x11, {0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x0, 0x0, 0x10}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0xf4, 0xb, "1e2e614b", "d72fb819"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x2, 0x82, 0x8, 0x3, 0xc90d, 0x2}}}, &(0x7f0000000f40)={0x84, &(0x7f0000000b40)={0x40, 0x6, 0xd, "77af822f8a1ff6872f62edebda"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x44}, &(0x7f0000000c00)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000c40)={0x20, 0x0, 0x8, {0xa0, 0x3, [0xf0]}}, &(0x7f0000000c80)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000cc0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000d00)={0x40, 0xb, 0x2, 'Oj'}, &(0x7f0000000d40)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000d80)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, &(0x7f0000000dc0)={0x40, 0x17, 0x6}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "1bc9"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x13f1}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0xa3}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x7d}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x24200) rt_sigsuspend(&(0x7f0000001040)={[0x1]}, 0x8) r4 = syz_open_dev$vim2m(&(0x7f0000001080), 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getresgid(&(0x7f0000001400)=0x0, &(0x7f0000001440), &(0x7f0000001480)) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000001500)={0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000001680)={0x2, 0x79d, 0x8, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000017c0)=0xe8) r13 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001cc0)={0xf, 0xe6, {r1}, {0xffffffffffffffff}, 0x4, 0x9}) newfstatat(0xffffffffffffff9c, &(0x7f0000001d00)='\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r17 = ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f0000001dc0)={0xf6cf, 0x6}) stat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002040)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, &(0x7f0000002140)=0xe8) statx(r0, &(0x7f0000002180)='./file0\x00', 0x800, 0x4, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000002640)=[{{&(0x7f0000001100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001180), 0x0, 0x0, 0x0, 0x4004801}}, {{&(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000001240)="d6e0994c188e2f", 0x7}, {&(0x7f0000001280)="d312d935e794b704f351e196357fb59b826efc", 0x13}], 0x2, &(0x7f0000001540)=[@rights={{0x20, 0x1, 0x1, [r6, r3, r4, r4]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r7, r8}}}, @rights={{0x2c, 0x1, 0x1, [r0, r3, r4, r3, r0, r9, r10]}}], 0xa8, 0x4}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001600)="367b14b4fd5c094d80bb32ad3daf04e20de2626bc923ec1b9bd60593a086cf417a1eeb706477d787d24208582cb45ac6c1fd80af85ab7a", 0x37}], 0x1, &(0x7f0000001800)=[@rights={{0x34, 0x1, 0x1, [r4, r0, r3, r0, r4, r4, r3, r11, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, 0xee00}}}], 0x58, 0x19}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001880)="8f12b1085deaac600c5eb44c834da2e872b24f76293b9140aa457867dec27ba80a279d40dec9df2c1801a1af29e9493016b67f7b4f419c29a61f629923586d2dc68b2039ba08b09ce560e5f0c0eede29b2f7d77e25382266c8db15309298748b6965", 0x62}, {&(0x7f0000001900)="682be16da0629e994f5d2d6f36de51ae4aae622a07179c732bcfa56a905026ac34a924649157171c432d2e8aea8b9fd74d08c1c832a54d0542ce47", 0x3b}, {&(0x7f0000001940)="68426fce1349594bdf473ebaf87e5bc8b9ed680403e6cff67c2ad14aceb0d66c44d88c1fc16849e10cca15ae23b22434ddb0d31bf60abce260f080bb2cf51b7e9caa999e6ecb4db5e7fb46d994e020", 0x4f}, {&(0x7f00000019c0)="be1b82dc4297ef8611f577ed67865c1100a8106d8e891bb1b5fb6824be1e0f0243a5b5fda69c0a249b4e391d3c0f3253149aaf92a08c4e51317b15854b2ed009fa58e6cfe08ea2ffe2afc44fb3ec12e523451c5ea73f0b69a2b66da05aa859c7d78d5a0127f0317faffe73b645a24c3217ba0099cd2348f14b0ca6a9f1693ba51e31c26dddbff6dce972106076d88f0be8a63552f5b3e54186281689a2c7cc3a6131052db111134ac981dc", 0xab}, {&(0x7f0000001a80)="6e0243162caee4cd7b5298e2551637396e53b2d345ebd12c8de8a06b6f53441cc63a9dedaf7eb31f133300651b2b547475d478d34bfa67b90557033d6713c4646980119d3b1358d6a6be50636c390c684f5c048266e50f1aad514de48f66e3f93b9f597d0ee6e135757387db1664eb25c3dae363481298e2ed22cebf19c620d5a5126a1d76354ac209ec1ba9d500b5f457ef2baa68b0de19642bbde80208f62186433f037fb24fde9fc9031d70abb9d5ec5b4f657c5cca103509a50546805163054473379ab8b573747f2297712505bbcb87c45765461235020a6cf417cd47324704854b49c40e8de9e0261989c7e0f228d1a8124d55b58f", 0xf8}], 0x5, &(0x7f0000002500)=[@cred={{0x1c, 0x1, 0x2, {r1, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r3, r17, r0, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r18}}}, @cred={{0x1c, 0x1, 0x2, {r1, r19, r20}}}, @cred={{0x1c, 0x1, 0x2, {r1, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [r4, r4, r3, r0, r4]}}], 0x130, 0x40080}}], 0x4, 0x4880) 7.938610796s ago: executing program 0 (id=1326): syz_emit_ethernet(0x5e, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x28, 0x2c, 0x0, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @mcast2}}}}}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x1441) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="6be00ff09321e32a7e0f1d45fb750f1ec1e15be572a7d646754b1e1cea02c1a06d0d9b86514e6d2afce29df5f1c8c9d7fe087f7116a341c9cbd7e536063d42367f79ccea05e0fcf72d19ca8c65612a23cc447ab5982f306298cdfc40a20a86edfb26c58e1491cae8751acfc1a22867f2c866f123215209101ec37c2734d97fb4612d3fcefd3a3c824ace75498471f1e35363631e29cc05b89e0f7c26948edbe418596cbc3c686d37d24c4e049f35e99d6b6de3470b342a4fd59bf1012aa8d0238f32d7f7702e0c293dcf71b3d4b2dc6c6527b070c12a5ae65027998d74526c4ad93283708c59afc157dd299b378f85e159970e6d3a248022714873dd40b54f4418012650d564b568730769a5f27fd458d5f535672fddbd105e2423a85bfdfda463d3cd154ea1185276b3c400ccc39953ef1af942faeff3095d9cdd9bc03374408464d4f85ab3c1fd2965b5e0fbd95a396baf089d5792b3ecc98c536c19b4d3cdf8cb499072f3491f0cf76b5f42ea959c5366ab26f2b7e2539e999d41d6bc583ba13a3f59fc4d3b37eb96374ffc22d53e79198778092656323188c7a052e0d9587a6b80cafa69a0ad770d514e5c9edc0b8556732c04549cc9f4d14299e75514d80b6e026a0f8daea3ff396aff507f89bf2ca4c48d0413f6a37c8ef193dbe07ab52e7487f4e115caa83153f729d4659f51e27939429c41a5e5152eb48e109e81baa49ebf076bb13ebdd031a0c077b18c0db18a085d5b3262cb50649b4e8fecf6b306a0430a8f89e2ff7fda3ca48fb8e2b1aad0999072f20c98466cc868970e53d6860b8fc76fa3b40eb40ab92863469346d5a6860c0297dfa94d908f1168ba2ac5197a9f9cbf3abc32fce7d14ee228d395ae53b1bc374939be6b2a135661048a02aaeeedfc755fe1df353b8e8e0aa093574321ab55fc3d16060ed0cd3e8c3f5954b745048d58061e834cfb142d027c03a69df52118f92acc387a734df458e28cd8324ae588bdcf3c12e4c492e4c14e47dc3efc9123bc189dcc677b619fd8cf34ebed6b73c2c740964072f1d87505ccc4ce189293b0c1e6cd68b8ad7a8cb8b049b8aa4f3675ab09787732643353c4f93cec2787e5ca3b96011459c133cb6947d51c408981798b675b9f9bc2186f016b585bdbb6100434e97033261967b1f6fc02bbe32e4125e922b364757008fff71df0ac6e9479caebefc5255727e8f9deb38bac48fcf65b70b7ff53b1b73682903d1300ba4fe2cf7a7c4b1a561f902d4bdfcc37697c68ff5e4f9bb0722f2be019fa57791da330e8ec69683e7b12d64ec27fe017bb18190609be3a406cc4b1c818e778c404c0e35b1f0cf2e8109f672ee2d649fb71e686930c434ad92fe5d290deed7fdf3fdd71d7409f23daab810569a01a8ae9167e558e71f84f88639ecb5ec1ae0eae0474e37ce81d73c7c93a912a56de243e39995c8d1a6194457509fbd62b94bcce0f1e7b3aca47d36c4874fd1aa8d8d1475a2af2f457ea39004dc3c1834bf20701c00416858c810bd72e8c55f4507c2187d062abf119fe91a1871e423c16964de5351c70dd668f08c99329fe189d78d7944a2e9ce47b2aad9657f8e860ab6bc03c365059528dd28350b84c06c56e87f019a0fe5a71595c7ccbf493c41fe52e907708020cdaf26be8e21d3a97c2ef6dd1de85ac6a9f8ba0771d48353b399555c5b6be41241c9de86888d0fcd5198343ad913fa35da296dc3eeecfe2ee4a56b56bf84e23a3bddc4601b504433b339468f029cd2dd9e637217e5816391010093471cd0ac2d352cb88ff5e5930dd589d1b03c5f408023c8207a1bfc2de6794a65985c1345ab256b8e7990fb8c3fe54b9b76dee19f4a7380a0659b730db58bf69efb51044eb4eaf0df5b7a07baf629a537fdef46c33c6dec622c27dc806025bc0144a3a1a64136cd8e7674a4e01aafaec604ef8356b921be7df063a2ec67dc312d964ff1c30f8d77b7c3e06588ac351a8818701c5b7c9e4b9e9721e12d0bc0731c7e2ccd0b1028e5ac990a3e45c44ba1ce8ea73a54927f6fda6cf5e52253a8ee0df194073fe76568f51c6cf45312f1aec20010db2b59d95d39c3b1a40067e6657964368e12173d71fe2f7950e5f0f3a2923ecd474b623010d77f674e52f23552eece20dccfe15c64fa05ffa6bec88d28fea4b2de624c8dd1106c86b220af9f53f15e00785d764224975efb15f290c4a6af055f7a8baeebe9903c0c9f48b53dc423997adcb8acbe7d82de105383644f9d9f3d8cc8f9a79bfa75c7e1a3f470d2448612ee26950b0affc39e98bb75a30583ae55383d376f22dce6c2cdc544ad8d68fa82e5d16b0a65c63ba4c4fae2ce1269ce321be2a0f2550c2b47c8cca190d0e44af824705dc3d5565c4c0a1ab68c50d83534fb32e7ba31c8dec6a17c127985a516ace1f9016278e85056f6288513ed706b873646e0fe3f1803ce71dc72d91da85ad5d385e0b072b6857ecf36746cceced48b0e4663b92cc349baeec28d27ff568ba9bf4d68191166cf65a13af7cf213c2ffca68b9379ea167c7bda82fa7261e2754a00a6f0b4065c57a8f9868f8247d39eca71faae27afbff8864bf934e746300d5e9a31a4b78ca059bb9c40d30bfe745336264daa57002085686f73f48474e2d4bc1e38e62ed4547a6bbd74b1d9fab3f4b2622eb6c8d32b79ef9ab691fefd7b1bfa787de85ccaa14687be5a0529f928dfd974752bde8b063bc717d2a07eb4a1651f465aa78be32457955f83b2cb4608e22a4ef7bccba0378274289a7adc38521cd8d691741e87b03f536b9196c2284baa062038a22320e6d8c3f9e29051450b16bb7909566e75e6ebe423fa88b7f395c0dae22f027efc014db76ffc4244dfeb4d014809569caed95c43f92486c8d9cde522d403efe788fbc3b54ac39e90bd2f2dc3f3d66308d2df22d9602da5ec2133f296252bf0da014020194cf9ee65e7b137c5488401eba99def61e721fa3889d86ecaa5d5a3e4c8642fc0f9ef43186edd427402f63f06bbfa26850f2e4c71bd6387978a8085740fe4b1012dde14413dfc12052acf9508fd6a8a64f59d5756a59c806b64f42cc4466aed5327071f32fe2cb24aa62d21da4c1de44c2aab46f01c53eef1d83002437668fc494953f4951fcc1bc050e402b7cb73d61b3fae4d806fe6b745160df0a6fb6e830d18b04f142b22de9fe78b4307f95c9badbeeca0a2cb134d229e19fbab6a913ea4a0c59b59ac4e9de55b4fe2d7d5585d57c21678931d151038442fc388557da00dc01bae0c7df06ac72be56668cfd942c9edcfe77c1128a6640ad4d4a210d69d94b5e306b3848c09c61c05ec638096ceff5fc156bd34cc3c461bbc4d3ea0eabeabf46459f98f15821e181dfec54b87c9c10bf1ae64449ed9e90fa660191d38760117f9a0ae6422ad983e8b348bc0579dba87ad505c24ccb683ffd8f734b8e5f0c65e3a749d86a2fb1aad19abb96490167993fa130db74152d8984084220ad17653c01f3fbbd2e1000d3ace6ed697f0d4a9bdfb2dff49148e8def07acd5e3355370d1c19d3afb7bd12fc30e6acb4841f641672dda483d0afc53150369ce1e2523b3706f5b65542032838d45a5dedfc2369e385390d1628e78dced081b931f67dc75e23cf2b0f529fde6c9c84e4b3894c11b9f56ddc65827f68b0fde08875fa8ad3cac7e212c7727d41f6d51434a890ccac19f3e9b0a594556fbf51e84e874de4e2eeba206369871dd844f6248ec180b3741f2ab3d23b76448562207f577b10f4d14949a926b837252cdcf62af32e83001d63ebde5c1d266c8d2b43f5545dbf070eaa47613481d6c920f1801b490d2a847d7e85872fe75f56d90f050fe741d94511058d71271daf9c565ced757402c315685820c80ed1f6a889a8db0326ecb58f1f287d24c5beb5b19b94d8400aa406daa591e292832c78be74613ffc2a12635951d487650c864ef55927036edb5ec02614e5eb75f67b933220ac39f891c37cc0b7fe23ce8b0ad8e5ec9c0efbfd706f5730c142fbd5297ac7f03f4ca6f49b9cba1e9cbee6b08e936c7ee1642e5f1e3eb566c294d10fc4fb45a7239590cbdebb7a16b972a983748e73aa23be7f66a30c22610456445234bb8ba11b412eaae69b808f76d90b7bb14223b644b8860c550f3c92ae47c06a38429d66da2a414c01985d4b7c935717a4dec2cd4e89092d5dc9aefd0ac0b23481459a2adcb654063743b667c3c3241f203f81385aeef164a0be7655d02074b6710b4e2c50c3ee0747892327e8f22aaf51fccf2b715b24c02c6690389afe83e6128a1ef199234c8c9803124089382c6bed5b296945fcfa937313caf39176b741809c7c7fde30468e8875266315d9e733258b9305cd92276211d0c75c97b103c31c52c0c4dd17dc5931c5a7644ddb15ab8de78cc32125f85b78ba00d09079626a813e589dce18010f427079ec6cb74a2752c7247e7b7df37dc701245e9cf37fbfac5b1c427ba477b15c21d48084d38253a4d49af73d9f25e23333ac3a84e4b671fd31abd4b32441fb07dfe30659915a88ddb684933bee5ee9dccd45763f6544fdacfa4d821f36d7907a42ab9db72b231cbc9e1ddf2000441586eab8d59277955f9665c5e358da456d759490bf9f79462ced96372b237ab61d8b48a78612c64f48d5bd89fb6e67b0818033743b7ffb3305bcdbab0f71b46d5ab61d8190c5106813ca4435386e55e43c6cb925cf81039ed5f11df2d96c53a448519ede7e83dee8b82acd143ce0d1b91318a0f0efdabb77c178cdee559c1d2181600b6b3847e05f41234c5bee021d4f0bbed10cd557f686e8b9769780a13df35fd069855fd8e2aec5bb84e8d0b7740fb7fa88b823826b7e8a979148b95177a2e720b45296c280a9abce6bc5d943e394c07eed5148f86a94450569af8c38e184603abc46a59b2ba01e84225da828ccb93ca557e4ffe9e8e8b98c1fa471409f9d7b9d9da4b0f4fb7d58d7474039204faa2ab1067a2eaf9df247a2ba1b099cdfe79a7db1273e0660e37f6e8afc125564c6b8b5e893231a6addf326988bd78578950e4b2f317ffb322fb44a570587c6c6baa59d6d844454e92f89534c7d902760b984fae30ff5eff5b90fe03f49429c5a5becd275c5c670ae8d39b5faf986970492e579a8d98aed5da2894c96bf8779e9aaba84724bf471734b4d9d4db6a0ebfcb1c31f88c59d4b0f38078435f575b0e7cc7cd5f6cc9a39bf16d3514e89b562ded72187c1e550d4852e9bdc585525d02ed1d3adc819a072d82c37935b2fe6ff3c3f0c7b7fbee2c25ad515835d067ea53af1c6d0b4a9b35de653f2e5a8a1d9261c49813ecab580f368a79515a8621f16b750fa9d711d2884764e222c723e7dd94532de5d5d40fe12660fef784d8ecf2ededbef7a61b881cf61e8c035f31d3801b34ea385fb5fd3895e6789ed741aab0e5d091050f7cde8aa1f4feb53683626870adc4190554316bcea49c6ee182fd66a6ccd2e198ba2ae6f3621a6a6186a6cbd5378e6347afbd88cbff663f73ff568ed47861219eee3598520625f64f7a6303be64361d705021104d9871592d28524f5cf391e7d445746a0e9e42924760e62c955301e1ab3744f79217841a1668a6a871bf2efc278b0bf0b4b46a769caadf243f1af31df19006080d11a4f84ee4932034f48fdde875415d949438e8c1bdea8bb9899c230561482960cac0e77ce78584e35d3430af7ed37ec71f33f265d62b397b99f71aeef08e0a92e221d8ef14c82616d06b1ccafa63969a7ab145928d9c7b1b23e16acc00754ac707f6ce3939b4604baf0f3fa69fa48bb7218f3a992e65a4aabd8a6adf4a7c1e32877273393a1567632348d480a84f3b4ae31eb810a22ccb652064be040c9a90e52b59031a22abfd1840b2ecec89d16426ab31dfb83177ae08255d1424a6ddf8bb5d5adb66a7e6cf7f68be0ce5b4a56fa3463da621062ac85af5334018c3a473c5af9c5686eb9abbd24420293df7ae5fd075b2d3b9aec226e1a016c989b029d1daed5933d285227dbedab33a32b0d71d4cb1fb79c3a8e342fb4126785a3259f241150c7c381918f8f88146fb8fcf14d42ace0fd5c0084db3726575b04ef47c2bd1a0ccf977c8232e1688d4d39c88f7ab8d565b578bed84bbfa17982308a9269933ebd2f7260a67e01a3790fca5673643aff626514846dc1634e3c2fbdb0eaedb163072d9c0bb2fc129aa57618ca1d2b37324aa49972117b9ca81092eb89089659c39eaa380fd950aa914181ac98c1990af713eb834fdb2b731f2791292e9b2774aaf3a091152e25d7ea92a6c80f3217fedba12816ec910677d3381b361272074143fb51f391e6cd1953dd6cbfa33ba97e5d019fddd3da76fe350b767c8eb706a5f46a536c3103da6af42c1a5a7cf488be7f0d3a8ae4598d0d1f4f8339a63c124a5ce1b18a225f840368d390acddeac589093a753ed2e45ae4bfa62f222d4c6a6fbaee8163e76a0bf6291619d3b4af530d03c1769a456ec52491996c6739290f4cd325e9a3c1f0db9b079e5809859f6bb2d6cc494a500862179b65aa65ded80971e60dd9338dddbbf736924626aae8d65fa4a32e8affbf49b5b20c546520aac759594fd996e5f573e8a359dc4192c2723e05d7f8d212d78a03e9a7ee41b3ed6d098964f77e1e96e0e6641222fa247757998d9e9d33787079d1b0913f9b6fd0163f7603d4bbb7430738ab618026ba0526b5722f7c5b155e9c20209ebdac884d4afc34ee32420892acfa0a63d93e1aa4fa71581166d783abe45cbfc66f65c75b803d932dc3a40851508499001dde84fd3646ae3743c1edcfe433579cd41ce625262082cea3e4f87ea17f26c2390e9c134972cbe8291c500ad925f896aeb4d652cc01e397ff9eec6c4ab32432f61f90ad6f24fc2f24c47d039e90cbdbdf97ea2c0b1ea6562c1ab651e46adab86814e14e9196366e6da5f16c743baa0d31a1b14200451df59b639dbf0ec8976e31b41462268a66d3fb55b0fb344a587890d92d7df87244b517276d6cef787cecdff92e2293d0d2e51228bba0ba3ba9e57483147727a90ab99b07498a1a9c46cd32e0af493e4c092e515ee9541c678c3566092e62a14a566e225741102071811d3306cb229b8c08da4119a565f9a37c06a983ceef668e7e97df595bdfbb43b0350fc823bcb53630508b3e7a42ff2ad5a8bbe83811c35b78578fa4842122ac76be6e7cd68a9d3ec8c6a3b83edc1f545a1f2a74ce5212f02ba85e104c0e1d21e4f77a7a6a0253fee2d486f65abc1d15e483b7fa87633e1c02e6f5aecdb779dd63af36c457905b2d4bf2c19cd4a4d2475245c45f3ef767654be5c17aa9b3e20f8019d356324baf677e4604e736c2a8b289874accbcb2ba300f063fae2c7d447f9a60daa87592275e501cbe880e7b46230659a7d62fc069ba7bbbbb71cd5ece453a692e2a3620cc8ccab581f4619963b1823c401b84092580dfcba08f63c14cef7963bf6af2d550e2fd43dc2ce1a5079e9018fe1a6ade4496b17f31dba644022c1bec7f7a345f2f02fe4eae1fcf5fb377fbf33c4774843cdbf1357741b0a9be5b403345db08d6ce70e4c5a18cd8725364b4096b69863964dc596cc115105043f6d80603873494c177b886299ca479d1c12a3547ff136a203282df0bcda49100de02b368ea5124385a03280d15319c5a5dd5e150b6eb19c969ca5f3c3368bdceef985c1ee957d5a61b3b9eb1c25e40b280fcec638726f78747dc2944e052c184cde480a6db7a2cd7b75f34cabcb2ca0e105b7af8c5d480b1cdb47d3675daf2e621db6e6e8924c157a028e860adde429979536c0ae06d3665e98166181eb47061fb20b4f0547daa938c54db21518a980ca5670a3dede7eb479497156b4998d11e838b6f112d3dfeae167bc3a8ed7c617fac11907094f25b0939bb9956f7aaeafbfa452ed4ec91b2d1450a43946096cd104a90a73d733da92125de061de39cf8e3d582e80f368b22c66cb69b86677a0af3bffc828ad1769a223f0f98e0857b60bc82f739fd6bbbc9a150830e1e850fa3bbd587bd9ca0fc157fb0b292cc91365348d01c435e2641885891306e177a108712290ec2d1ed3c6ac6d1c49aaffed07b6196787667cd8a7af66a1b631f9e9c6fd668509b7a2e3fb848d99e54e298742ca771bf913e50552faefdc0761a0b1aac3a38669fcead818c26a385ea630960c151199226c23d2b1c9ee42f864d4fe05d22eb826a80ad0738daa292938a4dcfcf18a60642b2b27f0e4998b0569e79c5dff424dd324641eea7b929d13735754b4ba6ba1540bba6b4bee8d3ee3c8eb8900e9c7e36854958f5b632b111abd2f722e2bc8aae4f112f488d8c1e68ba32fe88a39773ed81027a14cfb877ece8772dab7d360fab7cfdbe31a69d218ebdb7b0e42fd8b775348171f0f8a59386fa4fce2fcefefc09cc99a477cb856376541ea5048ab8fdda87ace560a565b2fef28327ca537eea30114a0581fee17e58ed375377a23d8ccbbf757a38aaac794a2630c42f9d4ed91cb886cb5277134b02ab691434ce897c5310472a691f99785cfda982c8e99bd2958589258228a7624137acc14a13414d06f6aee835b3637a0e7367a010652a076b2945fbdadeef39d65d503c18dddf7320fe07873331dcfd16e7cc786cac00d0934cbc6b024547e11132e413b7e5c4f926202128dd1aa76a39065a4228f109bc3327dac7028843868c32fc5d902e882494eb3cf81a90212434d404cbcfa72722e3ffae4079c2e6333a94d5f38e2a2948a01c10ef1a3adf58bae5b5629be02a1de64a201223c23eafd61a5be59c40188fa3463fd64e98f0646a9338bb9ee85f3ae5eabe370727121b4d8559fd32be127a6dbae3c1a0a43ef1173973b3b3332434c6c92b3144d9fb308768ac4067eb72d597b85882e0d228c6dece3da0677d9fa6c0b13788b3c2b0c9e67377ba0ada12aa956672c58f48fa6cfdf0357d3cacaabac46dc438632b1e7edd2e120310e7cd7aa2e55884b422b88e8eb9f5c468c04f9f045f4e5db6e12e9d7330f3e625a7e4676f61f93ef729e8cdcc743c44d409ff5720e85d4d447cfed7f187563ba04add8b27b4d5e1ffdd2bd61a167fcb2da8d58e67479ebc076329d27bd24ecaabc4cb05552a409ce732ecb86a6f0a213e35e53f895bc3c4ae020ece95499d4670375f61a32fa215c956734f5aa8127ec859cac7dfb5768864dbb7591f9d91c05e365c4dbbe864d207bf9eff04c4b3047b68cebef76a7915673dc5ccafceea57e38beb9a69473a1b2ae96c812ad737db0f66e87ca2305dcf4d66369e1afd74412a207a7a2d6d97982e1874afbb6a9b420d88c542bcdf6cf3c471c7535a3444ad20793876953ae8fce30fa468a50ef241a15ec0ea3229b1aafcc76eba39f8cd2a93f23ca2b04c8ab87c4f5a8a9a1db2bbcfc17a7aedf9877b669f8c2a05783586581656064dcfd19200a8f60c4a582766a0ca5148b56cafafc0ef1601336b5398a90d1bf68c6ecfd1ede4613fb9474bba76ac945f51129543e22f14fdea4e83c206032f0b5faa83a1de556d48d5f08bc53879f492897df7a59e0ddd00825706a2ac507e5fb31bad911885ffeb2d2368616786593f4c6a28de95edf2d993dab8412fa5b16eda075a934f46967fb1643085370da9d1e5895a5ddd6898429c85bdd41b28f58cc3e106ab683ecba03253b8122a8a5b6064eca49ebf4133c2351468cd01200332fca0a00c980262de8dcde7f7e145aefe3fa56b2dd6de3f2bd1514f5a2d143457a28bac927c248d4d89779835a83398fd54e7d53d7b2d1940fd12d7bc96e16b0fe15fbf16c3600b891b3bf6723303d01a73120734be1f27d43b5d5c374d6e44f42e0df163d2797da5bb292fbc58f8ac2056dbcb85b31c81d56fad2d70625b1304c04a508d6ccbfce072279358cb065a50f4bdf8c81ddd2d5ecf2b2c2b1015051b465e5ff682c9e3f8160123334b82dfe5a751d8b5f441587bbe7bed1325338cae6a8c06101081a55d499efbf77714e43ac99ecc08965e152bc84faba1bd966f4c01879f24b451b8f3ebae04852de5efd441396a6a871f97ea3dc413174886d71748c8beac5e5d403887e818e335cfdffa9d76b5074a5dcf12ad7725cb83cde0174679c0961643606a03082c5ec01590d687ff5bf9f8b2c3a84bfdb9c25622adc66aeb7f0355efddd4ab9954e5455c2428ee4e5383888ab466bd5fe817eb6b794a555c0eea446287cce32d9efd960e58771ddfb8ee2b4133b79d8953c2ae959a5d6ce09448d50da61bf22268fd32dcd501fd47c6b72cf8f50159a7aeec6e220ca81fc64ff97014ea77b6f791ccf6625eba88f60d1fe699cb16636a9acc4067786c537623c699568112c2093663bfba92ddc1ffcfe93f247f90accc6002faa61f43e54c3fab5e04a6ea1c5415e31ab129f8c9f82c3e3191513a4af151b1d6ab45a2f0eeca83f0870bc40da6257b9ea1c6238171a754995137d4123f2a4888e73db901f70a044ee0dd8176defd5dd82d9fc5a1a0d79effaf86fdf0b88eabc338c353f5fb040fe34db18211b20f8a3e4589b212e913665506488f21c88f5aec85eb694134a557c95d9a6ab9efc089e5c9848e591e3387cc11ca66fb03ca713513b98ebc2f35befcf64792ef44411e0f75ee4da42dcadfffdf9eecb761bd5e89183881103c5019e1ef3f3d80ba27fb0e1897e925d4122fdf3b3b568cc8795adf98643e86409226f2c5ed87cf481ffcd6e21a2bf0bff07a98bed3be5328118c3cb43c05f1b740242b0855f71400dd155c888b627615488025f81fcc6f5628efaf081489683c6d259c33b591edf4c9a4bfc54802c93ffbba4baf2a5030af8882b7d53eae80720e36a15c6c210658cdffa162630ba5d0217fbbf44879a04d41c58befb8a271abf4460a2d768be38d22f832e3cfad91b90f1b576924c8cbda71bbe89c85c239fa02f69c25e5422c977d97a54954fd16b85970db963db2b132b057a0282aef92614a9148e2a1a1edfa5ec46ae8d662dabae8f8141ea30dfddac44573ff52c3f93d82b0245b03c6db05b540e614cc9e3f702467054d688a92dcc9123f71a064cc52730fc5ee94b2746c80688521cc1cdb0f9455d4875f4af4afdc67d2e389361e1328edad7594d4bc9beec8b935aa3e5e98652c934d14fd16da50d685717303186da715778856da54666448d648d32becd2d63a6503ac21e56317903d15465ac4d3765f7a05420811307f71c1dc55ce5a4cd21130487cb0065397785da5094d27fae505996c1d404399797ff61d40f2ed63fca51db673197cd158a6e9b9ee93bb37df8bbaf92f47493c81c65439d359d578244a7f83629f4323a182e68526d674f4b6b64908350253520a4e564fae27df523e9218ff84f55a7ca622fc2e3bcc5edec9cc45c5a1b4c00c64038afdb165ad0ca3d8b66cea248e6a60a1c6d27e0dd2e5c7eec49fb8227a5266aedbc4fff982ffda402190548fb63fdeb67b3fb0894b11ce904b1c194f8f36cdecddc1312d64e9f227cc4b614b3679f978e0f1b6bb7aaeb2461cd28a94b73dd55eef1d5a98d72b9d8750b2dfe3a3cec044e13a8700", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0xffffffffffffffda, 