last executing test programs: 5m41.567882386s ago: executing program 4 (id=2091): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x80, 0x2, 0x40, 0x81, 0x5, 0x4}, {0x9, 0x5, 0x6, 0x2, 0x40, 0x5, 0x9b, 0x4}, {0x9, 0x5, 0x80, 0x3, 0x200, 0x4, 0x10}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000000c0)={0x0, 0x7, 0x4, "873a4b9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m38.428669274s ago: executing program 4 (id=2098): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @broadcast}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x74}}, 0x0) r1 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b04, 0x0) 5m35.315996334s ago: executing program 4 (id=2109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70b527, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xf}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20009805}, 0x24000004) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 5m35.16919804s ago: executing program 4 (id=2110): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000020000000000000010000000", @ANYRES32=0x1, @ANYBLOB="1e64646d000000000000000000c1731400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000a000000cc0004801300016b20"], 0xfc}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f00000001c0)={0x2, 0x7}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="000308000000"], 0x0, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x4}, 0x0, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0x3}}) ioctl$EVIOCGMASK(r5, 0x5b04, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x1, 0x8, 0x8, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a0b, 0x15, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 5m31.725229062s ago: executing program 4 (id=2119): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000002080)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1], 0x50) r4 = syz_io_uring_setup(0x104, &(0x7f00000000c0)={0x0, 0xc2ce, 0x10000, 0x0, 0x105}, &(0x7f0000003000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000002180)=[{0x0}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x229) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x4, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004680aa3056c6557e544ffd00526d006f4b730302c6bccec0799a3e8bb1c5a0740c24e9e6b51baabc788bdf01406d22c2a8e698d1fb033a3eda1da23fe524ae97199914aba5865dd96d76305384f4066839576b20a3de9a85ab979f0536b0a92ff7188751c16ec479793854d15742b4a6c8a7964697a8ffa24a81a581c87a04fccc26070a0d2c1cd"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x4, 0x65a2, 'syz0\x00', &(0x7f00000020c0)=['%1', '\x92\x025\xe3\x89M8y\xf1z\xad\xf0\xa6\xceO\x15#\x93V\x03\x00CD\xb9k\x99\"\x91z.\xdd\xb7\xcc\xeeL\xf6\xb9y~\xe4w*^y\x1bG)\xf0\xca\x95\xafpU\xa5\r\x8d\xe9\xc6<\xa6v\x1a1(N\x1e\xd9\xc9\xa4\xf5Fx\x87\xc2\xf13e\xdas&\xb6u\x0f\x1e\xb8\xa3\xd5\x01\xfc\x91\x06;\x80Z\x89\x96\xc8Y&2\x96(\xef\x8f\xe0\x9a\xc2\x8au@\xf6\xf8\xa9\xaf\xf8\x9cZ\x80\xef\x96o\x9a\xafs\x17\xeb\xd4\xd1\xf6_', '+\x00', 'syz0\x00'], 0x8b}) semget(0x1, 0x4, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x2, 0x5, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0x4b31, 0xffffffeffffffffe, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x400000010000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0x100000001, 0x0, 0xfffffffffffffffe, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) socket$packet(0x11, 0x3, 0x300) 5m30.220944395s ago: executing program 4 (id=2124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b40)="5a3eeff13ebee4914695164b4b6810929e71c909604e5547c039372220249eb4b8e2b2b161a49ecdaf7f82dbd0a90537bdd4f260919cef8ae6ecc25234d74ebf82fea8e4506b99f49ae6cd4c588cbc74db296872ed00aa6af3967395cb33d2674c9d1f61aead43f948b8195a6c810ab8df063fde2504d220b98bde469b18536c3cd1618f720fd771a7c2", 0x8a}, {&(0x7f0000000940)="08848e036c11d3dc4507e05841f5d363902b1f86b8e455ff0a2509dad6cc4227e536608aa6ade634929245d6866b3f837d24e6fd9548f791fa7153e1cb1b186d5b3a01bc21be6d0907a34a863e80c0c17e5e0455411ed20bf7b9aec5bde3c850446e8d618ee0f957bbdb89cf5029dcd2d2d5a6ba4ce260f4dce5f4180806c62e199036", 0x83}, {&(0x7f0000000300)="e56d4c4bf5301c23d1aab1a66b94ed272a49283a0adba98d02c9848b2b55575115a0f6701469e180c1c59e35a5bd", 0x2e}, {&(0x7f0000000440)="a5edfb012b9230ea03e6a047bf4d7f5f9b0fe0218a1e565dc3456aa2f19990491053dfc1b70600629e6a4145c790ba669bf71c9afc4b68bf408566b6351ca940c0f1cdcb618d70aecc331a3275cd13f5a2375f328191503680829f634a8b68b31ee018e3df2b4d140f08d237f486b1c535f168e9ce7f1ff9", 0x78}, {&(0x7f00000082c0)="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", 0x59d}], 0x5, &(0x7f0000000a80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000001) sendto$inet(r2, &(0x7f0000000000)="cf3a19d02a04e49cf90a0a4363d1", 0xe, 0x8000, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x12) r3 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0xc84c, 0x80}) close_range(r3, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000c00)=ANY=[@ANYBLOB="120127ed01000000000001090200000009210000000122050009058103bb4c25626ba2d2836d01968457c6615386fdbe7bea2e207efac6dd2a2fccb45af84b2f130be63c68b8223d0a5486fc2de7f3e715306643ddbaa7c9702aa9bcd675b97f4f5e9e37f23cd83fc54bd5703905001e06430e48a4036b6ea626fbe52baca47dcb631a3cebc8f32dd40e13d5bcd1314bc1c8879224ea65da466300000000005ae6423ef4c02490ebcb1f10985969e05eb68cdfd021482be20cb4fa29d700f32965ae3e5793656e4a939f7ecd0637a01bb0dbfbe7886bcb270d28781d7e52101bdab846f4020e098c5a0a99a3b16d3cfaccfa232015f8ef3e16a280f35854d6588362e7db207a38be1973778c97bc8e2c1d920c9b28e1dfc364b857e59f493954e2bf2e00f108b3f63e62832b5d14203ac9f94cb52f847894333fe41002fc235eb9cf245eb67e1030506a0a2ff4922202d5f857b186c574beea56f1f21438b3c834b163c7c251aa1b505282eabc3e2395c57bb31024198b60bebb0a96b6e2dc5904975129f2"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0022220000009328337167b31ce93ee977000000007bb1120b3fb3b9585dde850d8518b3"], 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="23216704b18b7c"], 0x0}, 0x0) 5m29.762689429s ago: executing program 32 (id=2124): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b40)="5a3eeff13ebee4914695164b4b6810929e71c909604e5547c039372220249eb4b8e2b2b161a49ecdaf7f82dbd0a90537bdd4f260919cef8ae6ecc25234d74ebf82fea8e4506b99f49ae6cd4c588cbc74db296872ed00aa6af3967395cb33d2674c9d1f61aead43f948b8195a6c810ab8df063fde2504d220b98bde469b18536c3cd1618f720fd771a7c2", 0x8a}, {&(0x7f0000000940)="08848e036c11d3dc4507e05841f5d363902b1f86b8e455ff0a2509dad6cc4227e536608aa6ade634929245d6866b3f837d24e6fd9548f791fa7153e1cb1b186d5b3a01bc21be6d0907a34a863e80c0c17e5e0455411ed20bf7b9aec5bde3c850446e8d618ee0f957bbdb89cf5029dcd2d2d5a6ba4ce260f4dce5f4180806c62e199036", 0x83}, {&(0x7f0000000300)="e56d4c4bf5301c23d1aab1a66b94ed272a49283a0adba98d02c9848b2b55575115a0f6701469e180c1c59e35a5bd", 0x2e}, {&(0x7f0000000440)="a5edfb012b9230ea03e6a047bf4d7f5f9b0fe0218a1e565dc3456aa2f19990491053dfc1b70600629e6a4145c790ba669bf71c9afc4b68bf408566b6351ca940c0f1cdcb618d70aecc331a3275cd13f5a2375f328191503680829f634a8b68b31ee018e3df2b4d140f08d237f486b1c535f168e9ce7f1ff9", 0x78}, {&(0x7f00000082c0)="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", 0x59d}], 0x5, &(0x7f0000000a80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r2 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000001) sendto$inet(r2, &(0x7f0000000000)="cf3a19d02a04e49cf90a0a4363d1", 0xe, 0x8000, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x12) r3 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0xc84c, 0x80}) close_range(r3, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000200)={0x0, 0x0, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000c00)=ANY=[@ANYBLOB="120127ed01000000000001090200000009210000000122050009058103bb4c25626ba2d2836d01968457c6615386fdbe7bea2e207efac6dd2a2fccb45af84b2f130be63c68b8223d0a5486fc2de7f3e715306643ddbaa7c9702aa9bcd675b97f4f5e9e37f23cd83fc54bd5703905001e06430e48a4036b6ea626fbe52baca47dcb631a3cebc8f32dd40e13d5bcd1314bc1c8879224ea65da466300000000005ae6423ef4c02490ebcb1f10985969e05eb68cdfd021482be20cb4fa29d700f32965ae3e5793656e4a939f7ecd0637a01bb0dbfbe7886bcb270d28781d7e52101bdab846f4020e098c5a0a99a3b16d3cfaccfa232015f8ef3e16a280f35854d6588362e7db207a38be1973778c97bc8e2c1d920c9b28e1dfc364b857e59f493954e2bf2e00f108b3f63e62832b5d14203ac9f94cb52f847894333fe41002fc235eb9cf245eb67e1030506a0a2ff4922202d5f857b186c574beea56f1f21438b3c834b163c7c251aa1b505282eabc3e2395c57bb31024198b60bebb0a96b6e2dc5904975129f2"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0022220000009328337167b31ce93ee977000000007bb1120b3fb3b9585dde850d8518b3"], 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="23216704b18b7c"], 0x0}, 0x0) 9.638415247s ago: executing program 0 (id=3139): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000001000000fe880000000000000000000000000101ac141436000000000000000000000000fffc0000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f1ffffff"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4}) r7 = socket$nl_route(0x10, 0x3, 0x0) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040961b090000000000000109022400"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="250000007eea96950000", @ANYRES32=0x0], 0x3c}}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 9.021757215s ago: executing program 2 (id=3142): r0 = syz_io_uring_setup(0x249a, &(0x7f0000000400)={0x0, 0x8007958, 0x3180, 0x3, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffd, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000001b80), 0x1, 0x1}) io_uring_enter(r0, 0x627, 0xc1040000, 0x6b, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x940, 0x0, 0x89902505a238a6fd}) r3 = mq_open(&(0x7f0000000540)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="0503010bfd"], 0x9) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\x04\x00\x00\x00\x00\x00\x00\x00\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\xdf$2dUU\x18\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\xb2W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11\xb2', 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r6, 0x310f000) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x300, 0x18c, 0x203, 0x0, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xa8, 0xd0, 0x0, {0x1000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r8 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000400)=r7, 0x4) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000052000100000000000000ff080200000008000100", @ANYRES64], 0x1c}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80, @loopback, 0x9}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x14, &(0x7f0000000040), 0x50) listen(r9, 0x0) accept$inet6(r9, 0x0, 0x0) mq_timedsend(r3, 0x0, 0xff7f, 0x0, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[@ANYBLOB="3c00000040000701feffffff00000000017c0000040042800c00018006000600800a0000180002801000148008000d00", @ANYRES32, @ANYBLOB="04001880a3000180"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet6_sctp(0xa, 0x1, 0x84) 8.604652914s ago: executing program 2 (id=3145): memfd_create(&(0x7f00000007c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xb2m\xe6\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\x00\x00\x00\x00\x01\x00\x00\x00nh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xec\xd3c\xdc\x88y\xbb+=#\t\x92<\x87Ro\xdeP\xab\xd5i\xebRW[\x16\x85\xe2\x81\x87\x1f\x88\x85\xef^N\xe8\x9a\xbb\xa7\x1c#\xc1I\xa3\xc0\"\xe3\xba`\x9e\x9a\xb8\xc6\xc8\x10!\xf1\xa2\xbfSL\xa3\x05\xf4\xaa\r\x89F\xac-\xd6[\x17\xcd\"\x8c\xb3\xab\x04bl\x0f\x8c\xfe\xb03 \xe1\x81\x84{C\xe5\x83\xc3\xf3\xaf\xd7\x7fg)\xf4&\xd9| \xb0\xdac\x9e\x16\xe5\aC\xf5q\x82\x033\xedG\x1e\x81}\xda\x95\xe5\xd5\x00\x1d\x1f.N\"dxn>D?\x81\xcd\xf2\xd4\xb2\xbf\x15z\xc3\xd9\xd3.!8\xff8\xf7\xf5\xa9D\x0eb\xeb\x89~\xd4Y\xad\xc9\x04\x18\x11\xd3\xfbpT\t\xebD\v\xea\xd8d\x94%?t\xcc\xa3\x041\x06\x80\xa3\xc6{\xce\x97\x1b\x81!o\xa3v\x96\xf6\xa4\x03Z\t\x04\xccR{\xd1(\x97b\x1b\xda\x80\xdc.w\xdbGC\xba?\xa1c@\xc2`y9\xca\x94\xe8\x10\x9c\xc0\x89>\x81\xd2@\x1c\xd6\xcc\xd9\xdbR\xecn\xd0\xd1\x12\xb5\xf2\xdb#Dk\x9d\xa7\xc2\"\xe2\x03D\x12J\rWe\xaf\xfc],\x7f\xe6\x8b\xab\x96\x92\xf6\xd7\r\xa8\x99e\xa4\xb7X\xfd|\x95\xdcek\xe8\x97\xd2\x9a\xdc\vSCI\xe5\xc1K4\xce\x99\xb3\xbfL=\xe6g0\t[nM\xc8G\xfc\xb2_w\'K\bI\vX\xd6\x95Q\xccvW42\x11\xe7\x18%uU\xd4\x96W\\^\xbf\f5\x14Rd%\xb9k\xbb\x8d\x90\x02\xa1\xd6*\xd7L\xa5\xb6\xea\x19\x8d\x83\x04\xdd\xfd\x06p\x17\x88\xb8\xe1X\x9a\xd4E2\b\b\x05\x9cRg\xb5\\\xa7}\x19\xd5\xe6o\xedd\xa0P\x88H\xd2\xe6\xb6\x93\xf7J6\rA\xec\xaa0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xff7fffff}, 0x0) (async) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) r3 = epoll_create(0x3ff) (async) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000001480)={0x40000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x10}) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) (async) lsetxattr$security_capability(&(0x7f0000000100)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x3, 0x45}, {0x8, 0x3}]}, 0x14, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, &(0x7f00000026c0)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x4, @remote, 0x100}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@tclass={{0x14, 0x29, 0x43, 0x6}}], 0x18}}], 0x1, 0x4000080) (async) ptrace(0x19, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) 8.313198699s ago: executing program 2 (id=3148): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="3101000001cde30a0c30bad9d119e31563dccd5e08cb0607e8ff0700000001090224000100007e000904344102d469e7000905fe24cc07d4522684bc6143b5f137998bfd790012b4adbbc72ee9540e8e6c9f3c05a53986a7a0b2bccd65c2ababb6779c5669e14b536d04", @ANYRES32], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000100100000e0000001800000000000000100100000e"], 0x28}, 0x80010) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000080), 0x1ff, 0x4801) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="3101000001cde30a0c30bad9d119e31563dccd5e08cb0607e8ff0700000001090224000100007e000904344102d469e7000905fe24cc07d4522684bc6143b5f137998bfd790012b4adbbc72ee9540e8e6c9f3c05a53986a7a0b2bccd65c2ababb6779c5669e14b536d04", @ANYRES32], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000100100000e0000001800000000000000100100000e"], 0x28}, 0x80010) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) fcntl$notify(r5, 0x402, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)={{0x0, 0x0, 0xfffffffffffffcfd}}) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0x1ff, 0x4801) (async) 7.73652708s ago: executing program 1 (id=3151): ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5433, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x1891c3) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x20060d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0xfffffffffffffe16, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x488083) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x6f, 0x5, @scatter={0x3, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/94, 0x5e}]}, &(0x7f0000000340)="de74d75691ce3c736f82dc57ac221dd15bd66c119706c9cb2fd7e723cd88cc22108eabedf3ce2815aaf6dd6fb898f3df6a714416eb38e4c53fe803e0944dee007794002f6a7632b4616faf44882d203009bddb990dd44c9b270a5801c117f40be37d5aa04c9c8e3927de79a0fb15e6", &(0x7f00000003c0)=""/4, 0x7f, 0x4, 0x0, &(0x7f0000000400)}) 7.485448275s ago: executing program 1 (id=3153): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0xc, 0x0, @opaque="95a2d012"}}}}}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x108) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) statx(0xffffffffffffffff, 0x0, 0x900, 0x8, &(0x7f0000000880)) sendmmsg$unix(r1, &(0x7f0000003ec0), 0x0, 0x4008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x80002, 0x0, 0x3}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000005880)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x47, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3303910daa658744d2d010203010902350001080010000904df0203080662ff09050c022000f0060309050710003e8fc167020102070824", @ANYBLOB="0132b8"], 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a00000800", @ANYRES32=r4, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6.441590814s ago: executing program 3 (id=3156): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a8000081"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(r3) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4f8cad880499afeee309c31888a8", 0x5b8, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a8000081"], 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r2, 0x1, 0x0) (async) fchdir(r3) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8001, 0x0, 0x0, 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) close(r3) (async) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) (async) sendto$packet(r0, &(0x7f0000000100)="4f8cad880499afeee309c31888a8", 0x5b8, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) 6.336517333s ago: executing program 3 (id=3157): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000240)=""/249, 