0x2, {0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f00000001c0)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000840)="8bb3689f", 0x4, 0x6, 0x0, 0x0, r2}]) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f0000000180)={0x2, 0x0, @multicast1, 0x4}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e00030000000300000005000700080000008e"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x2, 0x203, 0x7e, 0x4, 0x4b, 0x8001, 0x40, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x1400, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x80003, 0x5, 0x7, 0x80000000, 0xa72, 0x4, 0x7, 0x0, 0x72, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x7, 0xf9, 0x10, 0xc, 0x6c9, 0xfff, 0x100, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x4000d, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0x9, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x2, 0x8, 0x1, 0x5, 0x3, 0x9, 0x48c93690, 0x1000042, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0xda0f, 0x7fff, 0x8, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0x9, 0x2, 0x11, 0x7ff, 0xfffffffc, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x22], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20005, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x6, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x0, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x4, 0x30b1d693, 0x100, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0xffff, 0x8000007, 0x2bf, 0x10000, 0x200, 0x7fffffff]}, 0x45c) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 7.372390409s ago: executing program 3 (id=1328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe8}, 0x1, 0x0, 0x0, 0x80845}, 0x0) 7.02302972s ago: executing program 3 (id=1329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x4, "83af"}]}}}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000380)={{0x12, 0x1, 0x240, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x39, 0xf0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x600}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x3, 0xb9}, {0x6, 0x24, 0x1a, 0xffff, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x28, 0x4, 0x8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x7b, 0xc6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x10, 0xb, 0x2}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x45, 0x72, 0x4c, 0x40, 0x4}, 0x94, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x280a}}, {0xb0, &(0x7f00000004c0)=@string={0xb0, 0x3, "0372951855bc3621cd9312f6fbe510a32b9ff4692c559b7c0eecd657a5dbbfe37ebbd9b0c1943a0aa0e7ad18e687852c30f89ecc820039a98fb616228c7af17707988af1aac41a959cd8a336d86867f61a8f786a43699980b280395661f7b8a4d1a5da05be1e25598e88de52663ac5e693a43a62b9f41838e571755b2ca8a03684127a128716f5d387c4f26b66961b5d7eaf46925ddfd79511c2ea8b4210745755b022d0e1176276313654f4cac3"}}, {0x0, 0x0}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2807}}]}) 6.723703841s ago: executing program 0 (id=1330): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c0100600180004050000010073693c000c000280060008000e000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24008040) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e23, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @mcast2, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)=ANY=[]) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket(0x3, 0x3, 0x3083) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYRES16=r0]) 6.664589197s ago: executing program 1 (id=1331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9, 0x900}, 0x94) 6.557222345s ago: executing program 4 (id=1332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x10380, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4018aee3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r3, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa4, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x22}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8fc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3c800000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4}]}]}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc010}, 0x8800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090300000000000000001d0000000c0001c00800030007"], 0x20}}, 0x0) 6.446996028s ago: executing program 1 (id=1333): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x40000) mremap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d58", 0xc) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/90, 0x5a}], 0x1}, 0x40010022) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknod(0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x3c3140, 0xa2) r4 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0x5dfc, 0x2000, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x12, &(0x7f00000002c0)=ANY=[], 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000400000000100000200b000000000000", @ANYRESHEX=r3, @ANYRES8=r4, @ANYRES32], 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902"], 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1) 4.940494332s ago: executing program 2 (id=1334): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r0, 0xf, 0xffffffffffffffd2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="000a81bdf068c4b3fc980eb88d687dd8ca06aa62698095cc28e432cb66735b95fcbe9a2c181d97f0817ea924c2f1bb794e542b630f2fef015c24927fb9bda1ad11248b5e7877803a54e0c5b1a041bf0ca80ee7c452cf00518ac77b24386ea3e5058156f1e5ecbda1be47ef72f520c1dcfdc342cd5011b0709839932e4b5ea8e7a2bca5b5ca941e69198d132150e38129a55710a57d468b61f542cd7dd77e3a80089ad27d7a442bb00b7bb886c6ee54ef44e52823e85869a06ba7e8a50d64091ad29e4c823ae61fce7e69349c7199a80d406c98f700f142df4f"], 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0xffff}, 0x90) syz_usb_control_io$lan78xx(r1, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x40, 0x22, 0x65, {0x65, 0x11, "29ea28883f915e5aa7e35b4542a83f4c727f9dde094751155f342ad8a721b2c7f6598e0348c87979d8b1996c2dd2b25e897fcbc558fe3fd4f40d1ac0f29c9570f01b145aae0ae5037c6fe2c7e0db454115d29a8777e3e6882c4c46192ac36edc8a75b4"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x40, 0x6, 0xcf, "53c8b5fcfb335fc8d37616d1d880d695702ca7b25dcbff75777f4b86ed12ec5026573497dbe588fd476c772feb8e3d82dba7f0d4c5e0fddd1ad125862667d934ab87a43a20aa67e3c7cbbea0580c2fa540c490d5cb9e9dc286c971a4703d74fe43c8933d78bafd0d5d6f2bd58aa3a6c8edb7cbdfba1079d01462f3cca71c8b4d499c6ec5d04ad6a33020ca24d8848be11854257e8848b05a199fa1378523ccc25ba5c0ddb6bed874b8bd1944adafd2e1595b2fc912c62c0416417effe27da48aa99bf5b43fe9a407007bc1691b3db1"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000600)={0xc0, 0xa1, 0x4, 0x6}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0xfffffe01}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "9630714f0604164cc48c2cef71569e985920a08bcf7694cb3e50f9fd086bf542535b9c44832f4b4f5fc3d80265184e"}}) sendto$inet6(r2, &(0x7f0000000140)="f6d257ee028ddf75492909dc4863644f2fbf3c93a2b5850e680511c277ca7ff121da0066e3f15db0fc937f4282b036983751b9c4890faa43d8934a7fdb5ae075a87b0e9afb4482c9476636d2639332107dccd22e11f4d712091969dd9c535cf48eb60888efa142e1217cdb", 0x6b, 0x800, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @local, 0xa20}, 0x1c) 4.301018079s ago: executing program 4 (id=1335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xfffd}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x2000000, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x4000) 4.201416338s ago: executing program 4 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="1e"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.972418043s ago: executing program 4 (id=1337): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2d03629c, 0x0, 0x9, 0x40000000000, 0xfffffe0000000001, 0x10000000, 0xffffffff}, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x9, 0x3cf301) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="bce548f4000000013593ffffbd8a17037922b2c0421454fb99fa9d410166a274d631582cfe8d71a7dd2b44b880d7ac750fd2933199e9c6d16edd86f9c38f40f3"]) close(r2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4241, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getpid() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)={0x0, 0x140}, 0x18) syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cd}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000400)=0x1088, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0xfffffffffffffffd, &(0x7f0000000100)) sendmsg$NFT_BATCH(r5, 0x0, 0x0) 3.534489792s ago: executing program 3 (id=1338): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x20000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff9, 0x1, 0x4, 0x9}, 0x110b28cd, 0x0, 0x10000, 0xf, 0x93, 0xe, 0xe, 0xc, 0x5, 0x7fffffff, {0x7, 0x3, 0x80, 0x2040, 0x7, 0x76c6e0a}}}}]}, 0x78}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r5, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) 3.397477865s ago: executing program 0 (id=1339): socketpair$unix(0x1, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000002680)={"a6e6784622c7882b91f5d1a0034830c56c8c31148313990c5e15c7649251", 0x3, 0x1, 0x1, 0x9, 0x4, 0x1, 0x7, 0x2, [0x400, 0x1000, 0x7, 0x4, 0x3, 0x2, 0x8, 0x228, 0x8, 0x7, 0x5, 0x0, 0x7, 0x0, 0x5, 0x9, 0xfffffff6, 0x4, 0x3]}) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000001080)=[{0x41, 0x9, 0x3, 0xfd, @time={0x0, 0x1}, {0x46, 0x1}, {0xf}, @quote={{0xf, 0x6}, 0x8}}], 0x1c) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) (async) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x1906) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 3.092648709s ago: executing program 1 (id=1340): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000064000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000c500000005000000bf090000000000006609010000000000060000000b000000180117002020752500000000002020207b9af8ff00140000ad9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.78353458s ago: executing program 2 (id=1341): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000001000)) r1 = socket$inet(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r4, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2.504987831s ago: executing program 1 (id=1342): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x6, 0x754d, 0x1, 0x9, 0x11, r2}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_256={{0x303, 0x36}, "2fbc61aac78cc949", "d73cb7376ccdd961eb57c264df4580a7bf502983278b5d639eabe200", "549fec04", "a28bd07f456299e8"}, 0x38) r6 = syz_io_uring_setup(0x7fc8, &(0x7f0000000800)={0x0, 0x4b70, 0x8000, 0x1, 0x40003, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$sock(r9, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="2b4026c5457c2da8ca043a7519f31faf4d", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000004000)}}, {{0x0, 0x0, &(0x7f00000052c0)}}], 0x3, 0x0) shutdown(r0, 0x1) io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r10, &(0x7f0000000000)=[{&(0x7f0000000180)=""/136, 0x88}], 0x1, 0x5, 0x1, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) 1.632593004s ago: executing program 0 (id=1343): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="10eba9fdb4cbab48929e1af151000000000000000000000002000000", 0x1c}], 0x1) 1.590309137s ago: executing program 4 (id=1344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x0, 0x1}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) connect$unix(r0, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xeffffb, 0x0, 0xfffffffd, 0x1}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff800000002000000000000000", 0x1c) 1.574885863s ago: executing program 0 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000b06010800000000000000000300000708000940000000010900020073797a3200000000d9d00ca2a03353dc446ae10c7bf91338e5a478fab526bca55ad1aeea8d9bbe4f9e0dbbfa33fdfe06e8c6c3cf503228edc9db3922607dced7ab8afb1cfd08bc22b12cd39b2da9234475f1c96cfab54f9fadc85c108796b8b2176ef1f68cd5a8a522d5fe17debaa666a212da"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000043) (async) r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x200, @local, 0xfffffffd}, 0x1c) sendto$inet6(r1, 0x0, 0x100000, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}, 0xfffffffc}, 0x1c) (async, rerun: 64) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) (rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) write$vhost_msg(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002910140820528d7a7a00000000109021b0001000000000904000001ff443200090507", @ANYRES32], 0x0) 1.448384978s ago: executing program 1 (id=1346): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x7, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x2dc, 0x40011}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x800) lremovexattr(&(0x7f0000003d00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000380)=ANY=[]) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x8, 0x4, 0xfa}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r12, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000001540)={0x0, {{0xa, 0x4e22, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e20, 0x7, @remote, 0x3}}}, 0x108) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x20000004) r13 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r13, 0x0, 0x0) 1.226360769s ago: executing program 3 (id=1347): r0 = syz_open_dev$sndpcmc(&(0x7f0000000100), 0x1, 0x2001) r1 = socket$inet6(0xa, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac0541820000000000010902"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r2) r3 = socket(0x10, 0x3, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x56, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB, @ANYRESDEC, @ANYRESHEX=r3], 0x0) ioctl$EVIOCRMFF(r2, 0x83c0550b, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xfb92, @loopback, 0xe000}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000036000000620000000000000014000000000000002900000034000000000000000000000049bff032e2dfc251827f40e8b222ec02cb2a41de209927d80f494a9548c0c452251fb67b8d1587ce6d52de3476efda14ebe01772e298fc0297f0282fd579ddce23a5eac507f54fe34035aa000000000000"], 0x30}}], 0x1, 0x48c1) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000340)={0x2, 0x0, [{0x40000000, 0xa0, 0x0, 0x10, 0x4, 0xd, 0xfffff000}, {0xa, 0x1ff, 0x5, 0x5, 0x9, 0x10, 0x3}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r8 = socket(0x8, 0x803, 0xfffffffc) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a4000008dcf192edeb6052e538a9efb910203d6b0af0899befb4a9ec9f179a06c19ad3a2401ebd6866770b9b8074e0058fe", @ANYRES32=r10, @ANYBLOB="14000200ee040000ddf10300000000dfff000000c218a161fc0f9c14ef9f71cdef381f435f11560218"], 0x2c}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="140002000000000000dd40000000ffff2001000000dc77721caeb2afe2c0fce20000"], 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) socket$packet(0x11, 0x2, 0x300) 1.221021794s ago: executing program 4 (id=1348): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x3a) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, 0x0, 0x0, 0x6, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sched_setattr(r3, &(0x7f0000000040)={0x38, 0x0, 0x1, 0xffffffff, 0x1, 0x6, 0xffffffff00000000, 0xd, 0xf22, 0xda}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000a6ff0000", 0x39}], 0x1) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40010000, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) fsopen(0x0, 0x0) unshare(0x40000080) socketpair$unix(0x1, 0x1, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 263.530894ms ago: executing program 0 (id=1349): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042abd7000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c0100600180004050000010073693c000c000280060008000e000000"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x24008040) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e23, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x48043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @mcast2, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)=ANY=[]) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) socket(0x3, 0x3, 0x3083) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYRES16=r0]) 0s ago: executing program 2 (id=1350): socket$key(0xf, 0x3, 0x2) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x31, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r5}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0xfffffffffffffeb5, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000240)={0x1}) kernel console output (not intermixed with test programs): T9] usb 4-1: Using ep0 maxpacket: 16 [ 225.458944][ T9] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 225.470121][ T9] usb 4-1: config 0 has no interface number 0 [ 225.492876][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=49.f8 [ 225.514500][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.545760][ T30] audit: type=1326 audit(1764544413.968:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4c198f749 code=0x7ffc0000 [ 225.586796][ T9] usb 4-1: Product: syz [ 225.618961][ T9] usb 4-1: Manufacturer: syz [ 225.635025][ T9] usb 4-1: SerialNumber: syz [ 225.663684][ T9] usb 4-1: config 0 descriptor?? [ 225.796924][ T30] audit: type=1326 audit(1764544413.968:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4c198f749 code=0x7ffc0000 [ 225.945835][ T30] audit: type=1326 audit(1764544413.968:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4c198df90 code=0x7ffc0000 [ 225.996978][ T30] audit: type=1326 audit(1764544413.968:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4c198f34b code=0x7ffc0000 [ 226.085939][ T30] audit: type=1326 audit(1764544413.968:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4c198f34b code=0x7ffc0000 [ 226.147144][ T8103] fuse: Bad value for 'fd' [ 226.153002][ T8104] netlink: zone id is out of range [ 226.449947][ T8113] Cannot find del_set index 2 as target [ 226.945998][ T8121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 227.706909][ T5924] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 227.917862][ T5924] usb 2-1: device descriptor read/64, error -71 [ 228.078243][ T9] usb 4-1: USB disconnect, device number 31 [ 228.167486][ T5924] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 228.316688][ T5924] usb 2-1: device descriptor read/64, error -71 [ 228.448284][ T5924] usb usb2-port1: attempt power cycle [ 228.824277][ T5924] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 228.927658][ T5924] usb 2-1: device descriptor read/8, error -71 [ 229.276649][ T5924] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 229.318608][ T5924] usb 2-1: device descriptor read/8, error -71 [ 229.467126][ T5924] usb usb2-port1: unable to enumerate USB device [ 229.832588][ T8160] netlink: 'syz.3.682': attribute type 4 has an invalid length. [ 229.949753][ T8163] Set syz1 is full, maxelem 14 reached [ 230.472753][ T8177] netlink: 'syz.1.687': attribute type 10 has an invalid length. [ 230.531677][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.549755][ T8177] team0: Port device bond0 added [ 230.901317][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 231.144307][ T8195] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 231.698255][ T5910] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 231.802841][ T8203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 231.886656][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 231.893843][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 231.909011][ T5910] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 231.918998][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.927787][ T5910] usb 2-1: Product: syz [ 231.931968][ T5910] usb 2-1: Manufacturer: syz [ 231.937772][ T5910] usb 2-1: SerialNumber: syz [ 231.945365][ T5910] usb 2-1: config 0 descriptor?? [ 231.953908][ T5910] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 231.963258][ T5910] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 232.155276][ T8201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'. [ 232.691411][ T5910] em28xx 2-1:0.0: unknown em28xx chip ID (32) [ 233.134171][ T8212] bridge0: port 3(macsec1) entered blocking state [ 233.141228][ T8212] bridge0: port 3(macsec1) entered disabled state [ 233.148806][ T8212] macsec1: entered allmulticast mode [ 233.154318][ T8212] bridge0: entered allmulticast mode [ 233.162951][ T8212] macsec1: left allmulticast mode [ 233.168495][ T8212] bridge0: left allmulticast mode [ 233.311385][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.315649][ T8217] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 233.345569][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.353092][ T8220] netlink: 'syz.4.701': attribute type 10 has an invalid length. [ 233.381928][ T5910] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 233.390685][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.428205][ T5910] em28xx 2-1:0.0: board has no eeprom [ 233.441118][ T8221] bond0: (slave geneve2): making interface the new active one [ 233.463546][ T8221] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 233.488359][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.499750][ T5910] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 233.524031][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.527122][ T5910] em28xx 2-1:0.0: dvb set to bulk mode. [ 233.534148][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.566688][ T24] em28xx 2-1:0.0: Binding DVB extension [ 233.604114][ T5910] usb 2-1: USB disconnect, device number 31 [ 233.635419][ T5910] em28xx 2-1:0.0: Disconnecting em28xx [ 233.713563][ T24] em28xx 2-1:0.0: Registering input extension [ 233.740805][ T5910] em28xx 2-1:0.0: Closing input extension [ 233.764822][ T8234] netlink: 'syz.3.704': attribute type 10 has an invalid length. [ 233.797253][ T5910] em28xx 2-1:0.0: Freeing device [ 233.998671][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 234.061183][ T8246] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 234.126633][ T24] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 234.264565][ T8252] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 234.290968][ T8252] bond4: entered promiscuous mode [ 234.296247][ T8252] bond4: entered allmulticast mode [ 234.301939][ T8252] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.311251][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 234.343632][ T24] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 234.439071][ T24] usb 5-1: config 1 interface 0 altsetting 247 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.492113][ T24] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.533770][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 234.568429][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.40 [ 234.608615][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.635995][ T24] usb 5-1: Product: syz [ 234.648000][ T24] usb 5-1: Manufacturer: syz [ 234.659067][ T24] usb 5-1: SerialNumber: syz [ 234.773562][ T8264] syz.0.717 (8264): /proc/8259/oom_adj is deprecated, please use /proc/8259/oom_score_adj instead. [ 234.887277][ T5843] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 235.026904][ T5843] usb 2-1: device descriptor read/64, error -71 [ 235.138090][ T24] usbhid 5-1:1.0: can't add hid device: -71 [ 235.144125][ T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 235.198105][ T24] usb 5-1: USB disconnect, device number 38 [ 235.326708][ T5843] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 235.416892][ T2154] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 235.486631][ T5843] usb 2-1: device descriptor read/64, error -71 [ 235.566893][ T2154] usb 3-1: device descriptor read/64, error -71 [ 235.607001][ T5843] usb usb2-port1: attempt power cycle [ 235.707306][ T5924] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 235.826649][ T2154] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 235.882352][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.897348][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 235.903787][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 235.925611][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.955936][ T5924] usb 4-1: config 0 descriptor?? [ 235.966357][ T5843] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 235.966645][ T2154] usb 3-1: device descriptor read/64, error -71 [ 236.008236][ T5843] usb 2-1: device descriptor read/8, error -71 [ 236.058561][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.079296][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 236.097260][ T2154] usb usb3-port1: attempt power cycle [ 236.107666][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.129213][ T24] usb 5-1: config 0 descriptor?? [ 236.149198][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 236.256665][ T5843] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 236.299167][ T5843] usb 2-1: device descriptor read/8, error -71 [ 236.410498][ T5843] usb usb2-port1: unable to enumerate USB device [ 236.456705][ T2154] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 236.470954][ T5924] logitech-djreceiver 0003:046D:C71F.000B: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 236.487337][ T2154] usb 3-1: device descriptor read/8, error -71 [ 236.538656][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 236.570995][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.590133][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 236.598960][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 236.616692][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 236.661415][ T5924] usb 4-1: USB disconnect, device number 32 [ 236.746848][ T2154] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 236.787511][ T2154] usb 3-1: device descriptor read/8, error -71 [ 236.807521][ T8292] loop5: detected capacity change from 0 to 1319 [ 236.828638][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 236.835756][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 236.857973][ T8292] loop5: unable to read partition table [ 236.864040][ T8292] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 236.864040][ T8292] ) failed (rc=-5) [ 236.879713][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 236.886872][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 236.893937][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 236.901744][ T2154] usb usb3-port1: unable to enumerate USB device [ 236.909445][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 236.916329][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 236.924057][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 236.931675][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 236.939005][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 236.951560][ T24] pwc: Registered as video103. [ 236.978138][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 237.005963][ T24] usb 5-1: USB disconnect, device number 39 [ 238.151282][ T5843] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 238.337776][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 238.352909][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.385888][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.398702][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 238.412401][ T5843] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 238.424078][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.442605][ T5843] usb 2-1: config 0 descriptor?? [ 238.587410][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 238.744949][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 238.788677][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.799166][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 238.808863][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.820578][ T24] usb 3-1: config 0 descriptor?? [ 238.830071][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 239.031740][ T5843] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input42 [ 239.110063][ T5843] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input43 [ 239.208717][ T5843] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 239.243533][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 239.587599][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 239.617122][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 239.631068][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 239.707157][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 239.927658][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 239.938902][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 239.946181][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 239.955174][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 239.965836][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 239.973335][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 239.980666][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 239.988100][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 239.995543][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 240.003268][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 240.027559][ T24] pwc: Registered as video103. [ 240.040278][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input44 [ 240.114498][ T24] usb 3-1: USB disconnect, device number 33 [ 240.137281][ C0] kye 0003:0458:5011.000C: usb_submit_urb(ctrl) failed: -1 [ 240.927985][ T5910] usb 2-1: USB disconnect, device number 36 [ 241.007135][ T5924] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 241.130812][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'. [ 241.154323][ T8367] macsec1: entered allmulticast mode [ 241.176665][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 241.196666][ T8367] bridge0: entered allmulticast mode [ 241.202864][ T8367] bridge0: port 3(macsec1) entered blocking state [ 241.215378][ T8367] bridge0: port 3(macsec1) entered disabled state [ 241.222421][ T5924] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 241.245823][ T8367] bridge0: left allmulticast mode [ 241.306232][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 241.350738][ T5924] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 241.396756][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.427718][ T8370] usb usb8: usbfs: process 8370 (syz.3.748) did not claim interface 0 before use [ 241.520548][ T5924] usb 3-1: config 0 descriptor?? [ 241.541410][ T8369] usb usb8: usbfs: process 8369 (syz.3.748) did not claim interface 0 before use [ 241.785833][ T5924] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 241.835707][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.890482][ T5924] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 241.930679][ T5924] usb 3-1: media controller created [ 242.068062][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.346661][ T2154] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 242.410078][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 242.459801][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.467289][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.509888][ T2154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.538634][ T2154] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 242.566089][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.636789][ T2154] usb 4-1: config 0 descriptor?? [ 242.657038][ T2154] pwc: Askey VC010 type 2 USB webcam detected. [ 242.837466][ T5924] az6027: usb out operation failed. (-71) [ 242.851160][ T5924] stb0899_attach: Driver disabled by Kconfig [ 242.875581][ T5924] az6027: no front-end attached [ 242.875581][ T5924] [ 242.925471][ T5924] az6027: usb out operation failed. (-71) [ 242.943699][ T5924] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 242.965899][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 242.999038][ T5924] dvb-usb: schedule remote query interval to 400 msecs. [ 243.020782][ T5924] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 243.057010][ T2154] pwc: recv_control_msg error -32 req 02 val 2b00 [ 243.075034][ T5924] usb 3-1: USB disconnect, device number 34 [ 243.078468][ T2154] pwc: recv_control_msg error -32 req 02 val 2700 [ 243.099181][ T2154] pwc: recv_control_msg error -32 req 02 val 2c00 [ 243.116459][ T2154] pwc: recv_control_msg error -32 req 04 val 1000 [ 243.183194][ T2154] pwc: recv_control_msg error -32 req 04 val 1300 [ 243.286479][ T5924] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 243.424618][ T2154] pwc: recv_control_msg error -71 req 02 val 2000 [ 243.466987][ T2154] pwc: recv_control_msg error -71 req 02 val 2100 [ 243.497059][ T2154] pwc: recv_control_msg error -71 req 04 val 1500 [ 243.514476][ T2154] pwc: recv_control_msg error -71 req 02 val 2500 [ 243.535018][ T2154] pwc: recv_control_msg error -71 req 02 val 2400 [ 243.560137][ T2154] pwc: recv_control_msg error -71 req 02 val 2600 [ 243.585971][ T2154] pwc: recv_control_msg error -71 req 02 val 2900 [ 243.607820][ T2154] pwc: recv_control_msg error -71 req 02 val 2800 [ 243.628180][ T2154] pwc: recv_control_msg error -71 req 04 val 1100 [ 243.665790][ T2154] pwc: recv_control_msg error -71 req 04 val 1200 [ 243.692638][ T2154] pwc: Registered as video103. [ 243.746356][ T2154] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input46 [ 243.786988][ T5924] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 243.792079][ T2154] usb 4-1: USB disconnect, device number 33 [ 243.933590][ T8430] Cannot find del_set index 2 as target [ 243.960297][ T5924] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 244.010086][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.026840][ T5908] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 244.061965][ T5924] usb 2-1: config 0 descriptor?? [ 244.117068][ T5924] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 244.222515][ T5908] usb 5-1: config 0 has no interfaces? [ 244.251414][ T5908] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 244.317018][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.370312][ T5908] usb 5-1: config 0 descriptor?? [ 244.473922][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 244.524750][ T8448] netlink: 72 bytes leftover after parsing attributes in process `syz.1.759'. [ 244.582025][ T8450] netlink: zone id is out of range [ 244.738654][ T5924] gspca_sunplus: reg_w_riv err -71 [ 244.755349][ T5924] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 244.847436][ T5924] usb 2-1: USB disconnect, device number 37 [ 244.873239][ T8450] netlink: set zone limit has 4 unknown bytes [ 244.880245][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 245.057175][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 245.104972][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 245.147428][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 245.177584][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.197618][ T9] usb 4-1: Product: syz [ 245.207836][ T9] usb 4-1: Manufacturer: syz [ 245.219363][ T9] usb 4-1: SerialNumber: syz [ 245.265286][ T9] usb 4-1: config 0 descriptor?? [ 245.284884][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.313162][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 245.490084][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.3.773'. [ 245.763062][ T8463] ip6tnl0: Caught tx_queue_len zero misconfig [ 245.878847][ T5924] usb 5-1: USB disconnect, device number 40 [ 246.241589][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (32) [ 246.844230][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.854351][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.947063][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 246.947109][ T9] em28xx 4-1:0.0: board has no eeprom [ 247.026627][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 247.026658][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 247.027679][ T5924] em28xx 4-1:0.0: Binding DVB extension [ 247.049579][ T9] usb 4-1: USB disconnect, device number 34 [ 247.050900][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 247.192245][ T5924] em28xx 4-1:0.0: Registering input extension [ 247.317213][ T9] em28xx 4-1:0.0: Closing input extension [ 247.389368][ T9] em28xx 4-1:0.0: Freeing device [ 247.654853][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.785'. [ 247.867123][ T8497] netlink: 'syz.2.784': attribute type 7 has an invalid length. [ 248.326646][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 248.478248][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 248.485810][ T24] usb 4-1: config 0 has no interfaces? [ 248.495957][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 248.510291][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 248.523261][ T24] usb 4-1: Manufacturer: syz [ 248.534231][ T24] usb 4-1: config 0 descriptor?? [ 248.692132][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 248.725919][ T8514] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 248.746483][ T8512] bond2: option ad_actor_sys_prio: invalid value (0) [ 248.753829][ T8512] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 248.766057][ T8512] bond2 (unregistering): Released all slaves [ 248.857955][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.941985][ T8518] bond0: (slave geneve2): making interface the new active one [ 249.004433][ T8518] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 249.054017][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.109132][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.178891][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.197203][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.483615][ T8529] netlink: 'syz.0.794': attribute type 3 has an invalid length. [ 249.981593][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.800'. [ 250.286644][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 250.306642][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 250.467890][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 250.481532][ T9] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 