0xf9}], 0x2, 0x5e, 0xfffffff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="20100c00000030632be500"], 0x0, 0x0}) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000480)={0x0, 0x17, 0x28, "086e5b9b2bb03927c0b1323aebd8e686ff77441b7a1c6b2b84dee397631b87abd78384d72edf33e0"}, &(0x7f0000000a00)={0xa1, 0x1, 0x400, "1353b78c21b87bbf9c3ea8b107ea9695191ba3374bfd2ed735d20e881ff6a45ed09166d77412a334c0c733959442df271fb0ba537fd892f4e55b6ad45b59f0facfa8ac06df6540b7c867ec629fb3a5d9a234b8e8afc6284ddb7994e79b6287ef349a8f97767e38097ebf1a2e0aaf66a06540e55dba41606577f8d8d3eae00d62d590b9a0fca258cd6d2c30e232e2303c57875ae18760c16d02ce62524128abcdcf5be788b3dba0a9b66c0afaa1473601d88a4a71513a85e7e11a3f48a1253a22f89bb0ffe7dd1044b7e204fd80000000fbc9945e5125cfb0d959981146df51ce86fa6576acafcd66f36cc54cfe7ecc9cccec9a399c4ea7db9e620591c874e25485b9d49b0da49ae96d3e2c434e2353493a43558f79911c99594bf04883a59361621a4f3a0aeda2e948a4d21d115f99017c0bd7d37bee83eb72bda1c2e5899f54224552ac5d0217e3b23d546396bd5f7c898c3a6e6b93b59ae4ac98ce5ea0584cb235cba199f5f728ce227776556d708cd83ae5abf949b4ef5c8ee43d58bdead708af544ddde873ffa0ae9b931fda035031cb3f94564ece0cadace5a56066f49319b2cca677751349750e31c3fb24d5a0f2b102506ee6ff877ce3987515a3c571fc5cb8baf1cab1681e2e2fb7d1994785b2ed7f3e5c11759d121b048800a5d039d669242f89025ff771ae8cd2fd1fc5d7ce7773507071677b8287ecbd6d2fae62a3d83d86f93d947a05c6ec0c0555a35161d3c5c5239155c06554dc7bf1092e4afda6542a2bd46da6aa2ac268a55759888eb90a6b7f34396f11463e822a1155401b32b564ebb1ee4ed7b930b4cbcabcd14872d041195c27e653d2d88d5ea0b9f4357268566c169ec7cd2dfaddaa966df9cb401d3e1159be1d7e75b79024787f37e40a88c203d42570dc585a0b82f6ec10d5d3f9ded11ff9970696739a0f8559063f96c7d19b836d9fc2efc30af6cd268314093b024979cfa7f07e469716a325ba11210ae1b9720f52202961f7021a97defc1c166c8e7ce1b4decaca63fe376a31e227c0304bac904b7061c6d3ddcdfaa9ec9533b585f25c9173d065f5ccf0a4e61ade02bdc1c2abed6263a12c050f54e9859b74ee86e01aa5d2bda8f1093aeb7d1e5c9c000074b725703fad748d38e87f1983a0b9a0d8833b0d9e9687b4a3d526245ba5a4a41c83e14aafa94313f3863894a1ec8900f956893844f85df81aee0f1a82b525d193ee437fad1dc9d5e2464c56988cb890770440b115d1cdfbbcf506fa484cf5128d474108f032585309021f8b0750db6f60d63c5c8f96ae6e19b44b8c5f5f344d3cb22f31eb430c686d25b2123a814b3b960fec4320aec3c284964d0c2ad56960109119d15e2f975a6f51d0d7fc8a22f59a2f2ee85601e4caafc18b90b0095f9e5ec4fc00"}, 0x0}) 5.77008712s ago: executing program 0 (id=3158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003100)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="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", 0x5c1}], 0x1}}], 0x2, 0xc044) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r1, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000014000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1) 5.277653869s ago: executing program 0 (id=3159): cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x1, 0x8000, 0x6, 0x400, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast2, @empty, {[@generic={0x83, 0x6, "afd15937"}, @ssrr={0x89, 0x2b, 0xd4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x9, @remote, @broadcast, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast2]}, @timestamp={0x44, 0x28, 0xf5, 0x0, 0x1, [0xa, 0x6, 0x6, 0x95, 0xfd2, 0x8, 0x4, 0x5, 0x8]}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x15, &(0x7f00000003c0)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb58a}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000240)=[r1, r1, r1], &(0x7f0000000480)=[{0x4, 0x3, 0x7, 0x4}, {0x0, 0x5, 0x0, 0x7}, {0x3, 0x3, 0xe, 0x9}, {0x2, 0x2, 0x9, 0x4}, {0x4, 0x2, 0x4}, {0x1, 0x1, 0xe, 0x1}, {0x1, 0x2, 0x0, 0x1}, {0x1, 0x2, 0xd, 0x7}, {0x2, 0x5, 0x0, 0x1}, {0x1, 0x4, 0xf, 0x9}], 0x10, 0x81}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit]}, &(0x7f0000000640)='GPL\x00', 0xc0000000, 0xba, &(0x7f0000000680)=""/186, 0x41000, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0x7, 0x7, 0x9}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000780)=[r1, r2, r1, r1, r1], &(0x7f00000007c0)=[{0x3, 0x1, 0xf, 0x9}, {0x3, 0x5, 0x7}, {0x2, 0x3, 0xb, 0x8}], 0x10, 0x5}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@bridge_setlink={0x0, 0x13, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, r3, 0x220b8, 0x110a0}, [@IFLA_CARRIER_CHANGES={0x0, 0x23, 0x6}, @IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x0, 0x1, r4}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x971135d40c5775f9}, @IFLA_XDP_EXPECTED_FD={0x0, 0x8, r5}, @IFLA_XDP_FD={0x0, 0x1, r1}]}, @IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x40000000790, 0x80000000002, 0x8, 0x10001, 0xffffffff, 0x5e4, 0x3, 0x3, 0x2000000043, 0x3, 0x100000001, 0xfffffffffffffffe, 0x3, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000c00)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.172753789s ago: executing program 2 (id=3160): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000100)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000663000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa002000000008080c4700003000000b0000069078ac141400ac1e000107070700eeff08000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e000000200"/195], 0x13c}}, 0x20040880) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c) sendto$inet6(r6, &(0x7f0000000000)="ee", 0x1, 0x200400d0, &(0x7f0000000040)={0xa, 0x4e28, 0x8000028, @loopback, 0x1}, 0x1c) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x9}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 4.942365551s ago: executing program 0 (id=3161): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000040)=@abs, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x2, 0x80000, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r4 = syz_io_uring_setup(0x81f, &(0x7f0000000600)={0x0, 0x3, 0x8, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xdffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x9, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001c0001042cbd0300ffdbdf2507000000", @ANYRES32=r8, @ANYBLOB="4000070b0a000200aaaaaaaaaa0c000008000f00010000"], 0x30}, 0x1, 0x0, 0x0, 0xc880}, 0x840) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)=@overlay={0x1, 0x3, 0x4, 0x100, 0x7f, {}, {0x5, 0x0, 0x7, 0x7, 0x7, 0x3, "4fa460c5"}, 0x4, 0x3, {}, 0x5}) io_uring_enter(r4, 0x47bc, 0x0, 0x21, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r10 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r10, &(0x7f0000000380)='encrypted\x00', &(0x7f00000003c0)='syzkaller0\x00') 4.273596842s ago: executing program 3 (id=3162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000140)={0x7, 'team0\x00', {0xc9b7}, 0x8}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvfrom(r2, &(0x7f0000000180)=""/67, 0x43, 0x10140, &(0x7f0000000200)=@llc={0x1a, 0x18, 0x5, 0xa8, 0x2, 0xb, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$setown(r2, 0x8, r3) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000022c0)='syz0\x00', 0x200002, 0x0) (async) fspick(0xffffffffffffffff, &(0x7f0000002300)='./file0\x00', 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000002380)={0x3, &(0x7f0000002340)=[{0x1ff, 0x5, 0x48, 0x7486}, {0x0, 0x20, 0xcc, 0x4}, {0x6, 0x80, 0x0, 0x8}]}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000023c0)=0x210, 0x4) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002400), 0x391a81, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x0, &(0x7f0000002440)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000002480)={0x0, 0x3, 0x7ff, 0x3}, &(0x7f00000024c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000002500)={r7, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x2}}, 0x4, 0x37a, 0x1000, 0x1, 0x2, 0x9, 0x9}, 0x9c) r8 = openat$cgroup_ro(r4, &(0x7f00000025c0)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x400010}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x50, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xff}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff7}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x40040) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000002740), 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x0, 0x4, 0x4000010, r8, 0x0) execve(&(0x7f0000002780)='./file0\x00', &(0x7f0000002880)={[&(0x7f00000027c0)='-@(\'$\x00', &(0x7f0000002800)='cpuacct.stat\x00', &(0x7f0000002840)='{\x00']}, &(0x7f0000002900)={[&(0x7f00000028c0)='batadv\x00']}) syz_clone(0x48800000, &(0x7f0000002940)="507f86bbedcb8b3862ea67523b47c4bebb566303baf5b488f46e24d07cd28caf79f348d997cf28aebfc464d9ecbb6facd85addcfd2c8165cd72f6a207740939ab558c6bbbb10bc4906eb6d5be32b6489128d9bcb3563ec6513eac84e2c08b2f31308", 0x62, &(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)="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") (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000003a40)=[@timestamp, @sack_perm], 0x2) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r9, &(0x7f0000003a80), 0x0, 0x0, &(0x7f0000003ac0)={0x77359400}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000003b00)={'pim6reg1\x00'}) (async) ioctl$RTC_VL_READ(r8, 0x80047013, &(0x7f0000003b40)) 4.268051932s ago: executing program 0 (id=3163): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000140)={0x80000000, 0x0, &(0x7f00000005c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r1, 0x0, &(0x7f00000004c0)}) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x25dfdbfb}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_newnexthop={0x28, 0x68, 0x0, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x2, 0x0, 0x3}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5}}, @NHA_BLACKHOLE={0x4}]}, 0x28}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=r8, @ANYBLOB="000100009c00008937e45d0f31b19b60c0c86300289612697036b46e50220cf57ecd3393000f0002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_io_uring_setup(0xb, 0x0, 0x0, &(0x7f00000000c0)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.172948771s ago: executing program 5 (id=3164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000300)={0x40800, 0x0, 0x0, &(0x7f0000000040), {0x9}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x58) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r2, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000010) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a800160004000140060700000000000000d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4e1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccfb42b1073520ae", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000280)=""/54, 0x36}], 0x2, 0xa, 0x5) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4000010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x40, 0x0, 0x0, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) fallocate(r9, 0x1, 0x100000000, 0x80000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$xdp(0x2c, 0x3, 0x0) 3.618088061s ago: executing program 3 (id=3165): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x9, 0x0, 0x4, 0x0, 0x806, 0x5, 0x7fff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010380", @ANYRES32=r7, @ANYBLOB="1c005a801800018014000300ac030800090004001d0fff070200980c"], 0x38}}, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r3}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000030429bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a428040000000000040a1880040400000100000000"], 0x3c}}, 0x20048000) socket$rxrpc(0x21, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000c80)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r9 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="01000000ffffff7f09000000c3000000498d662e50e7e7bace33855f4329a8650d9331c170468859e1da477d31f61223db01340be7dc21e2a07b0b2fbfc02d8d387f33f89d0f6c45e15010f83612f9b3c77b82ac16585c48a5d1eeefd93f5ef5625e4b619810cd915b17821fc917cf41cd15b4a520130cce"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000180)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x89\x9d#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0) 3.513809314s ago: executing program 1 (id=3166): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') read$snddsp(r1, &(0x7f0000000200)=""/125, 0x7d) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffee3, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0xfffffffc}], 0x0, 0x0, 0x0}) (async) dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) sendmsg(r4, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) (rerun: 64) r5 = syz_io_uring_setup(0x98, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r5, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0x4, 0xca042) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000980)={'#! ', './file1/../file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.23\x06\xc6\x8bSG\xfbstat\x00\x88\xd8K\x91\x17\xb3\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8\v\x00#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdfK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*zt\"c\x03N%E\xee\x9c9\xfe\xa5\xeb\xda\xa3\xfa\xdf\xbfQS\xcbx'}, {0x20, 'EY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 Pj4\xe9\x021\xe8\x88\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?gpv5\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0eN\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x0e\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8\x91\x06D\xa6\xc0\x90?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x93\xfdw\xb4\xc5&CF$\xeb\x91\xad\x1b-\r\xbe2f\xd38R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88\xb7C\x7f\xf0\xb8f\x90>P>=\xedBQO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xddjt\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2\x8a\x90d\xb6C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5>\x13\xf0\xb5\xa1Y\x90\x01\xbd\xbcC#\x00'/536}]}, 0x2ab) 2.076247734s ago: executing program 1 (id=3167): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x9a88, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.959778416s ago: executing program 5 (id=3168): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "ccb0ff683ed3676a", "4fb2ebed617131997ec606d113b262f3603908696c4f31ff90b6efcf0814df5c", "0c6ac6b2", "b4b01c09821c669b"}, 0x38) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x400) (async) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f0000000000)=0x8, 0xffffffffffffffdb) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f00000002c0)=0x1, 0x4) 1.797835763s ago: executing program 1 (id=3169): socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x101080) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x18, 0xfffffffffffffff9) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) socket$inet(0x2, 0x1, 0x100) r2 = syz_io_uring_setup(0x48be, &(0x7f00000011c0)={0x0, 0xc721, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000ebfb000400000000000000000000feff0700010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000004c0)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2, 0x3}, r6}}, 0x48) 1.797421282s ago: executing program 5 (id=3170): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040), 0x0, 0x0, 0x2) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd2c, 0x25dfdbfb, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c087}, 0x4004104) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x1, @pix={0x7, 0xf, 0x56544943, 0x7, 0x1ff, 0x41b9, 0x4, 0x3, 0x0, 0x7, 0x1}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r4, @in6={{0xa, 0x4e22, 0xc, @empty, 0x1}}, 0x6, 0x3}, &(0x7f0000000180)=0x90) ustat(0x6, &(0x7f0000000340)) 1.797062156s ago: executing program 2 (id=3171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x80800, 0x0) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="780000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01b8040000000000480012800b0001006772657461700000380002800400120008001400fbffffff05000a000100000008000700ac14143605001600010000000500160001000000060011004e23000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x78}}, 0x0) r4 = ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) write$6lowpan_enable(r4, &(0x7f0000000080)='1', 0x1) 1.678351532s ago: executing program 5 (id=3172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000003c0)={{r2}, "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"}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x7ad4d000) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000100)=[0x80]) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000003c0)={r6, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) writev(r5, &(0x7f0000000700)=[{&(0x7f0000000500)="ef90", 0x2}], 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x1, r7, 0x1fc, 0x1000, 0x2, 0x800008, 0x0, 0x4, 0x4000}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000001b24d5d90e8f0e4c123117c34228401f0b1288aa1aa644c4e902925da8c1990a20000000000a07000000000000000000020000000900010073797a300000000044000000030a01020000000000000600020000000900010073797a30001000002200030091abc12404cf378042f26c43f91f68d8a90767c0bc71f60877974475de3d000014000000020a090000"], 