250.497138][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.510509][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 250.516899][ T9] usb 2-1: Product: syz [ 250.529180][ T9] usb 2-1: Manufacturer: syz [ 250.540950][ T9] usb 2-1: SerialNumber: syz [ 250.559983][ T24] usb 5-1: config 5 has no interfaces? [ 250.566049][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 250.568971][ T9] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 250.596605][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.985099][ T8546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.056910][ T8546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.097762][ T9] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 251.100107][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.118234][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.188208][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.268530][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.268909][ T5924] usb 4-1: USB disconnect, device number 35 [ 251.352500][ T24] usb 5-1: string descriptor 0 read error: -71 [ 251.394112][ T24] usb 5-1: USB disconnect, device number 41 [ 251.652857][ T8563] FAULT_INJECTION: forcing a failure. [ 251.652857][ T8563] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 251.669000][ T8563] CPU: 1 UID: 0 PID: 8563 Comm: syz.3.805 Not tainted syzkaller #0 PREEMPT(full) [ 251.669025][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.669037][ T8563] Call Trace: [ 251.669045][ T8563] [ 251.669053][ T8563] dump_stack_lvl+0x189/0x250 [ 251.669081][ T8563] ? __pfx____ratelimit+0x10/0x10 [ 251.669103][ T8563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.669125][ T8563] ? __pfx__printk+0x10/0x10 [ 251.669144][ T8563] ? fs_reclaim_acquire+0x7d/0x100 [ 251.669170][ T8563] should_fail_ex+0x414/0x560 [ 251.669199][ T8563] prepare_alloc_pages+0x213/0x610 [ 251.669222][ T8563] __alloc_frozen_pages_noprof+0x123/0x370 [ 251.669243][ T8563] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 251.669269][ T8563] ? policy_nodemask+0x27c/0x720 [ 251.669293][ T8563] alloc_pages_mpol+0x232/0x4a0 [ 251.669317][ T8563] vma_alloc_folio_noprof+0xe4/0x200 [ 251.669338][ T8563] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 251.669369][ T8563] folio_prealloc+0x30/0x180 [ 251.669395][ T8563] do_wp_page+0x1231/0x5800 [ 251.669440][ T8563] ? __pfx_do_wp_page+0x10/0x10 [ 251.669458][ T8563] ? do_raw_spin_lock+0x121/0x290 [ 251.669483][ T8563] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 251.669516][ T8563] __handle_mm_fault+0x1033/0x5400 [ 251.669553][ T8563] ? __pfx___handle_mm_fault+0x10/0x10 [ 251.669588][ T8563] ? follow_page_pte+0xd03/0x13e0 [ 251.669620][ T8563] handle_mm_fault+0x40a/0x8e0 [ 251.669653][ T8563] __get_user_pages+0x165c/0x2a00 [ 251.669716][ T8563] __gup_longterm_locked+0xde4/0x1660 [ 251.669746][ T8563] ? __lock_acquire+0xab9/0xd20 [ 251.669777][ T8563] pin_user_pages_remote+0xd4/0x120 [ 251.669803][ T8563] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 251.669830][ T8563] ? down_read+0x1ad/0x2e0 [ 251.669850][ T8563] process_vm_rw+0x593/0xaf0 [ 251.669884][ T8563] ? __pfx_process_vm_rw+0x10/0x10 [ 251.669902][ T8563] ? rcu_read_lock_any_held+0xb3/0x120 [ 251.669951][ T8563] ? __pfx_vfs_write+0x10/0x10 [ 251.669992][ T8563] ? ksys_write+0x22a/0x250 [ 251.670016][ T8563] ? __pfx_ksys_write+0x10/0x10 [ 251.670039][ T8563] __x64_sys_process_vm_writev+0xe0/0x100 [ 251.670064][ T8563] do_syscall_64+0xfa/0xfa0 [ 251.670087][ T8563] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.670107][ T8563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.670123][ T8563] ? clear_bhb_loop+0x60/0xb0 [ 251.670145][ T8563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.670162][ T8563] RIP: 0033:0x7fe4c198f749 [ 251.670178][ T8563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.670193][ T8563] RSP: 002b:00007fe4c2814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 251.670213][ T8563] RAX: ffffffffffffffda RBX: 00007fe4c1be5fa0 RCX: 00007fe4c198f749 [ 251.670227][ T8563] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 00000000000001fa [ 251.670238][ T8563] RBP: 00007fe4c2814090 R08: 0000000000000001 R09: 0000000000000000 [ 251.670249][ T8563] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 251.670260][ T8563] R13: 00007fe4c1be6038 R14: 00007fe4c1be5fa0 R15: 00007fe4c1d0fa28 [ 251.670291][ T8563] [ 252.313321][ T8577] SET target dimension over the limit! [ 252.604997][ T8594] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 252.660685][ T8597] netlink: 'syz.4.817': attribute type 4 has an invalid length. [ 252.663073][ T8596] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 252.698247][ T8594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 252.709517][ T8597] netlink: 152 bytes leftover after parsing attributes in process `syz.4.817'. [ 252.840033][ T8596] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 252.890167][ T8599] bond3: (slave geneve3): making interface the new active one [ 252.901958][ T8599] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 252.989001][ T8597] .`: renamed from bond0 (while UP) [ 253.343741][ T9] usb 2-1: USB disconnect, device number 38 [ 254.492161][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 254.508862][ T8633] macsec1: entered allmulticast mode [ 254.514832][ T8633] bridge0: entered allmulticast mode [ 254.522952][ T8633] bridge0: port 3(macsec1) entered blocking state [ 254.530299][ T8633] bridge0: port 3(macsec1) entered disabled state [ 254.544846][ T8633] bridge0: left allmulticast mode [ 254.545281][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.830'. [ 254.586210][ T8635] erspan0: entered promiscuous mode [ 254.594559][ T8635] erspan0: left promiscuous mode [ 254.784306][ T8640] netlink: 156 bytes leftover after parsing attributes in process `syz.3.832'. [ 254.916287][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.833'. [ 255.258958][ T8653] bridge2: entered promiscuous mode [ 255.373617][ T8658] Cannot find del_set index 2 as target [ 255.623457][ T8666] bridge0: entered promiscuous mode [ 255.648685][ T8666] bridge0: port 3(macsec1) entered blocking state [ 255.655551][ T8666] bridge0: port 3(macsec1) entered disabled state [ 255.663181][ T8666] macsec1: entered allmulticast mode [ 255.669235][ T8666] bridge0: entered allmulticast mode [ 255.680806][ T8666] macsec1: left allmulticast mode [ 255.688472][ T8666] bridge0: left allmulticast mode [ 255.714524][ T8666] bridge0: left promiscuous mode [ 255.726707][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 255.888453][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 255.901133][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.932586][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.939138][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.986066][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.036696][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 256.087112][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 256.116720][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.147612][ T9] usb 4-1: config 0 descriptor?? [ 256.187281][ T8676] bridge0: port 3(macsec1) entered blocking state [ 256.194024][ T8676] bridge0: port 3(macsec1) entered disabled state [ 256.204207][ T8676] macsec1: entered allmulticast mode [ 256.210912][ T8676] bridge0: entered allmulticast mode [ 256.220845][ T8676] macsec1: left allmulticast mode [ 256.225997][ T8676] bridge0: left allmulticast mode [ 256.276791][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 256.631977][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000D/input/input51 [ 256.665710][ T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000D/input/input52 [ 256.697162][ T9] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 257.027975][ T8690] fuse: Bad value for 'fd' [ 257.168076][ T8690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 257.301199][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.308609][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.776791][ T5956] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 257.797505][ C1] kye 0003:0458:5011.000D: usb_submit_urb(ctrl) failed: -1 [ 257.840544][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 257.840558][ T30] audit: type=1326 audit(1764544446.758:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 257.868944][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.902361][ T30] audit: type=1326 audit(1764544446.758:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 257.927020][ T30] audit: type=1326 audit(1764544446.758:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 257.948324][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.949829][ T9] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 257.967656][ T30] audit: type=1326 audit(1764544446.758:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 257.977625][ T5956] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 257.989823][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.993429][ T30] audit: type=1326 audit(1764544446.758:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 258.030508][ T30] audit: type=1326 audit(1764544446.758:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 258.031371][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.052727][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.068505][ T30] audit: type=1326 audit(1764544446.758:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 258.091335][ T30] audit: type=1326 audit(1764544446.758:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 258.128274][ T5956] usb 2-1: config 0 descriptor?? [ 258.141226][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 258.147682][ T30] audit: type=1326 audit(1764544446.768:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 258.169869][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.202634][ T30] audit: type=1326 audit(1764544446.768:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8696 comm="syz.0.851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9dd8f749 code=0x7ffc0000 [ 258.291272][ T8709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.599058][ T5956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 258.683645][ T5956] pwc: recv_control_msg error -32 req 02 val 2700 [ 258.727599][ T5956] pwc: recv_control_msg error -32 req 02 val 2c00 [ 258.767063][ T5956] pwc: recv_control_msg error -32 req 04 val 1000 [ 258.778136][ T5924] usb 4-1: USB disconnect, device number 36 [ 258.855887][ T5956] pwc: recv_control_msg error -32 req 04 val 1300 [ 258.936016][ T5956] pwc: recv_control_msg error -32 req 04 val 1400 [ 259.410579][ T5956] pwc: recv_control_msg error -71 req 04 val 1500 [ 259.442777][ T5956] pwc: recv_control_msg error -71 req 02 val 2500 [ 259.443159][ T5956] pwc: recv_control_msg error -71 req 02 val 2400 [ 259.443549][ T5956] pwc: recv_control_msg error -71 req 02 val 2600 [ 259.443897][ T5956] pwc: recv_control_msg error -71 req 02 val 2900 [ 259.444209][ T5956] pwc: recv_control_msg error -71 req 02 val 2800 [ 259.444779][ T5956] pwc: recv_control_msg error -71 req 04 val 1100 [ 259.448287][ T5956] pwc: recv_control_msg error -71 req 04 val 1200 [ 259.453066][ T5956] pwc: Registered as video103. [ 259.476247][ T8718] dlm: plock device version mismatch: kernel (1.2.0), user (50399747.4293263360.0) [ 259.512024][ T5956] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input53 [ 259.783754][ T5956] usb 2-1: USB disconnect, device number 40 [ 260.416721][ T5843] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 260.576618][ T5843] usb 5-1: device descriptor read/64, error -71 [ 260.583109][ T5924] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 260.736620][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 260.743525][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 260.755587][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.781794][ T5924] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 260.796632][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.816195][ T5924] usb 3-1: Product: syz [ 260.822746][ T5924] usb 3-1: Manufacturer: syz [ 260.827569][ T5843] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 260.842313][ T5924] usb 3-1: SerialNumber: syz [ 260.861535][ T5924] usb 3-1: config 0 descriptor?? [ 260.875276][ T5924] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 260.932504][ T5924] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 260.956633][ T5843] usb 5-1: device descriptor read/64, error -71 [ 261.068452][ T5843] usb usb5-port1: attempt power cycle [ 261.106337][ T43] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 261.135704][ T43] dvb_usb_dibusb_mb 1-1:13.120: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 261.197566][ T43] dvb-usb: found a 'Artec T1 USB2.0 TVBOX (please check the warm ID)' in cold state, will try to load a firmware [ 261.227509][ T43] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 261.241696][ T43] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 261.467495][ T5843] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 261.491758][ T5924] em28xx 3-1:0.0: chip ID is em2874 [ 261.549223][ T5843] usb 5-1: device descriptor read/8, error -71 [ 261.790850][ T5843] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 261.857740][ T5843] usb 5-1: device descriptor read/8, error -71 [ 262.126851][ T5843] usb usb5-port1: unable to enumerate USB device [ 262.423393][ T5923] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 262.716687][ T5923] usb 2-1: device descriptor read/64, error -71 [ 262.886620][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 262.966668][ T5923] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 263.046773][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 263.102234][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 263.107473][ T5923] usb 2-1: device descriptor read/64, error -71 [ 263.198470][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 263.226302][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.234749][ T5923] usb usb2-port1: attempt power cycle [ 263.251567][ T8765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.318948][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 263.328587][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.338779][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 263.348963][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 263.362435][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 263.372212][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.393398][ T24] usb 4-1: config 0 descriptor?? [ 263.454042][ T1331] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.467526][ T1331] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.480409][ T1331] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.490303][ T1331] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.576673][ T5923] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 263.618453][ T5923] usb 2-1: device descriptor read/8, error -71 [ 263.671767][ T24] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 263.720164][ T24] usb 4-1: USB disconnect, device number 37 [ 263.754452][ T24] usblp0: removed [ 263.770355][ T5843] usb 3-1: USB disconnect, device number 35 [ 263.782435][ T5843] em28xx 3-1:0.0: Disconnecting em28xx [ 263.790449][ T5843] em28xx 3-1:0.0: Freeing device [ 263.880321][ T5923] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 263.896435][ T8767] mmap: syz.2.868 (8767) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 263.949142][ T5923] usb 2-1: device descriptor read/8, error -71 [ 264.210111][ T5923] usb usb2-port1: unable to enumerate USB device [ 265.066642][ T5924] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 265.226639][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 265.233835][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 265.245777][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.260020][ T5924] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.270972][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.279987][ T5924] usb 5-1: Product: syz [ 265.284229][ T5924] usb 5-1: Manufacturer: syz [ 265.289122][ T5924] usb 5-1: SerialNumber: syz [ 265.296897][ T5924] usb 5-1: config 0 descriptor?? [ 265.305121][ T5924] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.314820][ T5924] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 265.336701][ T5923] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 265.496845][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 265.509170][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.532247][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 265.542152][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 265.550992][ T5923] usb 3-1: SerialNumber: syz [ 265.560505][ T5923] usb 3-1: config 0 descriptor?? [ 265.572208][ T5923] uvcvideo 3-1:0.0: Found UVC 0.00 device (05ac:8501) [ 265.582163][ T5923] uvcvideo 3-1:0.0: No valid video chain found. [ 265.781148][ T2154] usb 3-1: USB disconnect, device number 36 [ 265.894615][ T8810] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 265.910414][ T5924] em28xx 5-1:0.0: chip ID is em2874 [ 265.928106][ T8810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.960246][ T8810] bond4: (slave geneve4): making interface the new active one [ 265.969066][ T8810] bond4: (slave geneve4): Enslaving as an active interface with an up link [ 266.404580][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 266.550099][ T8825] team0: Port device batadv1 added [ 268.180265][ T5924] usb 5-1: USB disconnect, device number 46 [ 268.196133][ T5924] em28xx 5-1:0.0: Disconnecting em28xx [ 268.223728][ T5924] em28xx 5-1:0.0: Freeing device [ 268.406870][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 268.587029][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 268.603843][ T24] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 268.624297][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.714805][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 268.726739][ T5924] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 268.734793][ T24] usb 2-1: config 0 has no interface number 0 [ 268.752898][ T24] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.785923][ T24] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 268.816875][ T24] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 268.899038][ T24] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 268.900588][ T8854] vlan2: entered allmulticast mode [ 268.932182][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 268.948313][ T5924] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 268.948885][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.982978][ T24] usb 2-1: Product: syz [ 269.002656][ T24] usb 2-1: Manufacturer: syz [ 269.022175][ T24] usb 2-1: SerialNumber: syz [ 269.055144][ T24] usb 2-1: config 0 descriptor?? [ 269.075333][ T8842] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 269.085808][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.097387][ T5924] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 269.111800][ T5924] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 269.121147][ T5924] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 269.130052][ T5924] usb 5-1: Product: syz [ 269.134269][ T5924] usb 5-1: Manufacturer: syz [ 269.138951][ T5924] usb 5-1: SerialNumber: syz [ 269.146036][ T5924] usb 5-1: config 0 descriptor?? [ 269.161018][ T5924] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.639484][ T8871] input: syz1 as /devices/virtual/input/input57 [ 270.066273][ T5924] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 270.066795][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.089265][ T5924] usb 5-1: USB disconnect, device number 47 [ 270.146615][ T5956] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 270.164912][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.368152][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 270.425822][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.537512][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.662381][ T5956] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.771310][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.849252][ T5956] usb 3-1: Product: syz [ 270.883888][ T5956] usb 3-1: Manufacturer: syz [ 270.964772][ T5956] usb 3-1: SerialNumber: syz [ 271.027942][ T5956] usb 3-1: config 0 descriptor?? [ 271.052294][ T5956] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.111645][ T5956] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 271.699074][ T5956] em28xx 3-1:0.0: chip ID is em2874 [ 272.220933][ T5924] usb 2-1: USB disconnect, device number 45 [ 273.112996][ T8920] netlink: 'syz.0.917': attribute type 10 has an invalid length. [ 273.295631][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.317017][ T8918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.482166][ T8918] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 273.525690][ T8918] bond1: left promiscuous mode [ 273.530804][ T8918] erspan1: left promiscuous mode [ 273.536904][ T8918] bond1: left allmulticast mode [ 273.544597][ T8918] erspan1: left allmulticast mode [ 273.615526][ T8918] bond2: left promiscuous mode [ 273.625896][ T8918] bond2: left allmulticast mode [ 273.646345][ T8918] bond3: left promiscuous mode [ 273.656596][ T8918] bond3: left allmulticast mode [ 273.675901][ T8918] bond4: left promiscuous mode [ 273.680871][ T8918] bond4: left allmulticast mode [ 273.695376][ T8920] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.708762][ T8920] .`: (slave team0): Enslaving as an active interface with an up link [ 273.999605][ T5956] usb 3-1: USB disconnect, device number 37 [ 274.019049][ T5956] em28xx 3-1:0.0: Disconnecting em28xx [ 274.037486][ T5956] em28xx 3-1:0.0: Freeing device [ 274.095759][ T49] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.134456][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.165308][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.203865][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.287337][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 274.458487][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 274.476884][ T24] usb 2-1: config 0 has an invalid interface number: 254 but max is 0 [ 274.496745][ T24] usb 2-1: config 0 has no interface number 0 [ 274.503753][ T24] usb 2-1: config 0 interface 254 has no altsetting 0 [ 274.550421][ T24] usb 2-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 274.565001][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.575531][ T24] usb 2-1: Product: syz [ 274.580557][ T24] usb 2-1: Manufacturer: syz [ 274.585325][ T24] usb 2-1: SerialNumber: syz [ 274.596661][ T24] usb 2-1: config 0 descriptor?? [ 274.606084][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 274.666748][ T5956] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 274.804910][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.820165][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.826611][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 274.835373][ T5956] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.846125][ T5956] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.865486][ T24] gspca_sn9c2028: read1 error -71 [ 274.875080][ T5956] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 274.890714][ T24] gspca_sn9c2028: read1 error -71 [ 274.899162][ T5956] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.909015][ T24] gspca_sn9c2028: read1 error -71 [ 274.939447][ T24] sn9c2028 2-1:0.254: probe with driver sn9c2028 failed with error -71 [ 274.971070][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 275.001147][ T5956] usb 3-1: SerialNumber: syz [ 275.028320][ T24] usb 2-1: USB disconnect, device number 46 [ 275.112472][ T5956] hub 3-1:1.0: bad descriptor, ignoring hub [ 275.179555][ T5956] hub 3-1:1.0: probe with driver hub failed with error -5 [ 275.205143][ T5956] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 275.293050][ T5924] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 275.352549][ T8932] sctp: [Deprecated]: syz.2.923 (pid 8932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.352549][ T8932] Use struct sctp_sack_info instead [ 275.478386][ T5924] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 275.510492][ T8948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.558239][ T5924] usb 5-1: config 0 has no interface number 0 [ 275.564420][ T5924] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 275.598953][ T5924] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 275.624908][ T5924] usb 5-1: config 0 interface 255 has no altsetting 0 [ 275.650857][ T5924] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 275.686754][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.717573][ T5924] usb 5-1: config 0 descriptor?? [ 275.740913][ T5924] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 275.877065][ T5923] usb 3-1: USB disconnect, device number 38 [ 275.986628][ T5956] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 276.037450][ T5924] usb 5-1: USB disconnect, device number 48 [ 276.172493][ T5956] usb 4-1: config 0 has no interfaces? [ 276.433991][ T5956] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 276.486601][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.523342][ T5956] usb 4-1: config 0 descriptor?? [ 276.774118][ T8961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'. [ 276.886727][ T5923] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 277.067774][ T5956] usb 4-1: USB disconnect, device number 38 [ 277.106608][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 277.119441][ T5923] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 277.145688][ T5923] usb 3-1: config 0 has no interface number 0 [ 277.152089][ T5923] usb 3-1: config 0 interface 182 has no altsetting 0 [ 277.168836][ T5923] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 277.186642][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.206779][ T5923] usb 3-1: Product: syz [ 277.211991][ T5923] usb 3-1: Manufacturer: syz [ 277.226008][ T5923] usb 3-1: SerialNumber: syz [ 277.257569][ T5923] usb 3-1: config 0 descriptor?? [ 277.277006][ T24] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 277.458328][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 277.483459][ T24] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 277.497354][ T5923] usb 3-1: USB disconnect, device number 39 [ 277.503628][ T24] usb 2-1: config 0 has no interface number 0 [ 277.523580][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 277.523610][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.523630][ T24] usb 2-1: Product: syz [ 277.523644][ T24] usb 2-1: Manufacturer: syz [ 277.523659][ T24] usb 2-1: SerialNumber: syz [ 277.560182][ T24] usb 2-1: config 0 descriptor?? [ 277.568236][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 277.568277][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 277.568277][ T24] [ 277.568312][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 277.568312][ T24] [ 277.568327][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 277.572538][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.573868][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 277.573929][ T24] usb 2-1: media controller created [ 277.573971][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 277.573994][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 277.574048][ T24] dvb-usb: MAC address reading failed. [ 277.636933][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.643226][ T8978] tty tty2: ldisc open failed (-12), clearing slot 1 [ 277.790331][ T8965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.811327][ T8965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.858752][ T24] DVB: Unable to find symbol stb0899_attach() [ 277.865023][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 277.957428][ T24] rc_core: IR keymap rc-tt-1500 not found [ 277.967899][ T24] Registered IR keymap rc-empty [ 277.974727][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 277.988788][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input59 [ 278.004386][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 278.025546][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 278.025546][ T24] [ 278.040956][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 278.060710][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.104159][ T8990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.129306][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 278.141780][ T24] dvb-usb: error -22 while querying for an remote control event. [ 278.276899][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 278.283962][ T24] dvb-usb: error -22 while querying for an remote control event. [ 278.340894][ T8990] bridge2: left promiscuous mode [ 278.366316][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.385659][ T24] usb 2-1: USB disconnect, device number 47 [ 278.442087][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.530191][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 278.563440][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.575007][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.232708][ T9017] dlm: non-version read from control device 36 [ 279.391959][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 279.730008][ T9028] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 279.784206][ T9028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.839658][ T9031] bond1: (slave geneve3): making interface the new active one [ 279.851254][ T9031] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 280.356621][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 280.683395][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 280.806972][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.815009][ T24] usb 4-1: Product: syz [ 280.840711][ T24] usb 4-1: Manufacturer: syz [ 280.845609][ T24] usb 4-1: SerialNumber: syz [ 280.873083][ T24] usb 4-1: config 0 descriptor?? [ 281.481838][ T9061] ip6t_srh: unknown srh invflags 4000 [ 281.747076][ T9062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.788369][ T9062] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.864669][ T9062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.126868][ T24] usb 4-1: f81604_read: reg: 105 failed: -ETIMEDOUT [ 283.133558][ T24] f81604 4-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT [ 283.170444][ T24] f81604 4-1:0.0: probe with driver f81604 failed with error -110 [ 283.526351][ T9091] netlink: 'syz.4.967': attribute type 4 has an invalid length. [ 284.007466][ T9096] netlink: 'syz.0.969': attribute type 1 has an invalid length. [ 284.065999][ T9096] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.074541][ T5924] usb 4-1: USB disconnect, device number 39 [ 284.089979][ T9098] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 284.129883][ T9098] Set syz1 is full, maxelem 14 reached [ 284.132964][ T9100] bond2: (slave geneve3): making interface the new active one [ 284.144226][ T9100] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 284.156722][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 284.316598][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 284.330492][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=28.40 [ 284.342000][ T24] usb 2-1: New USB device strings: Mfr=221, Product=0, SerialNumber=0 [ 284.376673][ T24] usb 2-1: Manufacturer: syz [ 284.501684][ T9116] netlink: 'syz.4.977': attribute type 10 has an invalid length. [ 284.517955][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.537136][ T5908] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 284.557628][ T9116] .`: (slave team0): Enslaving as an active interface with an up link [ 284.572921][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 284.599950][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 284.618052][ T9093] xt_NFQUEUE: number of total queues is 0 [ 284.634919][ T9093] loop4: detected capacity change from 0 to 7 [ 284.642662][ T24] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 284.664255][ T24] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 284.679133][ T5856] Dev loop4: unable to read RDB block 7 [ 284.684753][ T5856] loop4: unable to read partition table [ 284.704514][ T5856] loop4: partition table beyond EOD, truncated [ 284.717399][ T5908] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 284.727683][ T5908] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 284.746909][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.758980][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 284.773843][ T5908] usb 4-1: config 0 has no interface number 0 [ 284.784159][ T9126] macsec1: entered allmulticast mode [ 284.789640][ T9126] bridge0: entered allmulticast mode [ 284.810025][ T9126] bridge0: port 3(macsec1) entered blocking state [ 284.817987][ T5908] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 284.818070][ T9126] bridge0: port 3(macsec1) entered disabled state [ 284.858774][ T5908] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.891884][ T5908] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 284.948423][ T5908] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 284.958002][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.969284][ T5908] usb 4-1: config 0 descriptor?? [ 285.001252][ T5908] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 285.012035][ T9126] bridge0: left allmulticast mode [ 285.250287][ T9146] netlink: 'syz.3.972': attribute type 4 has an invalid length. [ 285.362801][ T9152] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 285.756640][ T5908] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 285.926981][ T5908] usb 5-1: device descriptor read/64, error -71 [ 286.086849][ T1157] usb 4-1: Failed to submit usb control message: -110 [ 286.103286][ T1157] usb 4-1: unable to send the bmi data to the device: -110 [ 286.121066][ T1157] usb 4-1: unable to get target info from device [ 286.138072][ T1157] usb 4-1: could not get target info (-110) [ 286.151197][ T1157] usb 4-1: could not probe fw (-110) [ 286.236638][ T5908] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 286.366596][ T5908] usb 5-1: device descriptor read/64, error -71 [ 286.486906][ T5908] usb usb5-port1: attempt power cycle [ 286.836603][ T5908] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 286.857111][ T5908] usb 5-1: device descriptor read/8, error -71 [ 287.097071][ T5908] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 287.131873][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 287.139752][ T5908] usb 5-1: device descriptor read/8, error -71 [ 287.269941][ T5908] usb usb5-port1: unable to enumerate USB device [ 287.297702][ T5908] usb 4-1: USB disconnect, device number 40 [ 287.970268][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1004'. [ 288.426081][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 288.552984][ T9221] macsec1: entered promiscuous mode [ 288.559649][ T9221] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 288.583248][ T9221] macsec1: entered allmulticast mode [ 288.637825][ T9221] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 288.903948][ T9225] random: crng reseeded on system resumption [ 289.069035][ T9230] erspan0: entered promiscuous mode [ 289.156376][ T9230] erspan0: left promiscuous mode [ 289.527235][ T9245] netlink: 'syz.4.1021': attribute type 4 has an invalid length. [ 289.601795][ T9245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1021'. [ 290.180279][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1026'. [ 290.383094][ T5956] IPVS: starting estimator thread 0... [ 290.487005][ T9265] IPVS: using max 32 ests per chain, 76800 per kthread [ 291.656591][ T5956] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 291.856926][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 291.970514][ T5956] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.980976][ T5956] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.001285][ T5956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 292.021663][ T5956] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 292.044983][ T5956] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 292.063454][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.094888][ T5956] hub 4-1:1.0: bad descriptor, ignoring hub [ 292.106232][ T5956] hub 4-1:1.0: probe with driver hub failed with error -5 [ 292.114907][ T5956] cdc_wdm 4-1:1.0: skipping garbage [ 292.120857][ T5956] cdc_wdm 4-1:1.0: skipping garbage [ 292.128911][ T5956] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 292.135096][ T5956] cdc_wdm 4-1:1.0: Unknown control protocol [ 292.177018][ T9286] netlink: 'syz.0.1031': attribute type 4 has an invalid length. [ 292.349227][ T9292] Cannot find del_set index 2 as target [ 293.414392][ T5956] usb 4-1: USB disconnect, device number 41 [ 293.582360][ T9309] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1041'. [ 294.216632][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 294.236655][ T5956] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 294.377118][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 294.386773][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 294.434480][ T9332] netlink: 'syz.3.1048': attribute type 10 has an invalid length. [ 294.446756][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 294.459230][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 294.488581][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.496772][ T9] usb 5-1: Product: syz [ 294.498658][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 294.501324][ T9] usb 5-1: Manufacturer: syz [ 294.519007][ T9] usb 5-1: SerialNumber: syz [ 294.525600][ T9] usb 5-1: config 0 descriptor?? [ 294.534532][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 294.557064][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 294.655180][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 294.678472][ T5956] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 294.687951][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.696437][ T5956] usb 3-1: Product: syz [ 294.701551][ T5956] usb 3-1: Manufacturer: syz [ 294.706256][ T5956] usb 3-1: SerialNumber: syz [ 294.721919][ T5956] usb 3-1: config 0 descriptor?? [ 294.738859][ T5956] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 294.748427][ T5956] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 294.763890][ T9322] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1046'. [ 295.268040][ T9340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.346741][ T5956] em28xx 3-1:0.0: chip ID is em2874 [ 295.363608][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (32) [ 296.029036][ T9322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.035621][ T9348] netlink: 'syz.3.1053': attribute type 1 has an invalid length. [ 296.038762][ T9322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.343312][ T9348] bond5: entered promiscuous mode [ 296.356693][ T9348] bond5: entered allmulticast mode [ 296.367582][ T9348] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.412087][ T9350] bond5: (slave erspan1): making interface the new active one [ 296.428548][ T9350] erspan1: entered promiscuous mode [ 296.444807][ T9350] erspan1: entered allmulticast mode [ 296.459239][ T9350] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 296.695070][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 296.750457][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 296.765240][ T9] em28xx 5-1:0.0: board has no eeprom [ 296.856677][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 