0xa0}}, 0x0) 1.276686029s ago: executing program 2 (id=3173): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x900, 0x4, 0x2}, 0x18) r5 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f0000000100)) (async) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4c100, 0x6b) linkat(r4, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00', 0x1400) (async) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000100400"], 0x0) 1.030085284s ago: executing program 5 (id=3174): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigsuspend(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000002700)=[{{&(0x7f0000002240)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/1, 0x1}, {&(0x7f0000002300)=""/38, 0x26}, {&(0x7f0000002340)=""/23, 0x17}, {&(0x7f0000002380)=""/206, 0xce}], 0x4, &(0x7f00000024c0)=""/63, 0x3f}, 0x3}, {{&(0x7f0000002500)=@x25={0x9, @remote}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002580)=""/114, 0x72}], 0x1, &(0x7f0000002640)=""/153, 0x99}, 0x3}], 0x2, 0x42, 0x0) capget(&(0x7f00000021c0)={0x19980330}, &(0x7f0000002200)={0xb70, 0x6, 0x4, 0xfff, 0x2, 0x5}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x29, 0xf, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020) (async) ioctl$UFFDIO_MOVE(r2, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000960000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x6}) (async) open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) bind$alg(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) r4 = socket$kcm(0xa, 0x2, 0x0) (async) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'sh\x00', 0xd, 0x5, 0x8a1a}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lblcr\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host}) 876.767257ms ago: executing program 5 (id=3175): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_procfs(0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f000001b780)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101", @ANYRESHEX], 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0x1, 0x41, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0xa) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @empty, 0x4}, 0x1c) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000897fe72d2add2bd45898133709adae25ca9d21a6e5ce8748e3ed61b580c0173a9901c29f94fdb1be6a7d96d429a13683bf5b5218b6d6f6da9102eec48852675fc50609aecca8ff3123362f6fe708a8f48f677a093784bc10b17650aee90dd9dae69eb1688b69ef06eeef3d57bf59689fee74b5461f55ab38b195955d33dc294810503f2cbcd9ff1eaf3167610ee983f162e6a65c91138ef248c5448404518a77946fb6fbf2c02cc0", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r10], 0x54}}, 0x0) socket(0x1, 0x803, 0x0) 465.05118ms ago: executing program 0 (id=3176): memfd_create(&(0x7f0000000240)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\x03\x00\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\x06e\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00W]\x94|.s\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\x14v\xb6\x04\xf2U\xb4\xf6\xbeq\xa0\xb3K*\xa0\xb15\xf5\r\x11\\\xf8\xc0\xb8\xb9\xddT\xcb\x00\x00\xff\xff\xff\xff\xff\xff\xff\x7f\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&dw\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\x03\x00\x00\x00\x00\x00\x00\x00\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\x00\x00\x00X\x9a\xd5U\x8e\n\xcej\xf0\xfcX\x84\x1a\xc93\x0f\x89\x04\xe1,J\x8f\xcb\x89\xae\xc5\xa1\xee\xe1 \xa0\xa3\x0e\x894\xab7\xb0\xd9\xaf\xa9/\x91\xf2\xf6sqS\xdd\xb54\xd8$igU\xcf\x0fO\xd4\xe0\x96X$\xe9r\x8d\xf3c\x0e\xba\xd4\x1c,\fV\xa3\x00', 0x7) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async, rerun: 32) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) (async) io_setup(0x800, &(0x7f0000000440)=0x0) (async) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x4f}]) (async) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x0) 319.068758ms ago: executing program 3 (id=3177): r0 = socket$inet6(0xa, 0x80000, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f0000000fc0)) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x1) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 185.476629ms ago: executing program 1 (id=3178): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000001ae51000000000000000002000000"], 0x14}}, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x100000000) write$vhost_msg_v2(r1, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, 0x0) statx(r2, 0x0, 0x1000, 0x2, &(0x7f0000000540)) sendmmsg$unix(r3, &(0x7f0000003ec0), 0x0, 0x4008000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000dc03000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200080000000000030000000000001cb400"/28], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 3 (id=3179): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x604002, 0x0) r2 = epoll_create(0x8) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040), &(0x7f0000000080), 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'wlan0\x00', @remote}) kernel console output (not intermixed with test programs): no frontend was attached by 'Artec T1 USB2.0' [ 1028.158688][ T6399] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input81 [ 1028.232169][ T6399] dvb-usb: schedule remote query interval to 150 msecs. [ 1028.250283][ T6399] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1028.402448][ T6399] dvb-usb: bulk message failed: -22 (1/0) [ 1028.408381][ T6399] dvb-usb: error while querying for an remote control event. [ 1028.429112][T11310] usb 3-1: USB disconnect, device number 86 [ 1028.472829][T11310] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1028.575707][T17579] binder: BINDER_SET_CONTEXT_MGR already set [ 1028.587402][T17579] binder: 17578:17579 ioctl 4018620d 200000000100 returned -16 [ 1028.596532][T17582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 1028.673097][T17580] binder: 17578:17580 ioctl c0306201 200000000480 returned -14 [ 1028.697399][ T6399] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1028.864377][ T6399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.894362][ T6399] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1028.923303][ T6399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.967817][ T6399] usb 1-1: config 0 descriptor?? [ 1028.988038][ T5901] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 1029.154444][ T5901] usb 6-1: Invalid ep0 maxpacket: 64 [ 1029.288585][T17591] tipc: Started in network mode [ 1029.294255][ T5901] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 1029.302806][T17591] tipc: Node identity f6c6353556d7, cluster identity 4711 [ 1029.314314][T17591] tipc: Enabled bearer , priority 0 [ 1029.332886][T17591] tipc: Resetting bearer [ 1029.429866][ T6399] hid (null): invalid report_count 50514 [ 1029.441303][ T6399] hid-alps 0003:044E:1215.0050: invalid report_count 50514 [ 1029.456787][ T6399] hid-alps 0003:044E:1215.0050: item 0 2 1 9 parsing failed [ 1029.466503][ T6399] hid-alps 0003:044E:1215.0050: parse failed [ 1029.474358][ T5901] usb 6-1: Invalid ep0 maxpacket: 64 [ 1029.487095][ T5901] usb usb6-port1: attempt power cycle [ 1029.498461][ T6399] hid-alps 0003:044E:1215.0050: probe with driver hid-alps failed with error -22 [ 1029.611972][T16336] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1029.637623][T17462] usb 1-1: USB disconnect, device number 97 [ 1029.777583][T16336] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.799195][T16336] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1029.825608][T16336] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1029.845701][T16336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1029.855670][ T5901] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 1029.872302][T16336] usb 2-1: SerialNumber: syz [ 1029.905244][ T5901] usb 6-1: Invalid ep0 maxpacket: 64 [ 1030.042204][ T5901] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 1030.073243][ T5901] usb 6-1: Invalid ep0 maxpacket: 64 [ 1030.079806][ T5901] usb usb6-port1: unable to enumerate USB device [ 1030.116940][T16336] usb 2-1: 0:2 : does not exist [ 1030.122147][T16336] usb 2-1: unit 5: unexpected type 0x0a [ 1030.145948][T16336] usb 2-1: USB disconnect, device number 69 [ 1030.218220][T11079] udevd[11079]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.322008][ T5901] tipc: Node number set to 2685482293 [ 1030.611055][T17611] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1030.661953][T16336] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1030.821939][T16336] usb 4-1: device descriptor read/64, error -71 [ 1030.916899][T17619] fuse: Bad value for 'group_id' [ 1030.922374][T17619] fuse: Bad value for 'group_id' [ 1030.991980][T16454] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1031.071987][T16336] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1031.161932][T16454] usb 2-1: Using ep0 maxpacket: 8 [ 1031.202148][T16454] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1031.211906][T16454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.211917][T16336] usb 4-1: device descriptor read/64, error -71 [ 1031.236912][T16454] usb 2-1: Product: syz [ 1031.247109][T16454] usb 2-1: Manufacturer: syz [ 1031.252144][T16454] usb 2-1: SerialNumber: syz [ 1031.284881][T16454] usb 2-1: config 0 descriptor?? [ 1031.296371][T16454] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1031.322784][T16336] usb usb4-port1: attempt power cycle [ 1031.607438][T17622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1031.628848][T17622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1031.645810][T17622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1031.654924][T17622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1031.666053][T17622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1031.682008][T16336] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1031.762762][T16336] usb 4-1: device descriptor read/8, error -71 [ 1032.101940][T16336] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 1032.158537][T16336] usb 4-1: device descriptor read/8, error -71 [ 1032.312470][T16336] usb usb4-port1: unable to enumerate USB device [ 1032.972125][T16454] gspca_sonixj: i2c_w8 err -71 [ 1033.042042][T16454] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1033.086077][T16454] usb 2-1: USB disconnect, device number 70 [ 1033.223449][T17623] chnl_net:caif_netlink_parms(): no params data found [ 1033.677934][T17623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.695310][T17623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.714624][T17623] bridge_slave_0: entered allmulticast mode [ 1033.733462][T17623] bridge_slave_0: entered promiscuous mode [ 1033.742069][T17622] Bluetooth: hci5: command tx timeout [ 1033.762575][T17623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.779330][T17623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.792009][ T5980] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1033.796364][T17623] bridge_slave_1: entered allmulticast mode [ 1033.828550][T17623] bridge_slave_1: entered promiscuous mode [ 1033.832079][T17644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.888765][T17623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.899955][T17641] fuse: Bad value for 'fd' [ 1033.905541][T17644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.915856][T17623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.958162][T17644] fuse: Bad value for 'rootmode' [ 1033.964364][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 1033.990303][ T5980] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1034.022029][ T5980] usb 4-1: config 0 has an invalid descriptor of length 184, skipping remainder of the config [ 1034.062077][ T5901] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1034.080146][ T5980] usb 4-1: config 0 has no interface number 0 [ 1034.116419][ T5980] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1034.145662][ T5980] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1034.174488][ T5980] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1034.181708][T17623] team0: Port device team_slave_0 added [ 1034.207270][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.240038][T17623] team0: Port device team_slave_1 added [ 1034.265826][ T5980] usb 4-1: Product: syz [ 1034.284481][ T5980] usb 4-1: Manufacturer: syz [ 1034.305604][ T5980] usb 4-1: SerialNumber: syz [ 1034.339729][ T5980] usb 4-1: config 0 descriptor?? [ 1034.368247][ T5980] f81534 4-1:0.12: required endpoints missing [ 1034.820881][T17623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.843179][T17659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'. [ 1034.853930][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.917433][T17623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.961662][T17662] syzkaller1: entered promiscuous mode [ 1034.967806][T17662] syzkaller1: entered allmulticast mode [ 1034.990979][ T1086] team0: left allmulticast mode [ 1035.004837][ T1086] C: left allmulticast mode [ 1035.010390][ T1086] team_slave_1: left allmulticast mode [ 1035.055923][ T1086] batadv1: left allmulticast mode [ 1035.061312][ T1086] team0: left promiscuous mode [ 1035.086351][ T1086] C: left promiscuous mode [ 1035.093555][ T1086] team_slave_1: left promiscuous mode [ 1035.110183][ T1086] batadv1: left promiscuous mode [ 1035.135724][ T1086] bridge0: port 3(team0) entered disabled state [ 1035.156953][ T1086] bridge_slave_0: left allmulticast mode [ 1035.167365][ T1086] bridge_slave_0: left promiscuous mode [ 1035.196455][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.341989][ T5901] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1035.503015][ T1086] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1035.662097][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 1035.687022][ T5901] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1035.773074][ T5901] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1035.792479][ T5901] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1035.823808][T17622] Bluetooth: hci5: command tx timeout [ 1035.847234][ T5901] usb 2-1: Manufacturer: syz [ 1035.914979][ T5901] usb 2-1: config 0 descriptor?? [ 1036.554694][ T6399] usb 4-1: USB disconnect, device number 84 [ 1036.585151][ T1086] bond4 (unregistering): (slave gretap1): Releasing active interface [ 1037.340772][ T1086] bond4 (unregistering): (slave bridge2): Releasing active interface [ 1037.732518][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.745814][ T1086] bond_slave_0: left promiscuous mode [ 1037.765090][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.782897][ T1086] bond_slave_1: left promiscuous mode [ 1037.791113][ T1086] bond0 (unregistering): Released all slaves [ 1037.909116][T17622] Bluetooth: hci5: command tx timeout [ 1038.125894][ T1086] bond1 (unregistering): Released all slaves [ 1038.498038][ T1086] bond2 (unregistering): Released all slaves [ 1038.744696][ T1086] bond3 (unregistering): Released all slaves [ 1038.934558][ T1086] bond4 (unregistering): Released all slaves [ 1038.958358][ T1086] bond5 (unregistering): Released all slaves [ 1038.978747][T17623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.986274][T17623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.013577][T17623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.199495][T17659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1039.239241][T17662] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1039.261107][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2892'. [ 1039.367924][ T5901] usb 2-1: USB disconnect, device number 72 [ 1039.377896][ T1086] : left promiscuous mode [ 1039.677176][ T1086] tipc: Disabling bearer [ 1039.707870][ T1086] tipc: Disabling bearer [ 1039.729519][ T1086] tipc: Left network mode [ 1039.769777][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.785416][T17623] hsr_slave_0: entered promiscuous mode [ 1039.793532][T17623] hsr_slave_1: entered promiscuous mode [ 1039.800411][T17623] debugfs: 'hsr0' already exists in 'hsr' [ 1039.807600][T17623] Cannot create hsr debugfs directory [ 1039.815318][T17728] fuse: Bad value for 'fd' [ 1039.847642][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.972944][T16454] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1039.987214][T17622] Bluetooth: hci5: command tx timeout [ 1040.474794][ T1086] hsr_slave_0: left promiscuous mode [ 1040.485963][ T1086] hsr_slave_1: left promiscuous mode [ 1040.503232][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.539713][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.634646][ T30] audit: type=1326 audit(1767368412.699:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17744 comm="syz.3.2903" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0eb8f749 code=0x0 [ 1040.684523][ T1086] team0 (unregistering): Port device batadv1 removed [ 1040.789594][ T1086] pim6reg (unregistering): left