296.865656][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 296.885214][ T5923] em28xx 5-1:0.0: Binding DVB extension [ 296.920967][ T9] usb 5-1: USB disconnect, device number 53 [ 296.993165][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 297.041724][ T5923] em28xx 5-1:0.0: Registering input extension [ 297.090758][ T9] em28xx 5-1:0.0: Closing input extension [ 297.175647][ T9] em28xx 5-1:0.0: Freeing device [ 297.290249][ T5923] usb 3-1: USB disconnect, device number 40 [ 297.323367][ T5923] em28xx 3-1:0.0: Disconnecting em28xx [ 297.342544][ T5923] em28xx 3-1:0.0: Freeing device [ 297.826351][ T9377] bridge0: port 3(macsec1) entered blocking state [ 297.907943][ T9377] bridge0: port 3(macsec1) entered disabled state [ 297.936240][ T9377] macsec1: entered allmulticast mode [ 297.956645][ T9377] bridge0: entered allmulticast mode [ 298.041191][ T9377] macsec1: left allmulticast mode [ 298.094761][ T9377] bridge0: left allmulticast mode [ 298.696619][ T5956] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 298.867536][ T5956] usb 3-1: Using ep0 maxpacket: 32 [ 298.892992][ T5956] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 298.918689][ T5956] usb 3-1: config 0 has no interface number 0 [ 298.959349][ T5956] usb 3-1: config 0 interface 182 has no altsetting 0 [ 299.088287][ T5956] usb 3-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 299.097849][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.105824][ T5956] usb 3-1: Product: syz [ 299.118724][ T5956] usb 3-1: Manufacturer: syz [ 299.174841][ T5956] usb 3-1: SerialNumber: syz [ 299.225944][ T5956] usb 3-1: config 0 descriptor?? [ 299.584489][ T5956] usb 3-1: USB disconnect, device number 41 [ 300.615559][ T9433] binder: 9431:9433 ioctl 4018620d 0 returned -22 [ 301.129489][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 301.813656][ T9457] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 301.857039][ T9457] bond0: entered promiscuous mode [ 301.862362][ T9457] bond0: entered allmulticast mode [ 301.877360][ T9457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.895965][ T9459] erspan1: entered allmulticast mode [ 301.911409][ T9459] bond0: (slave erspan1): making interface the new active one [ 301.919810][ T9459] erspan1: entered promiscuous mode [ 301.927808][ T9459] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 302.029108][ T9464] netlink: 'syz.0.1087': attribute type 1 has an invalid length. [ 302.113577][ T9468] binder: 9467:9468 ioctl 4018620d 0 returned -22 [ 302.185900][ T9464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.280829][ T9466] bond3: (slave geneve4): making interface the new active one [ 302.323835][ T9466] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 302.345216][ T9477] netlink: 'syz.4.1089': attribute type 4 has an invalid length. [ 302.421108][ T9480] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1092'. [ 302.458325][ T9481] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 302.551541][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 302.584128][ T9486] netlink: 'syz.0.1093': attribute type 18 has an invalid length. [ 302.592624][ T9486] netlink: 'syz.0.1093': attribute type 18 has an invalid length. [ 302.607432][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 302.616574][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1093'. [ 302.689466][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 302.723280][ T9488] macsec1: entered allmulticast mode [ 302.734965][ T9488] bridge0: entered allmulticast mode [ 302.747877][ T9488] bridge0: port 3(macsec1) entered blocking state [ 302.758438][ T9488] bridge0: port 3(macsec1) entered disabled state [ 302.776670][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 302.784887][ T9488] bridge0: left allmulticast mode [ 302.790855][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 302.809617][ T9] usb 4-1: can't read configurations, error -22 [ 302.956589][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 303.056980][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 303.090527][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1096'. [ 303.103872][ T9495] netlink: 'syz.4.1097': attribute type 10 has an invalid length. [ 303.130740][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 303.134083][ T9495] team0: Device .` is already an upper device of the team interface [ 303.177470][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 303.200992][ T9] usb 4-1: can't read configurations, error -22 [ 303.216116][ T9] usb usb4-port1: attempt power cycle [ 303.326802][ T9499] binder: 9498:9499 ioctl 4018620d 0 returned -22 [ 303.484474][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 303.566721][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 303.586220][ T9512] netlink: 'syz.2.1103': attribute type 4 has an invalid length. [ 303.594475][ T9512] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1103'. [ 303.604120][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 303.612881][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 303.623460][ T9] usb 4-1: can't read configurations, error -22 [ 303.757472][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 303.787189][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 303.793696][ T9] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 303.802998][ T9] usb 4-1: can't read configurations, error -22 [ 303.809889][ T9] usb usb4-port1: unable to enumerate USB device [ 303.826896][ T5956] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 303.856616][ T5908] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 303.978034][ T5956] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.987121][ T5908] usb 3-1: device descriptor read/64, error -71 [ 303.993495][ T5956] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 304.003738][ T5956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.012831][ T5956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 304.023871][ T5956] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 304.036405][ T5956] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.045540][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.053665][ T5956] usb 5-1: Product: syz [ 304.057874][ T5956] usb 5-1: Manufacturer: syz [ 304.068306][ T5956] cdc_wdm 5-1:1.0: skipping garbage [ 304.073543][ T5956] cdc_wdm 5-1:1.0: skipping garbage [ 304.080718][ T5956] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 304.087241][ T5956] cdc_wdm 5-1:1.0: Unknown control protocol [ 304.226776][ T5908] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 304.366632][ T5908] usb 3-1: device descriptor read/64, error -71 [ 304.374884][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 304.375113][ T5956] usb 5-1: USB disconnect, device number 54 [ 304.381760][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 304.393559][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 304.402669][ T9511] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 304.477042][ T5908] usb usb3-port1: attempt power cycle [ 304.816643][ T5908] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 304.837054][ T5908] usb 3-1: device descriptor read/8, error -71 [ 305.076630][ T5908] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 305.104422][ T5908] usb 3-1: device descriptor read/8, error -71 [ 305.216863][ T5908] usb usb3-port1: unable to enumerate USB device [ 305.282647][ T9528] binder: BINDER_SET_CONTEXT_MGR already set [ 305.288967][ T9528] binder: 9527:9528 ioctl 4018620d 200000000040 returned -16 [ 305.436208][ T9534] netlink: 'syz.3.1114': attribute type 1 has an invalid length. [ 305.462709][ T9534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 305.481348][ T9534] bond6: (slave geneve5): making interface the new active one [ 305.489933][ T9534] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 305.501136][ T1331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.511468][ T1331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.520946][ T1331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.530890][ T1331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.558375][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 305.716583][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 305.729521][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 305.755123][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.764921][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.774663][ T9] usb 5-1: Product: syz [ 305.779534][ T9] usb 5-1: Manufacturer: syz [ 305.784171][ T9] usb 5-1: SerialNumber: syz [ 305.794232][ T9] usb 5-1: config 0 descriptor?? [ 305.811433][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.830464][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 306.011564][ T9530] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'. [ 306.185907][ T9546] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1117'. [ 306.236914][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1117'. [ 306.581570][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (32) [ 306.643973][ T9556] netlink: 'syz.0.1120': attribute type 10 has an invalid length. [ 306.775148][ T9561] binder: BINDER_SET_CONTEXT_MGR already set [ 306.786229][ T9561] binder: 9560:9561 ioctl 4018620d 200000000040 returned -16 [ 306.987874][ T9565] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.035021][ T9572] bridge0: port 3(macsec1) entered blocking state [ 307.069630][ T9572] bridge0: port 3(macsec1) entered disabled state [ 307.077832][ T9572] macsec1: entered allmulticast mode [ 307.083237][ T9572] bridge0: entered allmulticast mode [ 307.134042][ T9572] macsec1: left allmulticast mode [ 307.137709][ T9574] netlink: 'syz.1.1126': attribute type 4 has an invalid length. [ 307.147476][ T9572] bridge0: left allmulticast mode [ 307.197289][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.216892][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.245496][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 307.278290][ T9] em28xx 5-1:0.0: board has no eeprom [ 307.436772][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 307.535756][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 307.548710][ T5923] em28xx 5-1:0.0: Binding DVB extension [ 307.790761][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 307.876649][ T9] usb 5-1: USB disconnect, device number 55 [ 307.884046][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 307.884438][ T5923] em28xx 5-1:0.0: Registering input extension [ 307.974967][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1134'. [ 308.190313][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 308.308831][ T9606] binder: BINDER_SET_CONTEXT_MGR already set [ 308.335386][ T9606] binder: 9605:9606 ioctl 4018620d 200000000040 returned -16 [ 308.375316][ T9] em28xx 5-1:0.0: Closing input extension [ 308.456689][ T9] em28xx 5-1:0.0: Freeing device [ 309.158718][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1136'. [ 309.815166][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1146'. [ 310.006719][ T9647] bond0: left promiscuous mode [ 310.011701][ T9647] erspan1: left promiscuous mode [ 310.019934][ T9647] bond0: left allmulticast mode [ 310.038912][ T9647] erspan1: left allmulticast mode [ 310.097461][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 310.268245][ T9] usb 4-1: config 0 has no interfaces? [ 310.280166][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 310.289748][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.298106][ T9] usb 4-1: Product: syz [ 310.302406][ T9] usb 4-1: Manufacturer: syz [ 310.308278][ T9] usb 4-1: SerialNumber: syz [ 310.315023][ T9] usb 4-1: config 0 descriptor?? [ 310.532510][ T9643] loop4: detected capacity change from 0 to 2560 [ 310.552134][ T5959] Buffer I/O error on dev loop4, logical block 64, async page read [ 310.696439][ T5959] Buffer I/O error on dev loop4, logical block 64, async page read [ 310.976670][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 311.086585][ T5924] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 311.143557][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 311.153448][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.161817][ T9] usb 3-1: Product: syz [ 311.166458][ T9] usb 3-1: Manufacturer: syz [ 311.172196][ T9] usb 3-1: SerialNumber: syz [ 311.182517][ T9] usb 3-1: config 0 descriptor?? [ 311.248931][ T5924] usb 5-1: config 0 has no interfaces? [ 311.256757][ T5924] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 311.266765][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.287216][ T5924] usb 5-1: config 0 descriptor?? [ 311.392162][ T5836] Bluetooth: hci3: unknown advertising packet type: 0x17 [ 311.392240][ T5836] Bluetooth: hci3: Malformed LE Event: 0x02 [ 311.414457][ T9] usb-storage 3-1:0.0: USB Mass Storage device detected [ 311.466303][ T9] usb 3-1: USB disconnect, device number 46 [ 311.507872][ T5908] usb 5-1: USB disconnect, device number 56 [ 312.129606][ T5959] Buffer I/O error on dev loop4, logical block 64, async page read [ 312.247160][ T5959] Buffer I/O error on dev loop4, logical block 64, async page read [ 312.390954][ T5959] Buffer I/O error on dev loop4, logical block 64, async page read [ 312.783843][ T9] usb 4-1: USB disconnect, device number 46 [ 312.854841][ T9643] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 312.908320][ T9643] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 312.917126][ T9643] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 313.216311][ T9688] netlink: 'syz.3.1160': attribute type 1 has an invalid length. [ 313.366948][ T5924] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 313.617094][ T9688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.649007][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.753346][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.879066][ T9700] netlink: 408 bytes leftover after parsing attributes in process `syz.4.1163'. [ 313.910527][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.061380][ T5924] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 314.239326][ T9711] Cannot find del_set index 2 as target [ 314.267199][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.321207][ T5924] usb 3-1: config 0 descriptor?? [ 314.429742][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1167'. [ 314.603582][ T9722] netlink: 'syz.4.1172': attribute type 10 has an invalid length. [ 314.615914][ T9722] team0: Device .` is already an upper device of the team interface [ 314.808504][ T5924] acrux 0003:1A34:0802.000E: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 314.843711][ T5924] acrux 0003:1A34:0802.000E: no inputs found [ 314.874432][ T5924] acrux 0003:1A34:0802.000E: Failed to enable force feedback support, error: -19 [ 314.979750][ T5924] usb 3-1: USB disconnect, device number 47 [ 315.689388][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 315.774611][ T9731] macsec1: entered allmulticast mode [ 315.789558][ T9731] bridge0: entered allmulticast mode [ 315.844239][ T9731] bridge0: port 3(macsec1) entered blocking state [ 315.887863][ T9731] bridge0: port 3(macsec1) entered disabled state [ 316.005038][ T9731] bridge0: left allmulticast mode [ 316.103507][ T9742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.310457][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 316.781999][ T9761] Cannot find del_set index 2 as target [ 316.836086][ T9763] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 316.892275][ T9763] bond8: entered promiscuous mode [ 316.898680][ T9763] bond8: entered allmulticast mode [ 316.904244][ T9763] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.377138][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.383700][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.120610][ T9793] SET target dimension over the limit! [ 318.157636][ T9794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.374386][ T9811] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 319.794947][ T9813] binder: 9812:9813 ioctl c0306201 200000000640 returned -22 [ 319.845370][ T9813] loop7: detected capacity change from 0 to 7 [ 319.855092][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.864326][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 319.873763][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.882935][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 319.892572][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.901785][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 319.910533][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.919725][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 319.929586][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.938807][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 319.947762][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.956930][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 319.966523][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.975700][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 319.983597][ T5959] ldm_validate_partition_table(): Disk read failed. [ 319.990975][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.000138][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.026526][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.035710][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.063689][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.072881][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.082127][ T5959] Dev loop7: unable to read RDB block 0 [ 320.115523][ T5959] loop7: unable to read partition table [ 320.129413][ T5959] loop7: partition table beyond EOD, truncated [ 320.696583][ T5908] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 320.730925][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 320.902617][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 321.050951][ T5908] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 321.060966][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.069896][ T5908] usb 4-1: Product: syz [ 321.074180][ T5908] usb 4-1: Manufacturer: syz [ 321.079486][ T5908] usb 4-1: SerialNumber: syz [ 321.090545][ T5908] usb 4-1: config 0 descriptor?? [ 321.101782][ T9824] macsec1: entered allmulticast mode [ 321.111127][ T9824] bridge0: entered allmulticast mode [ 321.146079][ T9824] bridge0: port 3(macsec1) entered blocking state [ 321.158820][ T9] hid_parser_main: 880 callbacks suppressed [ 321.158842][ T9] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 321.166919][ T9824] bridge0: port 3(macsec1) entered disabled state [ 321.184790][ T9824] bridge0: left allmulticast mode [ 321.206138][ T9828] tipc: Started in network mode [ 321.211558][ T9828] tipc: Node identity fe91c0ff48d1, cluster identity 4711 [ 321.223438][ T9828] tipc: Enabled bearer , priority 0 [ 321.241958][ T9830] syzkaller0: entered promiscuous mode [ 321.247940][ T9] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 321.258766][ T9830] syzkaller0: entered allmulticast mode [ 321.419004][ T9833] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 321.432923][ T9833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.446273][ T9833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.462062][ T9833] team0: Port device hsr0 added [ 321.670672][ T9822] tipc: Resetting bearer [ 321.796986][ T9821] tipc: Resetting bearer [ 321.817794][ T9821] tipc: Disabling bearer [ 321.839438][ T5908] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 321.916722][ T5924] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 321.949520][ T5908] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 321.976651][ T5908] usb 4-1: USB disconnect, device number 47 [ 322.066576][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 322.074626][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.086149][ T5924] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.098236][ T5924] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 322.112251][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.116975][ T5956] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 322.121817][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 322.137241][ T5924] usb 3-1: SerialNumber: syz [ 322.147863][ T5924] hub 3-1:1.0: bad descriptor, ignoring hub [ 322.153827][ T5924] hub 3-1:1.0: probe with driver hub failed with error -5 [ 322.162007][ T5924] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 322.290385][ T5956] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 322.300191][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.308344][ T5956] usb 5-1: Product: syz [ 322.312633][ T5956] usb 5-1: Manufacturer: syz [ 322.317327][ T5956] usb 5-1: SerialNumber: syz [ 322.328735][ T5956] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 322.345478][ T5908] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 322.397873][ T9840] sctp: [Deprecated]: syz.2.1210 (pid 9840) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.397873][ T9840] Use struct sctp_sack_info instead [ 322.459961][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1215'. [ 322.490363][ T43] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 322.518787][ T43] dvb_usb_dibusb_mc 1-1:13.120: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 322.545209][ T43] dvb-usb: found a 'Artec T1 USB2.0' in cold state, will try to load a firmware [ 322.560421][ T43] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 322.571081][ T43] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 322.786794][ T5956] usb 3-1: USB disconnect, device number 48 [ 322.916075][ T9858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 322.928901][ T9858] gretap1: entered allmulticast mode [ 323.002999][ T5924] usb 5-1: USB disconnect, device number 57 [ 323.060481][ T9863] sysfs: cannot create duplicate filename '/class/ieee80211/1^!l1*$pOcɔr$Gt' [ 323.071552][ T9863] CPU: 1 UID: 0 PID: 9863 Comm: syz.2.1219 Not tainted syzkaller #0 PREEMPT(full) [ 323.071576][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.071602][ T9863] Call Trace: [ 323.071611][ T9863] [ 323.071619][ T9863] dump_stack_lvl+0x189/0x250 [ 323.071653][ T9863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.071676][ T9863] ? __pfx__printk+0x10/0x10 [ 323.071700][ T9863] ? kernfs_path_from_node+0x2f/0x290 [ 323.071722][ T9863] ? kernfs_path_from_node+0x250/0x290 [ 323.071742][ T9863] ? kernfs_path_from_node+0x2f/0x290 [ 323.071766][ T9863] sysfs_warn_dup+0x8e/0xa0 [ 323.071787][ T9863] sysfs_do_create_link_sd+0xc0/0x110 [ 323.071810][ T9863] device_add_class_symlinks+0x1cf/0x240 [ 323.071835][ T9863] device_add+0x475/0xb50 [ 323.071873][ T9863] wiphy_register+0x1c81/0x2aa0 [ 323.071916][ T9863] ? __pfx_wiphy_register+0x10/0x10 [ 323.071939][ T9863] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 323.071970][ T9863] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 323.071994][ T9863] ieee80211_register_hw+0x3473/0x40d0 [ 323.072032][ T9863] ? ieee80211_register_hw+0x1491/0x40d0 [ 323.072062][ T9863] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 323.072080][ T9863] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 323.072108][ T9863] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 323.072142][ T9863] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.072174][ T9863] ? __hrtimer_setup+0x187/0x210 [ 323.072194][ T9863] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 323.072217][ T9863] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 323.072275][ T9863] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 323.072299][ T9863] ? trace_kmalloc+0x1f/0xd0 [ 323.072319][ T9863] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 323.072344][ T9863] ? kstrndup+0xbf/0x160 [ 323.072374][ T9863] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 323.072397][ T9863] ? __pfx___nla_validate_parse+0x10/0x10 [ 323.072439][ T9863] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 323.072473][ T9863] ? rcu_is_watching+0x15/0xb0 [ 323.072497][ T9863] ? __nla_parse+0x40/0x60 [ 323.072520][ T9863] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 323.072554][ T9863] genl_family_rcv_msg_doit+0x215/0x300 [ 323.072583][ T9863] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 323.072619][ T9863] ? bpf_lsm_capable+0x9/0x20 [ 323.072639][ T9863] ? security_capable+0x7e/0x2e0 [ 323.072669][ T9863] genl_rcv_msg+0x60e/0x790 [ 323.072699][ T9863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.072719][ T9863] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 323.072759][ T9863] netlink_rcv_skb+0x208/0x470 [ 323.072775][ T9863] ? __lock_acquire+0xab9/0xd20 [ 323.072793][ T9863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.072816][ T9863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.072856][ T9863] ? down_read+0x1ad/0x2e0 [ 323.072876][ T9863] genl_rcv+0x28/0x40 [ 323.072895][ T9863] netlink_unicast+0x82f/0x9e0 [ 323.072930][ T9863] ? __pfx_netlink_unicast+0x10/0x10 [ 323.072955][ T9863] ? netlink_sendmsg+0x642/0xb30 [ 323.072972][ T9863] ? skb_put+0x11b/0x210 [ 323.072995][ T9863] netlink_sendmsg+0x805/0xb30 [ 323.073024][ T9863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.073046][ T9863] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.073073][ T9863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.073089][ T9863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.073108][ T9863] __sock_sendmsg+0x21c/0x270 [ 323.073145][ T9863] ____sys_sendmsg+0x505/0x830 [ 323.073173][ T9863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.073204][ T9863] ? import_iovec+0x74/0xa0 [ 323.073231][ T9863] ___sys_sendmsg+0x21f/0x2a0 [ 323.073253][ T9863] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.073314][ T9863] ? __fget_files+0x2a/0x420 [ 323.073330][ T9863] ? __fget_files+0x3a0/0x420 [ 323.073359][ T9863] __x64_sys_sendmsg+0x19b/0x260 [ 323.073381][ T9863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.073419][ T9863] ? do_syscall_64+0xbe/0xfa0 [ 323.073448][ T9863] do_syscall_64+0xfa/0xfa0 [ 323.073470][ T9863] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.073493][ T9863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.073511][ T9863] ? clear_bhb_loop+0x60/0xb0 [ 323.073533][ T9863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.073550][ T9863] RIP: 0033:0x7ff16898f749 [ 323.073566][ T9863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.073582][ T9863] RSP: 002b:00007ff1697d0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.073602][ T9863] RAX: ffffffffffffffda RBX: 00007ff168be5fa0 RCX: 00007ff16898f749 [ 323.073616][ T9863] RDX: 0000000005000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 323.073628][ T9863] RBP: 00007ff168a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 323.073640][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.073651][ T9863] R13: 00007ff168be6038 R14: 00007ff168be5fa0 R15: 00007ff168d0fa28 [ 323.073684][ T9863] [ 323.620767][ T5908] usb 5-1: Service connection timeout for: 256 [ 323.627001][ T5908] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 323.636293][ T5908] ath9k_htc: Failed to initialize the device [ 323.655503][ T5924] usb 5-1: ath9k_htc: USB layer deinitialized [ 323.711229][ T9868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1221'. [ 323.846441][ T9875] netlink: 'syz.1.1223': attribute type 1 has an invalid length. [ 323.862571][ T9876] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1223'. [ 323.911491][ T9875] 8021q: adding VLAN 0 to HW filter on device bond5 [ 323.967021][ T9881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 323.985313][ T9881] macsec1: entered allmulticast mode [ 323.991766][ T2154] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 324.000138][ T9881] bridge0: entered allmulticast mode [ 324.006443][ T9881] bridge0: port 3(macsec1) entered blocking state [ 324.013653][ T9881] bridge0: port 3(macsec1) entered disabled state [ 324.023301][ T9881] bridge0: left allmulticast mode [ 324.158814][ T2154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.185477][ T2154] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 324.205813][ T2154] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 324.226156][ T2154] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.268899][ T2154] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 324.291466][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.305288][ T2154] usb 3-1: Product: syz [ 324.310394][ T2154] usb 3-1: Manufacturer: syz [ 324.315162][ T2154] usb 3-1: SerialNumber: syz [ 324.330988][ T2154] usb 3-1: config 0 descriptor?? [ 324.346194][ T9871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 324.486684][ T2154] rc_core: IR keymap rc-xbox-dvd not found [ 324.496407][ T2154] Registered IR keymap rc-empty [ 324.534312][ T2154] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 324.595454][ T2154] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input68 [ 324.719648][ T2154] usb 3-1: USB disconnect, device number 49 [ 324.725629][ C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 325.846649][ T2154] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 325.873267][ T9930] bond5: left promiscuous mode [ 325.884873][ T9930] erspan1: left promiscuous mode [ 325.896856][ T9930] bond5: left allmulticast mode [ 325.961009][ T9930] erspan1: left allmulticast mode [ 326.059310][ T9930] bond8: left promiscuous mode [ 326.065243][ T2154] usb 3-1: config 0 has no interfaces? [ 326.071198][ T9930] bond8: left allmulticast mode [ 326.080074][ T2154] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 326.092258][ T1157] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.099600][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.118916][ T2154] usb 3-1: config 0 descriptor?? [ 326.130046][ T1157] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.145105][ T1157] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.154751][ T1157] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.812467][ T9938] debugfs: '1^!l1*$pOcɔr$Gt' already exists in 'ieee80211' [ 327.346693][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 327.526947][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 327.553158][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 327.593730][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 327.621137][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.671000][ T9] usb 5-1: Product: syz [ 327.679856][ T9] usb 5-1: Manufacturer: syz [ 327.687233][ T9] usb 5-1: SerialNumber: syz [ 327.699135][ T9] usb 5-1: config 0 descriptor?? [ 327.726452][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 327.755771][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 327.800127][ T5908] usb 3-1: USB disconnect, device number 50 [ 327.918586][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1247'. [ 328.136821][ T2154] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 328.305677][ T2154] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 328.367215][ T2154] usb 4-1: config 0 has no interface number 1 [ 328.373510][ T2154] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 328.384973][ T2154] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 328.397467][ T2154] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 328.409257][ T2154] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.436625][ T2154] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 328.448770][ T2154] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 328.462001][ T2154] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 328.480046][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.498236][ T2154] usb 4-1: Product: syz [ 328.502598][ T2154] usb 4-1: Manufacturer: syz [ 328.507854][ T2154] usb 4-1: SerialNumber: syz [ 328.522484][ T2154] usb 4-1: config 0 descriptor?? [ 328.531882][ T9957] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 328.606231][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (32) [ 328.611942][ T2154] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.660187][ T2154] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 328.753983][ T2154] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 329.344774][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.416041][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.446330][ T9988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.507288][ T9988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.520866][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 329.538191][ T9] em28xx 5-1:0.0: board has no eeprom [ 329.666636][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 329.674715][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 329.703024][ T5923] em28xx 5-1:0.0: Binding DVB extension [ 329.721867][ T9] usb 5-1: USB disconnect, device number 58 [ 329.763388][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 329.877809][ T5923] em28xx 5-1:0.0: Registering input extension [ 329.897509][ T9] em28xx 5-1:0.0: Closing input extension [ 329.947429][ T9] em28xx 5-1:0.0: Freeing device [ 331.584085][ T2154] usb 4-1: USB disconnect, device number 48 [ 331.673006][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 332.844127][T10038] SET target dimension over the limit! [ 333.049612][T10042] Cannot find del_set index 2 as target [ 333.488229][T10055] netlink: 'syz.3.1280': attribute type 10 has an invalid length. [ 333.553103][T10055] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.562204][T10055] bond0: (slave team0): Enslaving as an active interface with an up link [ 334.126339][T10081] kvm: pic: non byte read [ 334.156367][T10081] kvm: pic: non byte read [ 334.176730][T10081] kvm: pic: non byte read [ 334.203531][T10081] kvm: pic: non byte read [ 334.215561][T10081] kvm: pic: non byte read [ 334.224006][T10081] kvm: pic: non byte read [ 334.229732][T10081] kvm: pic: non byte read [ 334.234254][T10081] kvm: pic: non byte read [ 334.239427][T10081] kvm: pic: non byte read [ 334.243982][T10081] kvm: pic: non byte read [ 334.898374][T10095] binder: 10094:10095 ioctl c0306201 200000000180 returned -14 [ 335.039675][T10099] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1295'. [ 335.634326][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 335.657971][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1296'. [ 335.902874][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 335.902918][T10123] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1299'. [ 335.902930][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 335.902938][T10123] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1299'. [ 335.903001][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1299'. [ 337.787635][ T5924] usb 4-1: new high-speed USB device number 49 using dummy_hcd Stopping sshd: [ 337.908753][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 337.976690][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 338.015379][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 338.046744][ T5924] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 stopped /usr/sbin/sshd (pid 5594) OK [ 338.097023][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 338.126739][ T5924] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 338.135845][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.146934][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.174616][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.186265][ T5924] usb 4-1: Product: syz [ 338.191320][ T5924] usb 4-1: Manufacturer: syz [ 338.196156][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 338.205859][ T5924] usb 4-1: SerialNumber: syz [ 338.216535][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.226343][ T5924] usb 4-1: config 0 descriptor?? [ 338.253544][T10142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.253776][ T9] usb 5-1: config 0 descriptor?? [ 338.273754][T10142] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 338.299345][ T5924] usb 4-1: ucan: probing device on interface #0 Stopping crond: [ 338.318856][ T9] hub 5-1:0.0: USB hub found stopped /usr/sbin/crond (pid 5574) OK [ 338.527911][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 338.560374][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 338.576652][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5494) [ 338.790160][ T9] usb 5-1: reset high-speed USB device number 59 using dummy_hcd [ 338.925457][ T5924] ucan 4-1:0.0 can0: registered device Stopping network: [ 339.120773][ T5924] ucan 4-1:0.0 can0: firmware string: L>z^ɉw{f,=}̫eRJ(=#gE}ut+|H!R$8g[- }q>ArŴ,xp|JB *~|X8-eo! [ 339.332014][ T5908] usb 4-1: USB disconnect, device number 49 [ 339.368523][ T2154] usb 5-1: USB disconnect, device number 59 OK Stopping iptables: OK [ 340.409674][T10224] netlink: 'syz.4.1315': attribute type 10 has an invalid length. Stopping system message bus: [ 340.927173][T10224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.965138][T10224] .