allmulticast mode [ 1041.401963][ T980] usb 6-1: new full-speed USB device number 69 using dummy_hcd [ 1041.446199][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 1041.490468][ T1086] team0 (unregistering): Port device C removed [ 1041.551446][T17758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.552469][ T980] usb 6-1: device descriptor read/64, error -71 [ 1041.565985][T17758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.633934][T17758] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2906'. [ 1041.645632][T17758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.792027][ T5901] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1041.831541][ T980] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1041.923103][ T5901] usb 4-1: device descriptor read/64, error -71 [ 1041.992054][ T980] usb 6-1: device descriptor read/64, error -71 [ 1042.122170][ T980] usb usb6-port1: attempt power cycle [ 1042.192125][ T5901] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1042.360884][ T5901] usb 4-1: device descriptor read/64, error -71 [ 1042.482381][ T980] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1042.492738][ T5901] usb usb4-port1: attempt power cycle [ 1042.535691][ T980] usb 6-1: device descriptor read/8, error -71 [ 1042.794088][ T1086] IPVS: stop unused estimator thread 0... [ 1042.813075][ T980] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1042.849236][ T980] usb 6-1: device descriptor read/8, error -71 [ 1042.856572][ T5901] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1042.904012][ T5901] usb 4-1: device descriptor read/8, error -71 [ 1042.986348][ T980] usb usb6-port1: unable to enumerate USB device [ 1043.162163][ T5901] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1043.209303][ T5901] usb 4-1: device descriptor read/8, error -71 [ 1043.309828][T17623] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1043.329914][T17623] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1043.345415][ T5901] usb usb4-port1: unable to enumerate USB device [ 1043.366469][T17623] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1043.378733][T17623] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1043.563771][T17623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.606351][T17623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.636833][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.644850][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.709303][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.716737][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.886618][T17623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.968411][T17623] veth0_vlan: entered promiscuous mode [ 1043.985177][T17623] veth1_vlan: entered promiscuous mode [ 1044.040372][T17623] veth0_macvtap: entered promiscuous mode [ 1044.054400][T17623] veth1_macvtap: entered promiscuous mode [ 1044.062735][ T980] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1044.094810][T17623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.115528][T17623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.144172][ T1108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.164467][ T1108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.188932][ T1108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.232914][ T1108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.273970][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 1044.305024][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.340699][ T980] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1044.372960][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.411162][ T980] usb 2-1: config 0 descriptor?? [ 1044.432261][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.468193][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.537963][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.572272][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.593139][T17808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.615141][T17808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.631375][T17795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.673402][T17795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.809178][T17815] syzkaller0: entered promiscuous mode [ 1044.814989][T17815] syzkaller0: entered allmulticast mode [ 1044.836382][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2914'. [ 1044.916396][ T980] hid_parser_main: 5 callbacks suppressed [ 1044.916430][ T980] uclogic 0003:5543:0005.0051: unknown main item tag 0x0 [ 1044.934159][ T980] uclogic 0003:5543:0005.0051: unknown main item tag 0x0 [ 1044.941570][ T980] uclogic 0003:5543:0005.0051: unknown main item tag 0x0 [ 1044.963081][ T980] uclogic 0003:5543:0005.0051: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 1045.062121][T11310] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1045.079072][T17825] loop6: detected capacity change from 0 to 7 [ 1045.089771][T11114] Dev loop6: unable to read RDB block 7 [ 1045.096297][T11114] loop6: unable to read partition table [ 1045.107059][ T980] usb 2-1: USB disconnect, device number 73 [ 1045.113896][T11114] loop6: partition table beyond EOD, truncated [ 1045.153824][T17825] Dev loop6: unable to read RDB block 7 [ 1045.177551][T17825] loop6: unable to read partition table [ 1045.191104][T17825] loop6: partition table beyond EOD, truncated [ 1045.198889][T17825] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1045.244648][T11310] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1045.265017][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1045.283808][T11310] usb 4-1: can't read configurations, error -61 [ 1045.442122][T11310] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1045.593750][T11310] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1045.620228][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1045.628111][T11310] usb 4-1: can't read configurations, error -61 [ 1045.635503][T11310] usb usb4-port1: attempt power cycle [ 1045.737860][T16336] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1045.902544][T16336] usb 6-1: Using ep0 maxpacket: 8 [ 1045.922299][T16336] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1045.962125][T16336] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1045.984434][T16336] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1045.994913][T11310] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1046.035691][T11310] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1046.044848][T16336] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.078624][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1046.086790][T16336] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1046.096938][T11310] usb 4-1: can't read configurations, error -61 [ 1046.104846][T16336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.232421][T11310] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1046.281349][T11310] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 1046.301723][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1046.313774][T11310] usb 4-1: can't read configurations, error -61 [ 1046.322658][T16336] usb 6-1: GET_CAPABILITIES returned 0 [ 1046.328740][T11310] usb usb4-port1: unable to enumerate USB device [ 1046.336456][T16336] usbtmc 6-1:16.0: can't read capabilities [ 1046.462197][ T980] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1046.525867][T16336] usb 6-1: USB disconnect, device number 73 [ 1046.661988][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1046.741964][ T980] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1046.797389][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.950686][ T980] usb 2-1: config 0 descriptor?? [ 1047.047740][ T980] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1047.475155][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2923'. [ 1047.513950][T17882] ip6gretap0: entered promiscuous mode [ 1047.530273][T17882] macsec1: entered promiscuous mode [ 1047.543790][T17882] macsec1: entered allmulticast mode [ 1047.558162][T17882] ip6gretap0: entered allmulticast mode [ 1047.636027][T17882] ip6gretap0: left allmulticast mode [ 1047.650524][T17882] ip6gretap0: left promiscuous mode [ 1047.988882][T17886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1048.182355][ T980] gspca_sunplus: reg_r err -110 [ 1048.208353][ T980] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1048.617331][T17895] loop6: detected capacity change from 0 to 7 [ 1048.664432][T17895] Dev loop6: unable to read RDB block 7 [ 1048.696249][T17895] loop6: unable to read partition table [ 1048.716764][T17895] loop6: partition table beyond EOD, truncated [ 1048.745457][T17895] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1049.072790][T17901] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2929'. [ 1049.134653][T17905] netlink: 'syz.5.2929': attribute type 4 has an invalid length. [ 1049.211100][T17908] netlink: 'syz.5.2929': attribute type 4 has an invalid length. [ 1049.219477][T17907] tipc: Enabling of bearer rejected, failed to enable media [ 1049.542500][T16454] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1049.727782][T16454] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1049.785168][T16454] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1049.837226][T16454] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 1049.923265][T16454] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1050.004839][T16454] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1050.101922][T16454] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1050.176299][T16454] usb 1-1: Product: syz [ 1050.194723][T16336] usb 2-1: USB disconnect, device number 74 [ 1050.253986][T16454] usb 1-1: Manufacturer: syz [ 1050.316475][T16454] usb 1-1: SerialNumber: syz [ 1050.345344][T16454] usb 1-1: config 0 descriptor?? [ 1050.372344][T17907] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1050.424812][T16454] usb 1-1: selecting invalid altsetting 0 [ 1050.748933][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1050.789302][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1050.844410][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1050.880596][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1050.899102][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1050.940367][T17935] vlan3: entered allmulticast mode [ 1050.947972][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1050.956073][T17935] veth0_to_bond: entered allmulticast mode [ 1050.976532][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.004686][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.036257][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.048664][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.060080][T17937] kvm: user requested TSC rate below hardware speed [ 1051.067718][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.079721][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.099919][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.132161][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.151967][T16336] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1051.160553][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.176737][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.189545][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.200332][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.241988][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.269649][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.293866][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.326331][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.361206][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.371443][T16336] usb 4-1: config 0 has an invalid interface number: 48 but max is 1 [ 1051.384591][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.393511][T16336] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.434241][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.440644][T16336] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1051.457018][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.479436][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.498823][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.510328][T16336] usb 4-1: config 0 has no interface number 0 [ 1051.529416][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.537666][T16336] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 1051.568097][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.589133][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.612466][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.624357][T16336] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1051.640954][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.662193][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.682373][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.692203][T16336] usb 4-1: config 0 interface 48 has no altsetting 0 [ 1051.694850][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.711898][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.721249][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.729207][T16336] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1051.740041][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.752719][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.767067][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.776862][T16336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.783532][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.813185][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.826743][T17907] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1051.846205][T16336] usb 4-1: config 0 descriptor?? [ 1052.177822][T17943] loop6: detected capacity change from 0 to 7 [ 1052.193931][T11079] Dev loop6: unable to read RDB block 7 [ 1052.206939][T11079] loop6: unable to read partition table [ 1052.221773][T11079] loop6: partition table beyond EOD, truncated [ 1052.244101][T17943] Dev loop6: unable to read RDB block 7 [ 1052.266858][T17943] loop6: unable to read partition table [ 1052.286244][T17943] loop6: partition table beyond EOD, truncated [ 1052.305690][T17943] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1053.583529][T16336] usb 4-1: string descriptor 0 read error: -71 [ 1053.613822][T16336] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1053.630920][T16336] dvb-usb: bulk message failed: -22 (3/0) [ 1053.648224][T16336] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1053.685786][T16336] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1053.704049][T16336] usb 4-1: media controller created [ 1053.712173][T16336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.734552][T16336] dvb-usb: bulk message failed: -22 (6/0) [ 1053.744434][T16336] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1053.755097][T16336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input82 [ 1053.769906][T16336] dvb-usb: schedule remote query interval to 150 msecs. [ 1053.778932][T16336] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1053.796317][T16336] usb 4-1: USB disconnect, device number 93 [ 1053.832732][T13519] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1053.917983][T16336] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1053.970699][T17904] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1053.979966][T16454] usb 1-1: USB disconnect, device number 98 [ 1054.002019][T13519] usb 6-1: Using ep0 maxpacket: 16 [ 1054.020069][T13519] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.052602][T13519] usb 6-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.070122][T13519] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1054.080474][T13519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.101364][T17963] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2946'. [ 1054.573249][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.601923][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.631075][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.651930][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.659256][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.674529][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.681915][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.689565][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.697614][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.707347][T13519] logitech 0003:046D:C29C.0052: unknown main item tag 0x0 [ 1054.722593][T13519] logitech 0003:046D:C29C.0052: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 1054.776585][T17957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.802485][T17975] tunl0: Caught tx_queue_len zero misconfig [ 1054.809202][T17957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.823993][T13519] logitech 0003:046D:C29C.0052: no inputs found [ 1054.960974][T17975] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1055.006588][T17975] team0: Port device batadv1 added [ 1055.025451][T13519] usb 6-1: USB disconnect, device number 74 [ 1055.251113][T17989] netlink: 'syz.0.2952': attribute type 4 has an invalid length. [ 1055.622040][T16336] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1055.668207][T17994] fuse: Bad value for 'fd' [ 1055.806202][T17994] ipip0: entered promiscuous mode [ 1055.825959][T17994] ipip0: entered allmulticast mode [ 1055.826123][T18004] netlink: 'syz.1.2957': attribute type 15 has an invalid length. [ 1055.861987][T16336] usb 1-1: Using ep0 maxpacket: 16 [ 1055.879267][T18001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1055.916320][T16336] usb 1-1: config 0 has no interfaces? [ 1055.927005][T18005] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2957'. [ 1055.968771][T16336] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1055.988551][T16336] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1056.009696][T18001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1056.047486][T16336] usb 1-1: Manufacturer: syz [ 1056.083623][T16336] usb 1-1: config 0 descriptor?? [ 1056.098977][T18006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1057.222018][T13519] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1057.430778][T13519] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1057.459521][T13519] usb 6-1: config 1 has no interface number 0 [ 1057.486784][T13519] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 1057.535521][T13519] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 544 [ 1057.576286][T13519] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1057.623253][T13519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.674515][T13519] usb 6-1: Product: syz [ 1057.690539][T13519] usb 6-1: Manufacturer: syz [ 1057.718175][T13519] usb 6-1: SerialNumber: syz [ 1057.749507][T18014] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1057.783451][T18014] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1057.814296][T13519] usb 6-1: Error in usbnet_get_endpoints (-22) [ 1057.892106][ T5901] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1057.998109][T18020] loop6: detected capacity change from 0 to 524287999 [ 1058.037526][T11079] buffer_io_error: 23 callbacks suppressed [ 1058.037543][T11079] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 1058.092046][T16336] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1058.098860][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.117236][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1058.140100][ T5901] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1058.160160][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1058.181505][ T5901] usb 3-1: SerialNumber: syz [ 1058.252048][T16336] usb 4-1: device descriptor read/64, error -71 [ 1058.275427][T11114] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 1058.309078][T13519] usb 1-1: USB disconnect, device number 99 [ 1058.431064][ T5901] usb 3-1: 0:2 : does not exist [ 1058.497692][ T5901] usb 3-1: USB disconnect, device number 88 [ 1058.523238][T18027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2965'. [ 1058.535941][T16336] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1058.566768][T18028] netlink: 'syz.1.2965': attribute type 1 has an invalid length. [ 1058.596750][T18029] erspan1: entered allmulticast mode [ 1058.693582][T16336] usb 4-1: device descriptor read/64, error -71 [ 1058.812047][T16336] usb usb4-port1: attempt power cycle [ 1059.152585][T16336] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1059.173274][T16336] usb 4-1: device descriptor read/8, error -71 [ 1059.271940][T11310] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1059.422182][T16336] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1059.445393][T11310] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1059.457785][T11310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.479048][T16336] usb 4-1: device descriptor read/8, error -71 [ 1059.486812][T11310] usb 1-1: Product: syz [ 1059.494475][T11310] usb 1-1: Manufacturer: syz [ 1059.503977][T11310] usb 1-1: SerialNumber: syz [ 1059.527873][T11310] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1059.549256][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1059.602743][T16336] usb usb4-port1: unable to enumerate USB device [ 1059.746804][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.754990][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.078458][T16336] usb 6-1: USB disconnect, device number 75 [ 1060.239543][T11310] usb 1-1: USB disconnect, device number 100 [ 1060.622106][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1060.642436][ T10] ath9k_htc: Failed to initialize the device [ 1060.649749][T11310] usb 1-1: ath9k_htc: USB layer deinitialized [ 1060.752253][ T5901] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1060.912003][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 1060.929614][ T5901] usb 6-1: config 194 has an invalid interface number: 102 but max is 2 [ 1060.967960][ T5901] usb 6-1: config 194 has 2 interfaces, different from the descriptor's value: 3 [ 1060.988260][ T5901] usb 6-1: config 194 has no interface number 1 [ 1061.001975][ T5901] usb 6-1: config 194 interface 0 has no altsetting 1 [ 1061.039578][T13519] IPVS: starting estimator thread 0... [ 1061.057902][ T5901] usb 6-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 1061.085505][T18073] tipc: Started in network mode [ 1061.105069][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.113748][T18073] tipc: Node identity 2aa910a53e6d, cluster identity 4711 [ 1061.128899][T18073] tipc: Enabled bearer , priority 0 [ 1061.139155][ T5901] usb 6-1: Product: syz [ 1061.145047][ T5901] usb 6-1: Manufacturer: syz [ 1061.160891][T18077] syzkaller0: entered promiscuous mode [ 1061.169184][T18078] IPVS: using max 39 ests per chain, 93600 per kthread [ 1061.178089][ T5901] usb 6-1: SerialNumber: syz [ 1061.197993][T18077] syzkaller0: entered allmulticast mode [ 1061.519726][ T5901] qmi_wwan 6-1:194.0: probe with driver qmi_wwan failed with error -22 [ 1061.533292][ T5901] usb 6-1: unknown number of interfaces: 2 [ 1061.570395][ T5901] usb 6-1: USB disconnect, device number 76 [ 1061.691965][T11310] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1061.850497][T18091] tipc: Enabled bearer , priority 10 [ 1061.868280][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1061.883284][T11310] usb 4-1: can't read configurations, error -61 [ 1062.032177][T11310] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1062.161943][ T10] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1062.216590][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1062.235945][T11310] usb 4-1: can't read configurations, error -61 [ 1062.242659][ T5901] tipc: Node number set to 348393637 [ 1062.258393][T11310] usb usb4-port1: attempt power cycle [ 1062.355008][ T10] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 1062.378656][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1062.399852][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.409752][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1062.419386][ T10] usb 1-1: SerialNumber: syz [ 1062.440642][ T10] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1062.631960][ T10] usb 6-1: new low-speed USB device number 77 using dummy_hcd [ 1062.642004][T11310] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1062.685878][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1062.701937][T11310] usb 4-1: can't read configurations, error -61 [ 1062.842518][T11310] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1062.856164][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.868941][ T10] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1062.878607][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.890265][T11310] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1062.904188][ T10] usb 6-1: config 0 descriptor?? [ 1062.914070][T11310] usb 4-1: can't read configurations, error -61 [ 1062.916081][T18105] IPv6: addrconf: prefix option has invalid lifetime [ 1062.935794][T11310] usb usb4-port1: unable to enumerate USB device [ 1063.009362][T18074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1063.181959][T11310] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1063.316864][ T10] hid_parser_main: 150 callbacks suppressed [ 1063.316891][ T10] steelseries 0003:1038:1410.0053: unknown main item tag 0x0 [ 1063.331645][ T10] steelseries 0003:1038:1410.0053: unknown main item tag 0x0 [ 1063.339787][ T10] steelseries 0003:1038:1410.0053: unknown main item tag 0x0 [ 1063.349078][ T10] steelseries 0003:1038:1410.0053: missing HID_OUTPUT_REPORT 0 [ 1063.358553][T11310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1063.367397][T11310] usb 2-1: not running at top speed; connect to a high speed hub [ 1063.379479][T11310] usb 2-1: config 0 has no interfaces? [ 1063.388138][T11310] usb 2-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=56.ea [ 1063.397715][T11310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.406012][T11310] usb 2-1: Product: syz [ 1063.410407][T11310] usb 2-1: Manufacturer: syz [ 1063.415317][T11310] usb 2-1: SerialNumber: syz [ 1063.423836][T11310] usb 2-1: config 0 descriptor?? [ 1063.524807][T13519] usb 6-1: USB disconnect, device number 77 [ 1063.635234][ T5901] usb 2-1: USB disconnect, device number 75 [ 1063.795958][T18069] tipc: Resetting bearer [ 1063.841001][T18069] tipc: Disabling bearer [ 1064.033505][ T5901] usb 1-1: USB disconnect, device number 101 [ 1064.248531][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 1064.258894][T11310] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1064.274688][T18119] ip6gretap0: entered promiscuous mode [ 1064.280553][T18119] macsec1: entered promiscuous mode [ 1064.289063][T18119] macsec1: entered allmulticast mode [ 1064.294497][T18119] ip6gretap0: entered allmulticast mode [ 1064.305587][T18119] ip6gretap0: left allmulticast mode [ 1064.311236][T18119] ip6gretap0: left promiscuous mode [ 1064.431937][T11310] usb 3-1: Using ep0 maxpacket: 8 [ 1064.479279][T11310] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1064.498820][T11310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.522916][ T5901] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1064.620139][T11310] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1064.628325][T11310] pvrusb2: ********** [ 1064.644455][T11310] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1064.671992][T11310] pvrusb2: Important functionality might not be entirely working. [ 1064.679886][T11310] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1064.695395][T11310] pvrusb2: ********** [ 1064.713679][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 1064.725334][ T5901] usb 1-1: config 15 has an invalid interface number: 7 but max is 2 [ 1064.735960][ T5901] usb 1-1: config 15 has an invalid interface number: 45 but max is 2 [ 1064.744976][ T5901] usb 1-1: config 15 contains an unexpected descriptor of type 0x1, skipping [ 1064.754410][ T5901] usb 1-1: config 15 has an invalid interface number: 167 but max is 2 [ 1064.763671][ T5901] usb 1-1: config 15 has an invalid interface number: 114 but max is 2 [ 1064.773161][ T5901] usb 1-1: config 15 has 4 interfaces, different from the descriptor's value: 3 [ 1064.783544][ T5901] usb 1-1: config 15 has no interface number 0 [ 1064.809374][ T5901] usb 1-1: config 15 has no interface number 1 [ 1064.817949][ T5901] usb 1-1: config 15 has no interface number 2 [ 1064.828050][ T5901] usb 1-1: config 15 has no interface number 3 [ 1064.841619][ T5901] usb 1-1: config 15 interface 7 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 1064.857213][ T5901] usb 1-1: config 15 interface 7 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1064.913449][ T5901] usb 1-1: config 15 interface 7 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 1064.927701][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1064.940489][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1064.940891][ T2348] pvrusb2: Invalid write control endpoint [ 1064.983660][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has a duplicate endpoint with address 0x3, skipping [ 1065.032039][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1065.056717][ T5901] usb 1-1: config 15 interface 45 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1065.070900][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1065.086219][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1065.099494][ T5901] usb 1-1: config 15 interface 45 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1065.121577][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1065.135004][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1065.135389][ T2348] pvrusb2: Invalid write control endpoint [ 1065.147939][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1065.167241][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1065.184464][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1065.197695][ T2348] pvrusb2: Device being rendered inoperable [ 1065.202829][ T5901] usb 1-1: config 15 interface 45 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1065.221329][T18109] pvrusb2: Attempted to execute control transfer when device not ok [ 1065.236161][ T5901] usb 1-1: config 15 interface 167 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1065.260096][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1065.267869][ T5901] usb 1-1: too many endpoints for config 15 interface 114 altsetting 234: 149, using maximum allowed: 30 [ 1065.281626][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1065.304916][ T5901] usb 1-1: config 15 interface 114 altsetting 234 has an invalid descriptor for endpoint zero, skipping [ 1065.317292][ T5901] usb 1-1: config 15 interface 114 altsetting 234 has a duplicate endpoint with address 0x1, skipping [ 1065.331054][ T5901] usb 1-1: config 15 interface 114 altsetting 234 has a duplicate endpoint with address 0x5, skipping [ 1065.344466][ T5901] usb 1-1: config 15 interface 114 altsetting 234 has a duplicate endpoint with address 0xC, skipping [ 1065.374520][ T5901] usb 1-1: config 15 interface 114 altsetting 234 has an invalid descriptor for endpoint zero, skipping [ 1065.406533][ T5901] usb 1-1: config 15 interface 114 altsetting 234 has 5 endpoint descriptors, different from the interface descriptor's value: 149 [ 1065.427978][ T2348] pvrusb2: Attached sub-driver cx25840 [ 1065.456370][ T5901] usb 1-1: config 15 interface 7 has no altsetting 0 [ 1065.463144][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1065.463164][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1065.542007][ T5901] usb 1-1: config 15 interface 167 has no altsetting 0 [ 1065.561972][T16454] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1065.590639][ T5901] usb 1-1: config 15 interface 114 has no altsetting 0 [ 1065.731940][T16454] usb 4-1: Using ep0 maxpacket: 16 [ 1065.759985][T16454] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1065.779096][T16454] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1065.801921][T16454] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1065.853742][T16454] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1065.871897][T16454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.891560][T16454] usb 4-1: Product: syz [ 1065.901850][T16454] usb 4-1: Manufacturer: syz [ 1065.916331][T16454] usb 4-1: SerialNumber: syz [ 1066.172224][T16454] usb 4-1: 0:2 : does not exist [ 1066.201460][T16454] usb 4-1: USB disconnect, device number 102 [ 1066.262013][T11079] udevd[11079]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1066.392113][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1066.481972][T16336] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1066.552302][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1066.560340][ T10] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1066.568878][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1066.580318][ T10] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1066.592524][ T10] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1066.606971][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1066.622497][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1066.632914][ T10] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1066.645106][T16336] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1066.657065][ T10] usb 2-1: Product: syz [ 1066.661344][ T10] usb 2-1: Manufacturer: syz [ 1066.666136][T16336] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1066.677424][ T10] usb 2-1: SerialNumber: syz [ 1066.685244][T16336] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1066.697634][ T10] usb 2-1: config 0 descriptor?? [ 1066.707246][T16336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.718043][T16336] usb 