`: (slave batadv0): Enslaving as an active interface with an up link [ 341.126207][T10239] SET target dimension over the limit! done [ 341.283593][T10244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 341.549321][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 341.559918][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 341.575206][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 341.591182][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 341.606023][T10257] syzkaller0: entered promiscuous mode [ 341.651096][T10257] syzkaller0: entered allmulticast mode [ 341.667838][ T5908] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 341.829317][ T5908] usb 3-1: config 0 has an invalid interface number: 110 but max is 3 [ 341.855683][ T5908] usb 3-1: config 0 has an invalid interface number: 69 but max is 3 [ 341.885738][ T5908] usb 3-1: config 0 has an invalid interface number: 6 but max is 3 [ 341.902442][ T5908] usb 3-1: config 0 has an invalid interface number: 153 but max is 3 [ 341.931114][ T5908] usb 3-1: config 0 has no interface number 0 [ 341.947038][ T5908] usb 3-1: config 0 has no interface number 1 [ 341.962237][ T5908] usb 3-1: config 0 has no interface number 2 [ 341.976303][ T5908] usb 3-1: config 0 has no interface number 3 [ 342.003003][ T5908] usb 3-1: config 0 interface 110 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 342.091009][ T5908] usb 3-1: config 0 interface 110 altsetting 2 has an endpoint descriptor with address 0x47, changing to 0x7 [ 342.123054][ T5908] usb 3-1: config 0 interface 110 altsetting 2 bulk endpoint 0xA has invalid maxpacket 8 [ 342.136391][ T5908] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 342.150175][ T5908] usb 3-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0xA, skipping [ 342.189444][ T5908] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 342.244262][ T5908] usb 3-1: config 0 interface 110 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 1024 [ 342.257349][ T5908] usb 3-1: config 0 interface 110 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 342.269727][ T5908] usb 3-1: config 0 interface 110 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 342.286732][T10275] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 342.296606][ T5908] usb 3-1: config 0 interface 69 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 342.366183][ T5908] usb 3-1: config 0 interface 69 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 342.380270][ T5908] usb 3-1: config 0 interface 69 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 342.392088][ T5908] usb 3-1: config 0 interface 6 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 342.403537][ T5908] usb 3-1: config 0 interface 6 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 342.414761][ T5908] usb 3-1: config 0 interface 6 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 342.426934][ T5908] usb 3-1: config 0 interface 153 altsetting 17 has a duplicate endpoint with address 0x6, skipping [ 342.454667][ T5908] usb 3-1: config 0 interface 153 altsetting 17 has a duplicate endpoint with address 0xB, skipping [ 342.557085][ T5908] usb 3-1: config 0 interface 153 altsetting 17 endpoint 0x1 has an invalid bInterval 201, changing to 7 [ 342.577632][ T5908] usb 3-1: config 0 interface 110 has no altsetting 0 [ 342.599002][ T5908] usb 3-1: config 0 interface 69 has no altsetting 0 [ 342.617138][ T5908] usb 3-1: config 0 interface 6 has no altsetting 0 [ 342.628495][ T5908] usb 3-1: config 0 interface 153 has no altsetting 0 [ 342.657588][ T5908] usb 3-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice= 0.3e [ 342.678079][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.705666][ T5908] usb 3-1: Product: syz [ 342.710692][ T5908] usb 3-1: Manufacturer: syz [ 342.715319][ T5908] usb 3-1: SerialNumber: syz [ 342.744001][ T5908] usb 3-1: config 0 descriptor?? [ 342.762527][T10252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 342.785594][T10252] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 Stopping klogd: [ 343.266714][ T2154] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 343.603461][ T2154] usb 4-1: Using ep0 maxpacket: 8 OK [ 343.663553][ T2154] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 343.710294][ T2154] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.730199][ T2154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.751561][ T2154] usb 4-1: Manufacturer: 爃ᢕ뱕ℶ鏍ꌐ鼫槴唬粛埖뭾냙铁਺᢭蟦ⲅ첞‚ꤹ뚏∖窌矱頇쒪锚㚣棘輚橸楃肙育嘹꒸ꗑךẾ夥袎勞㩦꒓戺㠘燥孵꠬㚠ኄቺᚇ폵쒇毲陦崛꽾鉆闗숑诪၂坴끕퀢១癢㘱쏊 [ 343.777748][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.817397][ T2154] usb 4-1: SerialNumber: ⠇ Stopping acpid: [ 344.519009][ T5908] safe_serial 3-1:0.110: safe_serial converter detected [ 344.627290][ T5908] safe_serial 3-1:0.110: probe with driver safe_serial failed with error -22 [ 344.707457][ T5908] usb 3-1: USB disconnect, device number 51 [ 345.036633][ T5908] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 345.336440][T10311] macsec1: entered promiscuous mode [ 345.341950][T10311] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 345.350773][T10311] macsec1: entered allmulticast mode [ 345.361693][T10311] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 345.436628][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 345.443682][ T5908] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 345.452598][ T5908] usb 3-1: config 179 has no interface number 0 [ 345.468282][ T5908] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 345.535926][ T5908] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 345.554102][ T5908] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.566120][ T5908] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 345.578510][ T5908] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 OK [ 345.606690][ T5908] usb 3-1: config 179 interface 65 has no altsetting 0 [ 345.623908][ T5908] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 345.645100][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 Stopping syslogd: [ 345.696328][ T5908] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input72 stopped /sbin/syslogd (pid 5182) OK [ 345.849755][T10319] program syz.4.1337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.948764][ T2154] cdc_ncm 4-1:1.0: bind() failure [ 345.979035][T10307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.022534][ T2154] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 346.067194][T10307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.087245][ T2154] cdc_ncm 4-1:1.1: bind() failure [ 346.124850][ T5924] usb 3-1: USB disconnect, device number 52 [ 346.170402][ T2154] usb 4-1: USB disconnect, device number 50 umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 348.067236][T10355] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 348.087363][ T52] wlan0: Trigger new scan to find an IBSS to join [ 348.110411][ T24] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 348.156413][ T24] dvb_usb_az6027 2-1:200.0: probe with driver dvb_usb_az6027 failed with error -110 [ 348.203534][ T5200] udevd[5200]: could not touch /run/udev/queue: Read-only file system [ 348.204974][ T24] usb 2-1: USB disconnect, device number 48 [ 348.310278][ T5200] udevd[5200]: could not touch /run/udev/queue: Read-only file system [ 348.479005][T10366] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 348.626834][ T2154] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 348.820209][ T2154] usb 4-1: Using ep0 maxpacket: 16 [ 348.927975][ T2154] usb 4-1: config 0 has no interfaces? [ 348.933612][ T2154] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 348.960447][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.067838][ T2154] usb 4-1: config 0 descriptor?? [ 349.416638][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 349.606795][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 349.631466][ T5200] udevd[5200]: could not touch /run/udev/queue: Read-only file system Sent SIGTERM to all processes Connection to 10.128.0.228 closed by remote host. [ 350.990760][ T3449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.109253][ T3449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.133516][ T2154] usb 4-1: USB disconnect, device number 51 [ 351.141203][ T24] usb 2-1: device descriptor read/all, error -71 [ 351.301782][ T3449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.410327][ T3449] .`: (slave netdevsim0): Releasing backup interface Sent SIGKILL to all processes Requesting system poweroff [ 351.477925][ T3449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.598894][ T3449] bridge_slave_1: left allmulticast mode [ 351.604716][ T3449] bridge_slave_1: left promiscuous mode [ 351.611782][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.640091][ T3449] bridge_slave_0: left allmulticast mode [ 351.645750][ T3449] bridge_slave_0: left promiscuous mode [ 351.651586][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.801314][ T3449] bond3 (unregistering): (slave geneve4): Releasing active interface [ 351.822264][ T3449] bond2 (unregistering): (slave geneve3): Releasing active interface [ 351.841055][ T3449] bond0 (unregistering): (slave geneve2): Releasing active interface [ 352.094610][ T3449] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.104304][ T3449] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.113839][ T3449] .` (unregistering): (slave team0): Releasing backup interface [ 352.123455][ T3449] .` (unregistering): Released all slaves [ 352.230467][ T3449] bond1 (unregistering): Released all slaves [ 352.337951][ T3449] bond0 (unregistering): Released all slaves [ 352.435667][ T3449] bond2 (unregistering): Released all slaves [ 352.539055][ T3449] bond3 (unregistering): Released all slaves [ 352.993238][ T3449] hsr_slave_0: left promiscuous mode [ 352.999294][ T3449] hsr_slave_1: left promiscuous mode [ 353.005255][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.014067][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.051690][ T52] wlan0: Trigger new scan to find an IBSS to join [ 353.204453][ T3449] team0 (unregistering): Port device hsr0 removed [ 353.348450][ T3449] team0 (unregistering): Port device team_slave_1 removed [ 353.385214][ T3449] team0 (unregistering): Port device team_slave_0 removed [ 353.457844][T10382] smc: removing smcd device lo [ 353.468385][ T43] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 353.499518][ T43] dvb_usb_dibusb_mb 1-1:13.252: probe with driver dvb_usb_dibusb_mb failed with error -22 [ 353.511917][ T43] dvb-usb: found a 'Artec T1 USB2.0 TVBOX (please check the warm ID)' in cold state, will try to load a firmware [ 353.531443][ T43] usb 1-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 353.540850][ T43] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 353.549998][ T43] ------------[ cut here ]------------ [ 353.555512][ T43] WARNING: CPU: 1 PID: 43 at drivers/base/firmware_loader/fallback.c:148 firmware_fallback_sysfs+0x746/0x9b0 [ 353.567276][ T43] Modules linked in: [ 353.571460][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 353.581014][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.591120][ T43] Workqueue: usb_hub_wq hub_event [ 353.596175][ T43] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 353.602508][ T43] Code: f3 fb e9 5d fc ff ff e8 78 69 f3 fb c6 05 89 75 9a 09 01 48 c7 c7 e0 ef e6 8b e8 25 f7 5a fb e9 85 fc ff ff e8 5b 69 f3 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 f0 e6 8b 4c 89 e2 e8 35 5e 5f fb e9 [ 353.622182][ T43] RSP: 0018:ffffc90000b36890 EFLAGS: 00010283 [ 353.628311][ T43] RAX: ffffffff85cc9a55 RBX: dffffc0000000000 RCX: 0000000000100000 [ 353.636299][ T43] RDX: ffffc90018ed3000 RSI: 00000000000a4850 RDI: 00000000000a4851 [ 353.644376][ T43] RBP: 0000000000000001 R08: ffffffff8f7cf777 R09: 1ffffffff1ef9eee [ 353.652406][ T43] R10: dffffc0000000000 R11: fffffbfff1ef9eef R12: ffffffff8c301660 [ 353.660461][ T43] R13: 0000000000001770 R14: ffff8880322c10b0 R15: 00000000fffffff5 [ 353.668484][ T43] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 353.677468][ T43] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.684106][ T43] CR2: 0000200000404030 CR3: 0000000030112000 CR4: 00000000003526f0 [ 353.692186][ T43] Call Trace: [ 353.695515][ T43] [ 353.698522][ T43] ? kmem_cache_free+0x19b/0x690 [ 353.703526][ T43] ? _request_firmware+0x6be/0x15b0 [ 353.708789][ T43] _request_firmware+0xf83/0x15b0 [ 353.713835][ T43] ? preempt_schedule_thunk+0x16/0x30 [ 353.719335][ T43] ? __pfx__request_firmware+0x10/0x10 [ 353.724828][ T43] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 353.730489][ T43] request_firmware+0x36/0x50 [ 353.735159][ T43] dvb_usb_download_firmware+0xaf/0x260 [ 353.740741][ T43] ? __pfx__printk+0x10/0x10 [ 353.745321][ T43] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 353.751500][ T43] ? dvb_usb_device_init+0x14c/0x2580 [ 353.756909][ T43] dvb_usb_device_init+0xdd2/0x2580 [ 353.762146][ T43] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 353.768062][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.773253][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 353.779408][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 353.785757][ T43] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 353.791405][ T43] ? __update_runtime_status+0x1b3/0x390 [ 353.797112][ T43] ? __pm_runtime_set_status+0x785/0xa50 [ 353.802764][ T43] usb_probe_interface+0x668/0xc30 [ 353.807907][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 353.813521][ T43] really_probe+0x26d/0x9e0 [ 353.818098][ T43] __driver_probe_device+0x18c/0x2f0 [ 353.823396][ T43] driver_probe_device+0x4f/0x430 [ 353.828441][ T43] __device_attach_driver+0x2ce/0x530 [ 353.833809][ T43] bus_for_each_drv+0x251/0x2e0 [ 353.838683][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 353.844571][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 353.850025][ T43] __device_attach+0x2b8/0x400 [ 353.854816][ T43] ? __pfx___device_attach+0x10/0x10 [ 353.860142][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 353.865348][ T43] bus_probe_device+0x185/0x260 [ 353.870224][ T43] device_add+0x7b6/0xb50 [ 353.874555][ T43] usb_set_configuration+0x1a87/0x20e0 [ 353.880097][ T43] usb_generic_driver_probe+0x8d/0x150 [ 353.885552][ T43] usb_probe_device+0x1c4/0x390 [ 353.890446][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 353.895805][ T43] really_probe+0x26d/0x9e0 [ 353.900339][ T43] __driver_probe_device+0x18c/0x2f0 [ 353.905623][ T43] driver_probe_device+0x4f/0x430 [ 353.910674][ T43] __device_attach_driver+0x2ce/0x530 [ 353.916041][ T43] bus_for_each_drv+0x251/0x2e0 [ 353.921219][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 353.927161][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 353.932562][ T43] __device_attach+0x2b8/0x400 [ 353.937346][ T43] ? __pfx___device_attach+0x10/0x10 [ 353.942626][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 353.947875][ T43] bus_probe_device+0x185/0x260 [ 353.952733][ T43] device_add+0x7b6/0xb50 [ 353.957080][ T43] usb_new_device+0xa39/0x16f0 [ 353.961860][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 353.967156][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.972347][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.977562][ T43] hub_event+0x2958/0x4a20 [ 353.982057][ T43] ? __pfx_hub_event+0x10/0x10 [ 353.986841][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 353.992558][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.997786][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 354.003489][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 354.009256][ T43] process_scheduled_works+0xae1/0x17b0 [ 354.015149][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.021191][ T43] worker_thread+0x8a0/0xda0 [ 354.025814][ T43] kthread+0x711/0x8a0 [ 354.029901][ T43] ? __pfx_worker_thread+0x10/0x10 [ 354.034999][ T43] ? __pfx_kthread+0x10/0x10 [ 354.039621][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.044806][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.050004][ T43] ? __pfx_kthread+0x10/0x10 [ 354.054585][ T43] ret_from_fork+0x4bc/0x870 [ 354.059205][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 354.064318][ T43] ? __switch_to_asm+0x39/0x70 [ 354.069095][ T43] ? __switch_to_asm+0x33/0x70 [ 354.073840][ T43] ? __pfx_kthread+0x10/0x10 [ 354.078463][ T43] ret_from_fork_asm+0x1a/0x30 [ 354.083242][ T43] [ 354.086242][ T43] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 354.093503][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 354.102682][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 354.112731][ T43] Workqueue: usb_hub_wq hub_event [ 354.119231][ T43] Call Trace: [ 354.122518][ T43] [ 354.125449][ T43] dump_stack_lvl+0x99/0x250 [ 354.130048][ T43] ? __asan_memcpy+0x40/0x70 [ 354.134637][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.139835][ T43] ? __pfx__printk+0x10/0x10 [ 354.144434][ T43] vpanic+0x237/0x6d0 [ 354.148414][ T43] ? __pfx_vpanic+0x10/0x10 [ 354.152919][ T43] panic+0xb9/0xc0 [ 354.156638][ T43] ? __pfx_panic+0x10/0x10 [ 354.161062][ T43] __warn+0x31b/0x4b0 [ 354.165039][ T43] ? firmware_fallback_sysfs+0x746/0x9b0 [ 354.170671][ T43] ? firmware_fallback_sysfs+0x746/0x9b0 [ 354.176296][ T43] report_bug+0x2be/0x4f0 [ 354.180617][ T43] ? firmware_fallback_sysfs+0x746/0x9b0 [ 354.186237][ T43] ? firmware_fallback_sysfs+0x746/0x9b0 [ 354.191861][ T43] ? firmware_fallback_sysfs+0x748/0x9b0 [ 354.197485][ T43] handle_bug+0x84/0x160 [ 354.201810][ T43] exc_invalid_op+0x1a/0x50 [ 354.206390][ T43] asm_exc_invalid_op+0x1a/0x20 [ 354.211228][ T43] RIP: 0010:firmware_fallback_sysfs+0x746/0x9b0 [ 354.217461][ T43] Code: f3 fb e9 5d fc ff ff e8 78 69 f3 fb c6 05 89 75 9a 09 01 48 c7 c7 e0 ef e6 8b e8 25 f7 5a fb e9 85 fc ff ff e8 5b 69 f3 fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 c0 f0 e6 8b 4c 89 e2 e8 35 5e 5f fb e9 [ 354.237056][ T43] RSP: 0018:ffffc90000b36890 EFLAGS: 00010283 [ 354.243122][ T43] RAX: ffffffff85cc9a55 RBX: dffffc0000000000 RCX: 0000000000100000 [ 354.251083][ T43] RDX: ffffc90018ed3000 RSI: 00000000000a4850 RDI: 00000000000a4851 [ 354.259045][ T43] RBP: 0000000000000001 R08: ffffffff8f7cf777 R09: 1ffffffff1ef9eee [ 354.267007][ T43] R10: dffffc0000000000 R11: fffffbfff1ef9eef R12: ffffffff8c301660 [ 354.274967][ T43] R13: 0000000000001770 R14: ffff8880322c10b0 R15: 00000000fffffff5 [ 354.282974][ T43] ? firmware_fallback_sysfs+0x745/0x9b0 [ 354.288615][ T43] ? kmem_cache_free+0x19b/0x690 [ 354.293546][ T43] ? _request_firmware+0x6be/0x15b0 [ 354.298737][ T43] _request_firmware+0xf83/0x15b0 [ 354.303750][ T43] ? preempt_schedule_thunk+0x16/0x30 [ 354.309136][ T43] ? __pfx__request_firmware+0x10/0x10 [ 354.314582][ T43] ? __lruvec_stat_mod_folio+0x6f/0x2e0 [ 354.320129][ T43] request_firmware+0x36/0x50 [ 354.324799][ T43] dvb_usb_download_firmware+0xaf/0x260 [ 354.330343][ T43] ? __pfx__printk+0x10/0x10 [ 354.334933][ T43] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 354.341088][ T43] ? dvb_usb_device_init+0x14c/0x2580 [ 354.346467][ T43] dvb_usb_device_init+0xdd2/0x2580 [ 354.351712][ T43] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 354.357602][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.362800][ T43] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 354.368697][ T43] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 354.375025][ T43] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 354.380653][ T43] ? __update_runtime_status+0x1b3/0x390 [ 354.386290][ T43] ? __pm_runtime_set_status+0x785/0xa50 [ 354.391929][ T43] usb_probe_interface+0x668/0xc30 [ 354.397048][ T43] ? __pfx_usb_probe_interface+0x10/0x10 [ 354.402671][ T43] really_probe+0x26d/0x9e0 [ 354.407197][ T43] __driver_probe_device+0x18c/0x2f0 [ 354.412503][ T43] driver_probe_device+0x4f/0x430 [ 354.417543][ T43] __device_attach_driver+0x2ce/0x530 [ 354.422921][ T43] bus_for_each_drv+0x251/0x2e0 [ 354.427769][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 354.433653][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 354.439026][ T43] __device_attach+0x2b8/0x400 [ 354.443790][ T43] ? __pfx___device_attach+0x10/0x10 [ 354.449156][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 354.454352][ T43] bus_probe_device+0x185/0x260 [ 354.459196][ T43] device_add+0x7b6/0xb50 [ 354.463526][ T43] usb_set_configuration+0x1a87/0x20e0 [ 354.469005][ T43] usb_generic_driver_probe+0x8d/0x150 [ 354.474476][ T43] usb_probe_device+0x1c4/0x390 [ 354.479339][ T43] ? __pfx_usb_probe_device+0x10/0x10 [ 354.484706][ T43] really_probe+0x26d/0x9e0 [ 354.489216][ T43] __driver_probe_device+0x18c/0x2f0 [ 354.494522][ T43] driver_probe_device+0x4f/0x430 [ 354.499566][ T43] __device_attach_driver+0x2ce/0x530 [ 354.504950][ T43] bus_for_each_drv+0x251/0x2e0 [ 354.509796][ T43] ? __pfx___device_attach_driver+0x10/0x10 [ 354.515686][ T43] ? __pfx_bus_for_each_drv+0x10/0x10 [ 354.521164][ T43] __device_attach+0x2b8/0x400 [ 354.525963][ T43] ? __pfx___device_attach+0x10/0x10 [ 354.532379][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 354.538243][ T43] bus_probe_device+0x185/0x260 [ 354.543109][ T43] device_add+0x7b6/0xb50 [ 354.547448][ T43] usb_new_device+0xa39/0x16f0 [ 354.552222][ T43] ? __pfx_usb_new_device+0x10/0x10 [ 354.557680][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.562873][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.568078][ T43] hub_event+0x2958/0x4a20 [ 354.572591][ T43] ? __pfx_hub_event+0x10/0x10 [ 354.579300][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 354.585044][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.590250][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 354.595968][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 354.601697][ T43] process_scheduled_works+0xae1/0x17b0 [ 354.607284][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 354.613286][ T43] worker_thread+0x8a0/0xda0 [ 354.617897][ T43] kthread+0x711/0x8a0 [ 354.621973][ T43] ? __pfx_worker_thread+0x10/0x10 [ 354.627075][ T43] ? __pfx_kthread+0x10/0x10 [ 354.631665][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 354.636859][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.642051][ T43] ? __pfx_kthread+0x10/0x10 [ 354.646640][ T43] ret_from_fork+0x4bc/0x870 [ 354.651228][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 354.656339][ T43] ? __switch_to_asm+0x39/0x70 [ 354.661116][ T43] ? __switch_to_asm+0x33/0x70 [ 354.665898][ T43] ? __pfx_kthread+0x10/0x10 [ 354.670509][ T43] ret_from_fork_asm+0x1a/0x30 [ 354.675305][ T43] [ 354.678669][ T43] Kernel Offset: disabled [ 354.683002][ T43] Rebooting in 86400 seconds..