6-1: Product: syz [ 1066.722527][T16336] usb 6-1: Manufacturer: syz [ 1066.729641][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1066.740337][T16336] usb 6-1: SerialNumber: syz [ 1066.754329][T16336] usb 6-1: config 0 descriptor?? [ 1066.764248][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1066.774554][T18157] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1066.797660][T18157] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1066.999633][ T10] usb 2-1: USB disconnect, device number 76 [ 1066.999642][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 1067.025134][T18157] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1067.044852][ T10] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1067.054455][T11310] usb 3-1: USB disconnect, device number 89 [ 1067.070949][T18157] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1067.182050][ T980] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1067.203504][ T5901] usb 1-1: New USB device found, idVendor=067b, idProduct=aaa8, bcdDevice=23.02 [ 1067.222818][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.242995][ T5901] usb 1-1: can't set config #15, error -71 [ 1067.260892][ T5901] usb 1-1: USB disconnect, device number 102 [ 1067.300823][T18167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3003'. [ 1067.362280][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 1067.373689][ T980] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1067.432753][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.443030][ T10] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1067.457646][T18169] loop6: detected capacity change from 0 to 7 [ 1067.467110][T18169] Dev loop6: unable to read RDB block 7 [ 1067.472095][ T980] usb 4-1: config 0 has no interface number 0 [ 1067.477716][T18169] loop6: unable to read partition table [ 1067.489514][T18169] loop6: partition table beyond EOD, truncated [ 1067.496562][T18169] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1067.513089][ T5201] Dev loop6: unable to read RDB block 7 [ 1067.519210][ T5201] loop6: unable to read partition table [ 1067.527292][ T980] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1067.533477][ T5201] loop6: partition table beyond EOD, truncated [ 1067.543807][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.545252][T16336] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1067.554301][ T980] usb 4-1: Product: syz [ 1067.571664][ T980] usb 4-1: Manufacturer: syz [ 1067.576871][ T980] usb 4-1: SerialNumber: syz [ 1067.602324][ T980] usb 4-1: config 0 descriptor?? [ 1067.641978][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1067.676510][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1067.697101][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.710415][ T10] usb 2-1: Product: syz [ 1067.715090][ T10] usb 2-1: Manufacturer: syz [ 1067.729857][ T10] usb 2-1: SerialNumber: syz [ 1067.739473][ T10] usb 2-1: config 0 descriptor?? [ 1067.779436][T16336] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 1067.814230][T16336] usb 6-1: USB disconnect, device number 78 [ 1067.834989][T18161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.857346][T18173] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3006'. [ 1067.860366][T18161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.890737][ T980] usb 4-1: USB disconnect, device number 103 [ 1067.902291][T11310] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1067.998305][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1068.081998][T11310] usb 3-1: Using ep0 maxpacket: 16 [ 1068.093723][T11310] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 1068.112169][T11310] usb 3-1: config 0 has no interface number 0 [ 1068.118597][T11310] usb 3-1: config 0 interface 185 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1068.131663][T11310] usb 3-1: config 0 interface 185 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1068.166432][T11310] usb 3-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=e0.f6 [ 1068.176237][T11310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.187240][T11310] usb 3-1: Product: syz [ 1068.192218][T11310] usb 3-1: Manufacturer: syz [ 1068.211539][T11310] usb 3-1: SerialNumber: syz [ 1068.234147][T11310] usb 3-1: config 0 descriptor?? [ 1068.242218][T18171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1068.249953][T18171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1068.477339][ T980] usb 3-1: USB disconnect, device number 90 [ 1068.550154][T18183] netlink: 'syz.5.3009': attribute type 1 has an invalid length. [ 1068.822295][ T980] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1069.010904][ T980] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1069.030473][ T980] usb 6-1: config 0 has no interface number 0 [ 1069.037511][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1069.081450][ T980] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1069.092530][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.103217][ T980] usb 6-1: Product: syz [ 1069.108662][ T980] usb 6-1: Manufacturer: syz [ 1069.113884][ T980] usb 6-1: SerialNumber: syz [ 1069.139937][ T980] usb 6-1: config 0 descriptor?? [ 1069.192175][T16454] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1069.301997][ T10] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1069.342360][T16454] usb 1-1: Using ep0 maxpacket: 32 [ 1069.350756][T16454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.365665][T16454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.376604][ T980] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1069.385410][T16454] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1069.396613][T16454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.405957][ T980] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1069.418443][ T980] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1069.428318][T16454] usb 1-1: config 0 descriptor?? [ 1069.433776][ T980] usb 6-1: media controller created [ 1069.441904][T16454] hub 1-1:0.0: USB hub found [ 1069.462175][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1069.472769][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1069.504708][ T10] usb 4-1: config 0 has no interfaces? [ 1069.525605][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1069.540569][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1069.549605][ T10] usb 4-1: Manufacturer: syz [ 1069.571544][ T10] usb 4-1: config 0 descriptor?? [ 1069.656447][T16454] hub 1-1:0.0: 1 port detected [ 1070.059970][ T30] audit: type=1326 audit(1767368442.119:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.091220][ T30] audit: type=1326 audit(1767368442.149:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.122585][ T30] audit: type=1326 audit(1767368442.149:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.163637][ T30] audit: type=1326 audit(1767368442.149:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.217390][ T30] audit: type=1326 audit(1767368442.149:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.246886][ T30] audit: type=1326 audit(1767368442.149:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.273916][ T30] audit: type=1326 audit(1767368442.149:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f814572b829 code=0x7ffc0000 [ 1070.300636][T18190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.313049][T18190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.336619][ T30] audit: type=1326 audit(1767368442.149:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.361407][ T30] audit: type=1326 audit(1767368442.149:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.386738][ T30] audit: type=1326 audit(1767368442.149:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18189 comm="syz.0.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814578f749 code=0x7ffc0000 [ 1070.605164][T16454] hub 1-1:0.0: activate --> -90 [ 1070.621251][T18206] loop6: detected capacity change from 0 to 7 [ 1070.632332][ T980] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1070.641142][T11114] Dev loop6: unable to read RDB block 7 [ 1070.647457][T11114] loop6: unable to read partition table [ 1070.656910][T11114] loop6: partition table beyond EOD, truncated [ 1070.673910][T18206] Dev loop6: unable to read RDB block 7 [ 1070.693482][T18206] loop6: unable to read partition table [ 1070.715800][T18206] loop6: partition table beyond EOD, truncated [ 1070.725919][ T5901] usb 2-1: USB disconnect, device number 77 [ 1070.732825][T18206] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1070.860466][ T980] usb 6-1: USB disconnect, device number 79 [ 1070.891480][T16454] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 1070.919742][ T5901] usb 1-1: USB disconnect, device number 103 [ 1070.926326][T16454] usb 1-1-port1: cannot disable (err = -71) [ 1070.991517][T18209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3016'. [ 1071.098657][ T980] IPVS: starting estimator thread 0... [ 1071.192057][T18216] IPVS: using max 25 ests per chain, 60000 per kthread [ 1071.324424][T18215] loop6: detected capacity change from 0 to 7 [ 1071.346647][T18215] loop6: [ 1071.351563][T18214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.363949][T18214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1071.363998][T18215] loop6: partition table partially beyond EOD, truncated [ 1071.395928][T11310] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1071.862846][ T10] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1071.946412][T16336] usb 4-1: USB disconnect, device number 104 [ 1072.031964][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 1072.067782][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1072.135067][ T10] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1072.192923][T11661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1072.196565][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.211465][T11661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1072.221545][T11661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1072.251668][T11661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1072.259675][T11661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1072.328098][ T10] usb 1-1: Product: syz [ 1072.344484][ T10] usb 1-1: Manufacturer: syz [ 1072.349758][ T10] usb 1-1: SerialNumber: syz [ 1072.391135][ T10] usb 1-1: config 0 descriptor?? [ 1072.412659][T18223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1072.467436][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input83 [ 1072.770510][ T10] usb 1-1: USB disconnect, device number 104 [ 1072.770597][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1073.429590][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.476291][ T1086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.857607][T18245] loop6: detected capacity change from 0 to 7 [ 1073.874217][T18245] Dev loop6: unable to read RDB block 7 [ 1073.880921][T18245] loop6: unable to read partition table [ 1073.888584][T18245] loop6: partition table beyond EOD, truncated [ 1073.898456][T18245] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1073.958924][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1073.986905][ T1086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.135728][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1074.152962][ T1086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.382149][T17622] Bluetooth: hci1: command tx timeout [ 1074.397388][T18262] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3030'. [ 1074.977324][T18230] chnl_net:caif_netlink_parms(): no params data found [ 1075.782448][ T1086] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 1075.823933][ T1086] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1076.462099][T17622] Bluetooth: hci1: command tx timeout [ 1076.609123][ T1086] gretap0 (unregistering): left promiscuous mode [ 1076.771943][ T5901] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1076.941986][ T5901] usb 6-1: Using ep0 maxpacket: 32 [ 1076.952750][ T5901] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=b8.a2 [ 1076.962783][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.971058][ T5901] usb 6-1: Product: syz [ 1076.975607][ T5901] usb 6-1: Manufacturer: syz [ 1076.980257][ T5901] usb 6-1: SerialNumber: syz [ 1077.030796][ T5901] usb 6-1: interface 1 not found [ 1077.166448][ T1086] bond0 (unregistering): left promiscuous mode [ 1077.174051][ T1086] bond_slave_0: left promiscuous mode [ 1077.179682][ T1086] bond_slave_1: left promiscuous mode [ 1077.192563][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.203194][ T10] usb 6-1: USB disconnect, device number 80 [ 1077.217063][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.236744][ T1086] bond0 (unregistering): Released all slaves [ 1077.254691][ T1086] bond1 (unregistering): Released all slaves [ 1077.456137][ T1086] bond2 (unregistering): Released all slaves [ 1077.626029][ T1086] bond3 (unregistering): Released all slaves [ 1077.641242][ T1086] bond4 (unregistering): Released all slaves [ 1077.655943][ T1086] bond5 (unregistering): Released all slaves [ 1077.672049][ T1086] bond6 (unregistering): Released all slaves [ 1077.691292][ T1086] bond7 (unregistering): Released all slaves [ 1077.795113][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3038'. [ 1077.885551][ T1086] tipc: Left network mode [ 1078.116048][T18336] fuse: Unknown parameter '184467440737095516150x0000000000000000' [ 1078.339902][T18230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.375366][T18230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.392264][T18230] bridge_slave_0: entered allmulticast mode [ 1078.417196][T18230] bridge_slave_0: entered promiscuous mode [ 1078.425731][T18344] xt_socket: unknown flags 0xc [ 1078.543287][T17622] Bluetooth: hci1: command tx timeout [ 1078.552827][T18230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.584934][T18230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.592550][T11310] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1078.635883][T18230] bridge_slave_1: entered allmulticast mode [ 1078.667104][T18230] bridge_slave_1: entered promiscuous mode [ 1078.805803][T11310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1078.819186][T11310] usb 1-1: config 13 has an invalid interface number: 177 but max is 0 [ 1078.829096][T11310] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.839798][T11310] usb 1-1: config 13 has no interface number 0 [ 1078.877698][T11310] usb 1-1: config 13 interface 177 has no altsetting 0 [ 1078.902576][T11310] usb 1-1: New USB device found, idVendor=1dc2, idProduct=0042, bcdDevice=eb.b8 [ 1078.936830][T11310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.958921][T11310] usb 1-1: Product: syz [ 1078.967744][T11310] usb 1-1: Manufacturer: syz [ 1078.979508][T11310] usb 1-1: SerialNumber: syz [ 1079.018811][T18230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.085648][T18230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.250368][T11310] usbhid 1-1:13.177: couldn't find an input interrupt endpoint [ 1079.265964][T11310] usb 1-1: USB disconnect, device number 105 [ 1079.336449][T18230] team0: Port device team_slave_0 added [ 1079.375319][T18230] team0: Port device team_slave_1 added [ 1079.527225][T18230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.541921][T18230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.588861][T18230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.621930][ T980] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1079.673483][T18230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.680610][T18230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.746443][T18230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.763428][ T980] usb 4-1: device descriptor read/64, error -71 [ 1079.838336][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.856235][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.897245][T18230] hsr_slave_0: entered promiscuous mode [ 1079.905941][T18230] hsr_slave_1: entered promiscuous mode [ 1079.913622][T18230] debugfs: 'hsr0' already exists in 'hsr' [ 1079.919391][T18230] Cannot create hsr debugfs directory [ 1080.011915][ T980] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1080.089292][ T1086] hsr_slave_0: left promiscuous mode [ 1080.095571][T16336] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1080.104909][ T1086] hsr_slave_1: left promiscuous mode [ 1080.111172][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.118854][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.133180][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.140982][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.162387][ T980] usb 4-1: device descriptor read/64, error -71 [ 1080.191213][ T1086] veth1_macvtap: left promiscuous mode [ 1080.237897][ T1086] veth0_macvtap: left promiscuous mode [ 1080.252646][ T1086] veth1_vlan: left promiscuous mode [ 1080.258402][ T1086] @: left promiscuous mode [ 1080.263246][T16336] usb 2-1: Using ep0 maxpacket: 32 [ 1080.267316][T18370] AppArmor: change_hat: Invalid input '0' [ 1080.272907][ T980] usb usb4-port1: attempt power cycle [ 1080.289953][T16336] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 1080.334767][T16336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1080.361987][T16336] usb 2-1: can't read configurations, error -61 [ 1080.522281][ T5901] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1080.538679][T16336] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1080.629295][T17622] Bluetooth: hci1: command tx timeout [ 1080.642063][ T980] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1080.672908][ T980] usb 4-1: device descriptor read/8, error -71 [ 1080.692020][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 1080.699440][ T5901] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1080.709976][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1080.720624][ T5901] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1080.734826][T16336] usb 2-1: Using ep0 maxpacket: 32 [ 1080.739459][ T5901] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.743641][T16336] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 1080.757821][ T5901] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1080.775374][ T1086] team0 (unregistering): Port device batadv1 removed [ 1080.776251][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.795419][T16336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1080.818121][T16336] usb 2-1: can't read configurations, error -61 [ 1080.825394][T16336] usb usb2-port1: attempt power cycle [ 1080.921992][ T980] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1080.942917][ T980] usb 4-1: device descriptor read/8, error -71 [ 1081.035664][ T5901] usb 1-1: GET_CAPABILITIES returned 0 [ 1081.041699][ T5901] usbtmc 1-1:16.0: can't read capabilities [ 1081.054012][ T980] usb usb4-port1: unable to enumerate USB device [ 1081.182403][T16336] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1081.212738][T16336] usb 2-1: Using ep0 maxpacket: 32 [ 1081.225611][T16336] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 1081.240978][T16336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1081.249241][T16336] usb 2-1: can't read configurations, error -61 [ 1081.256153][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.265683][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.275181][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.284293][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.294751][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.304273][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.313934][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.350875][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.362581][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.372431][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.381700][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.392993][T16336] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1081.408114][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.417397][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.426565][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.435823][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.445629][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1081.457813][T16336] usb 2-1: Using ep0 maxpacket: 32 [ 1081.463811][ T5901] usb 1-1: USB disconnect, device number 106 [ 1081.464721][T16336] usb 2-1: too many configurations: 173, using maximum allowed: 8 [ 1081.479701][T16336] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1081.487714][T16336] usb 2-1: can't read configurations, error -61 [ 1081.494729][T16336] usb usb2-port1: unable to enumerate USB device [ 1081.714371][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 1081.770556][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 1082.782110][ T5901] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1082.954100][ T5901] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1082.981960][ T5901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1083.017160][ T5901] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1083.060427][ T5901] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1083.086293][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.169247][T18381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1083.264129][T18401] tipc: Enabling of bearer rejected, failed to enable media [ 1083.622002][ T980] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1083.735772][ T1086] IPVS: stop unused estimator thread 0... [ 1083.809073][T18230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1083.829755][T18409] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3053'. [ 1083.870164][ T980] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1083.918633][ T980] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1083.933904][T18230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1083.969992][ T980] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 1084.027951][ T980] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1084.068656][ T980] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1084.101986][ T980] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1084.136006][ T980] usb 2-1: Product: syz [ 1084.140432][ T980] usb 2-1: Manufacturer: syz [ 1084.188076][ T980] usb 2-1: SerialNumber: syz [ 1084.287193][ T980] usb 2-1: config 0 descriptor?? [ 1084.310025][T18230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1084.431954][T16454] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1084.472532][T18401] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1084.493726][T18230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1084.536183][ T980] usb 2-1: selecting invalid altsetting 0 [ 1084.652610][T16454] usb 6-1: Using ep0 maxpacket: 16 [ 1084.739148][T16454] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1084.801437][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1084.848011][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1084.870189][T16454] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1084.888760][T16454] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1084.933257][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1084.986122][T16454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.105275][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.136396][T16454] usb 6-1: config 0 descriptor?? [ 1085.249723][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.352293][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.465729][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.548146][T18230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.581036][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.677379][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.711631][T18230] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.732006][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.792695][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.800403][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.818769][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.857827][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.930086][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1085.960983][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.968446][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.994402][T18401] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 1086.478235][T18230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.694025][T16454] usbhid 6-1:0.0: can't add hid device: -71 [ 1086.700654][T16454] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1086.814116][T16454] usb 6-1: USB disconnect, device number 81 [ 1086.983391][T18230] veth0_vlan: entered promiscuous mode [ 1086.996621][ T5901] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1087.066844][ T5901] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input84 [ 1087.105463][T18230] veth1_vlan: entered promiscuous mode [ 1087.342972][ T5901] usb 4-1: USB disconnect, device number 109 [ 1087.349185][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1087.398842][T18230] veth0_macvtap: entered promiscuous mode [ 1087.477787][T18230] veth1_macvtap: entered promiscuous mode [ 1087.656944][T18230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.750098][T18400] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 1087.764862][T18230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.886153][ T10] usb 2-1: USB disconnect, device number 82 [ 1087.903754][ T1086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.952477][ T1086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.999532][ T1086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.079040][ T1086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.481993][ T7554] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1088.620133][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.672715][ T7554] usb 4-1: Using ep0 maxpacket: 32 [ 1088.705416][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.726736][ T7554] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1088.763628][ T7554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.772157][ T980] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1088.821845][ T7554] usb 4-1: config 0 descriptor?? [ 1088.890226][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.925178][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.112276][ T7554] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1089.161672][ T7554] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1089.200425][ T7554] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1089.229699][ T7554] usb 4-1: media controller created [ 1089.309389][ T7554] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1089.320121][T18451] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 1089.442454][ T7554] az6027: usb out operation failed. (-71) [ 1089.512858][ T7554] az6027: usb out operation failed. (-71) [ 1089.528565][ T7554] stb0899_attach: Driver disabled by Kconfig [ 1089.551988][ T7554] az6027: no front-end attached [ 1089.551988][ T7554] [ 1089.571353][ T7554] az6027: usb out operation failed. (-71) [ 1089.595461][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1089.627130][ T7554] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1089.655668][ T980] usb 6-1: device descriptor read/64, error -71 [ 1089.682798][ T7554] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input85 [ 1089.733341][ T7554] dvb-usb: schedule remote query interval to 400 msecs. [ 1089.755053][ T7554] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1089.802302][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1089.826635][ T10] usb 3-1: config 0 has no interfaces? [ 1089.852227][ T7554] usb 4-1: USB disconnect, device number 110 [ 1089.900714][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1089.916111][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.925988][ T980] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1089.934722][ T10] usb 3-1: Product: syz [ 1089.944838][ T10] usb 3-1: Manufacturer: syz [ 1089.957441][ T10] usb 3-1: SerialNumber: syz [ 1089.997523][ T10] usb 3-1: config 0 descriptor?? [ 1090.153199][ T980] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1090.165761][ T7554] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1090.191995][ T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.258412][ T980] usb 6-1: config 0 descriptor?? [ 1090.337675][ T980] cp210x 6-1:0.0: cp210x converter detected [ 1090.536378][ T5980] usb 3-1: USB disconnect, device number 92 [ 1090.762284][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.820818][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.837449][ T980] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1090.858230][ T980] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1091.057161][ T7554] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1091.080625][T18507] ip6tnl0: Caught tx_queue_len zero misconfig [ 1091.232349][ T7554] usb 3-1: device descriptor read/64, error -71 [ 1091.420679][T18517] tipc: Enabling of bearer rejected, failed to enable media [ 1091.503503][ T7554] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1091.643494][ T7554] usb 3-1: device descriptor read/64, error -71 [ 1091.711930][ T980] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 1091.772981][ T7554] usb usb3-port1: attempt power cycle [ 1091.894810][ T980] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1091.954538][ T980] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1091.992978][ T980] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 1092.022164][ T980] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1092.057737][ T980] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1092.111546][ T980] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1092.145339][ T7554] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1092.196291][ T980] usb 1-1: Product: syz [ 1092.213793][ T7554] usb 3-1: device descriptor read/8, error -71 [ 1092.231642][ T980] usb 1-1: Manufacturer: syz [ 1092.262882][ T980] usb 1-1: SerialNumber: syz [ 1092.297997][ T980] usb 1-1: config 0 descriptor?? [ 1092.313947][ T5980] usb 6-1: USB disconnect, device number 83 [ 1092.356857][T18517] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1092.369986][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1092.370006][ T30] audit: type=1326 audit(1767368464.429:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18532 comm="syz.1.3071" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f92f8f749 code=0x1000000 [ 1092.416683][ T5980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1092.454528][ T980] usb 1-1: selecting invalid altsetting 0 [ 1092.488455][ T5980] cp210x 6-1:0.0: device disconnected [ 1092.494385][ T7554] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1092.602647][ T7554] usb 3-1: device descriptor read/8, error -71 [ 1092.666564][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.703715][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.732398][ T7554] usb usb3-port1: unable to enumerate USB device [ 1092.783653][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.814653][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.845112][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.886191][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.900389][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.919567][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.935952][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.952421][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1092.969761][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.010694][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.011232][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.011757][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.026918][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.027380][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.027994][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.028866][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.033577][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.034031][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.034546][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.034996][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.039922][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.040373][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.040809][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.042420][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.046074][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.046527][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.047050][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.047487][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.048096][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.057138][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.057592][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.058148][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.058660][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.059110][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.065893][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.066358][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.068077][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.068643][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.069171][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.069618][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.070143][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.070574][T18517] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1093.341255][ T7554] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 1093.492051][ T7554] usb 4-1: Invalid ep0 maxpacket: 16 [ 1093.622074][ T7554] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 1093.772890][ T7554] usb 4-1: Invalid ep0 maxpacket: 16 [ 1093.779772][ T7554] usb usb4-port1: attempt power cycle [ 1093.842283][ T10] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1094.031942][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 1094.046005][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.059900][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.087311][ T10] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1094.099080][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.118725][ T10] usb 6-1: config 0 descriptor?? [ 1094.152102][ T7554] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 1094.182080][T11310] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1094.191012][ T7554] usb 4-1: Invalid ep0 maxpacket: 16 [ 1094.335260][ T7554] usb 4-1: new low-speed USB device number 114 using dummy_hcd [ 1094.352449][T11310] usb 3-1: Using ep0 maxpacket: 8 [ 1094.364891][ T7554] usb 4-1: Invalid ep0 maxpacket: 16 [ 1094.376563][T11310] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1094.391701][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.402187][ T7554] usb usb4-port1: unable to enumerate USB device [ 1094.409820][T11310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.419646][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.431144][T11310] usb 3-1: Product: syz [ 1094.444293][T11310] usb 3-1: Manufacturer: syz [ 1094.450627][T11310] usb 3-1: SerialNumber: syz [ 1094.456507][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 1094.470018][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1094.480879][T11310] usb 3-1: config 0 descriptor?? [ 1094.494942][T11310] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1094.503691][ T10] usb 6-1: USB disconnect, device number 84 [ 1094.636473][T18515] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 1094.653298][ T7554] usb 1-1: USB disconnect, device number 107 [ 1094.832270][ T10] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1094.994488][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.013209][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1095.024463][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.036192][ T10] usb 6-1: Product: syz [ 1095.040773][ T10] usb 6-1: Manufacturer: syz [ 1095.046581][ T10] usb 6-1: SerialNumber: syz [ 1095.057626][ T10] usb 6-1: config 0 descriptor?? [ 1095.064820][ T7554] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1095.078355][ T10] usb 6-1: ucan: probing device on interface #0 [ 1095.087397][ T10] usb 6-1: ucan: invalid EP count (0) [ 1095.094036][ T10] usb 6-1: ucan: probe failed; try to update the device firmware [ 1095.232087][ T7554] usb 1-1: Using ep0 maxpacket: 32 [ 1095.240372][ T7554] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1095.262206][ T7554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.289973][ T7554] usb 1-1: config 0 descriptor?? [ 1095.313940][ T7554] as10x_usb: device has been detected [ 1095.333411][ T7554] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1095.361074][ T7554] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1095.396234][ T7554] as10x_usb: error during firmware upload part1 [ 1095.413134][ T7554] Registered device nBox DVB-T Dongle [ 1095.836911][ T7554] usb 6-1: USB disconnect, device number 85 [ 1096.015418][T18569] loop5: detected capacity change from 0 to 7 [ 1096.027192][T11079] Dev loop5: unable to read RDB block 7 [ 1096.035630][T11079] loop5: unable to read partition table [ 1096.041534][T11079] loop5: partition table beyond EOD, truncated [ 1096.050637][T18569] Dev loop5: unable to read RDB block 7 [ 1096.059709][T18569] loop5: unable to read partition table [ 1096.068431][T18569] loop5: partition table beyond EOD, truncated [ 1096.079037][T18570] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3081'. [ 1096.097947][T18569] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1096.214885][ T980] usb 1-1: USB disconnect, device number 108 [ 1096.333916][ T980] Unregistered device nBox DVB-T Dongle [ 1096.336621][T11310] gspca_sonixj: reg_r err -32 [ 1096.350985][ T980] as10x_usb: device has been disconnected [ 1096.367065][T11310] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 1096.962161][ T980] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1097.112201][ T980] usb 4-1: device descriptor read/64, error -71 [ 1097.371912][ T980] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1097.420533][ T7554] usb 3-1: USB disconnect, device number 97 [ 1097.540772][ T980] usb 4-1: device descriptor read/64, error -71 [ 1097.687420][ T980] usb usb4-port1: attempt power cycle [ 1097.738122][T18596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3087'. [ 1098.024504][T18597] fuse: Bad value for 'fd' [ 1098.051978][ T980] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1098.102717][ T980] usb 4-1: device descriptor read/8, error -71 [ 1098.276384][ T7554] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1098.377365][ T980] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1098.422243][ T7554] usb 3-1: device descriptor read/64, error -71 [ 1098.425507][ T980] usb 4-1: device descriptor read/8, error -71 [ 1098.558780][ T980] usb usb4-port1: unable to enumerate USB device [ 1098.663176][ T7554] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1098.761927][T11310] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1098.812308][ T7554] usb 3-1: device descriptor read/64, error -71 [ 1098.922159][ T7554] usb usb3-port1: attempt power cycle [ 1098.944288][T11310] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.972322][T11310] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1099.002290][T11310] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1099.022047][T11310] usb 1-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1099.050422][T11310] usb 1-1: config 16 interface 0 has no altsetting 0 [ 1099.057941][T11310] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 1099.068418][T11310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.281981][ T7554] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1099.292228][ T980] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1099.313937][T18609] qrtr: Invalid version 31 [ 1099.324717][ T7554] usb 3-1: device descriptor read/8, error -71 [ 1099.343209][T11310] usb 1-1: string descriptor 0 read error: -71 [ 1099.353838][T11310] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1099.361684][T11310] imon 1-1:16.0: unable to initialize intf0, err -19 [ 1099.368601][T11310] imon:imon_probe: failed to initialize context! [ 1099.377123][T11310] imon 1-1:16.0: unable to register, err -19 [ 1099.393585][T11310] usb 1-1: USB disconnect, device number 109 [ 1099.442052][ T980] usb 6-1: device descriptor read/64, error -71 [ 1099.597939][ T7554] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1099.653659][ T7554] usb 3-1: device descriptor read/8, error -71 [ 1099.701927][ T980] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1099.788609][ T7554] usb usb3-port1: unable to enumerate USB device [ 1099.862002][ T980] usb 6-1: device descriptor read/64, error -71 [ 1099.992641][ T980] usb usb6-port1: attempt power cycle [ 1100.362191][ T980] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1100.403052][ T980] usb 6-1: device descriptor read/8, error -71 [ 1100.720279][ T980] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1100.832919][ T980] usb 6-1: device descriptor read/8, error -71 [ 1101.220262][T18649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3097'. [ 1101.270241][ T980] usb usb6-port1: unable to enumerate USB device [ 1101.983194][T11310] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1102.143003][T11310] usb 1-1: Using ep0 maxpacket: 32 [ 1102.170925][T11310] usb 1-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.280239][T11310] usb 1-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1102.300307][T11310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.322427][T11310] usb 1-1: Product: syz [ 1102.340762][T11310] usb 1-1: Manufacturer: syz [ 1102.391936][T11310] usb 1-1: SerialNumber: syz [ 1102.454103][T11310] pwc: Askey VC010 type 1 USB webcam detected. [ 1102.757454][T11310] pwc: send_video_command error -71 [ 1102.781394][T11310] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1102.809161][T11310] Philips webcam 1-1:76.0: probe with driver Philips webcam failed with error -71 [ 1102.864179][T11310] usb 1-1: USB disconnect, device number 110 [ 1103.415272][T11310] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1103.624564][T11310] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1103.663866][T11310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1103.693372][T11310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1103.702020][T18668] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1103.721356][T11310] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1103.740159][T18667] netlink: 'syz.0.3104': attribute type 63 has an invalid length. [ 1103.755059][T18667] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3104'. [ 1103.767373][T11310] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1103.777460][T18667] gretap0: entered allmulticast mode [ 1103.783090][T11310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.792784][T18667] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1103.829839][T11310] usb 6-1: config 0 descriptor?? [ 1104.111933][ T980] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1104.310075][ T980] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.341299][ T980] usb 3-1: config 0 has no interfaces? [ 1104.364650][ T980] usb 3-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1104.382156][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.400236][ T980] usb 3-1: Product: syz [ 1104.424981][ T980] usb 3-1: Manufacturer: syz [ 1104.443143][ T980] usb 3-1: SerialNumber: syz [ 1104.473312][ T980] usb 3-1: config 0 descriptor?? [ 1104.766652][ T30] audit: type=1326 audit(1767368476.829:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18672 comm="syz.2.3106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dd698f749 code=0x0 [ 1104.910439][T18680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.949880][T18680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.492007][ T980] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 1105.555501][T11310] usbhid 6-1:0.0: can't add hid device: -71 [ 1105.579779][T11310] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1105.626729][T11310] usb 6-1: USB disconnect, device number 90 [ 1105.665276][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.703758][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1105.723911][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3112'. [ 1105.736210][ T980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1105.763544][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.791514][ T980] usb 4-1: Product: syz [ 1105.810618][ T980] usb 4-1: Manufacturer: syz [ 1105.821307][ T980] usb 4-1: SerialNumber: syz [ 1105.848183][T18692] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1106.065729][ T980] usb 4-1: 0:2 : does not exist [ 1106.122196][ T980] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1106.213467][ T980] usb 4-1: USB disconnect, device number 119 [ 1106.316901][T11079] udevd[11079]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1106.433452][T11310] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1106.441316][ T30] audit: type=1326 audit(1767368478.499:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18698 comm="syz.1.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f92f8f749 code=0x7ffc0000 [ 1106.475442][ T30] audit: type=1326 audit(1767368478.499:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18698 comm="syz.1.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f92f8f749 code=0x7ffc0000 [ 1106.499652][ T30] audit: type=1326 audit(1767368478.539:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18698 comm="syz.1.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f92f8f749 code=0x7ffc0000 [ 1106.523420][ T30] audit: type=1326 audit(1767368478.539:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18698 comm="syz.1.3115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f92f8f749 code=0x7ffc0000 [ 1106.553185][T17462] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1106.643214][T11310] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1106.652782][T11310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.687961][T11310] usb 6-1: config 0 descriptor?? [ 1106.697033][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 1106.708735][T11310] usb 6-1: bad CDC descriptors [ 1106.716354][T18703] netlink: 'syz.3.3116': attribute type 21 has an invalid length. [ 1106.732386][T17462] usb 1-1: Using ep0 maxpacket: 8 [ 1106.753106][T17462] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1106.772273][T17462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.780398][T17462] usb 1-1: Product: syz [ 1106.802219][T17462] usb 1-1: Manufacturer: syz [ 1106.806904][T17462] usb 1-1: SerialNumber: syz [ 1106.825128][T17462] usb 1-1: config 0 descriptor?? [ 1106.915536][ T980] usb 3-1: USB disconnect, device number 102 [ 1106.922486][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3113'. [ 1106.952730][T18695] netlink: zone id is out of range [ 1106.957964][T18695] netlink: zone id is out of range [ 1107.002209][T18695] netlink: zone id is out of range [ 1107.010082][T11310] usb 6-1: USB disconnect, device number 91 [ 1107.044017][T17462] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1107.454671][T18697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.496618][T18697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.523406][T17462] usb write operation failed. (-71) [ 1107.562816][T17462] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1107.612967][T17462] dvbdev: DVB: registering new adapter (Terratec H7) [ 1107.642190][T17462] usb 1-1: media controller created [ 1107.661734][T17462] usb read operation failed. (-71) [ 1107.673121][T17462] usb write operation failed. (-71) [ 1107.734027][T17462] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1107.777760][T17462] usb 1-1: USB disconnect, device number 111 [ 1107.833120][ T30] audit: type=1800 audit(1767368479.879:2436): pid=18726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3123" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1109.109072][T18753] tipc: Enabled bearer , priority 0 [ 1109.171007][T18756] syzkaller0: entered promiscuous mode [ 1109.197434][T18756] syzkaller0: entered allmulticast mode [ 1109.228380][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3128'. [ 1109.341933][ T980] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1109.483602][T18752] tipc: Resetting bearer [ 1109.511861][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 1109.531924][ T980] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1109.551264][ T980] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.572043][ T980] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1109.612441][ T980] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1109.626009][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.656705][ T980] usb 1-1: Product: syz [ 1109.660924][ T980] usb 1-1: Manufacturer: syz [ 1109.675257][ T980] usb 1-1: SerialNumber: syz [ 1109.897967][T18752] tipc: Disabling bearer [ 1110.242279][ T5980] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 1110.454706][ T5980] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 1110.476301][ T5980] usb 6-1: config 0 has no interface number 0 [ 1110.552317][ T5980] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 1110.575770][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.611876][ T5980] usb 6-1: Product: syz [ 1110.621275][ T5980] usb 6-1: Manufacturer: syz [ 1110.643601][ T5980] usb 6-1: SerialNumber: syz [ 1110.668977][ T5980] usb 6-1: config 0 descriptor?? [ 1110.713225][T18769] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1110.734079][T17462] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1110.950181][ T5980] asix 6-1:0.251: probe with driver asix failed with error -71 [ 1110.981897][T17462] usb 4-1: Using ep0 maxpacket: 8 [ 1111.009228][ T5980] usb 6-1: USB disconnect, device number 92 [ 1111.019190][T17462] usb 4-1: config 6 has an invalid interface number: 113 but max is 0 [ 1111.039545][T17462] usb 4-1: config 6 has no interface number 0 [ 1111.087737][T17462] usb 4-1: config 6 interface 113 has no altsetting 0 [ 1111.130725][T17462] usb 4-1: New USB device found, idVendor=03f0, idProduct=070c, bcdDevice= 0.00 [ 1111.177968][T17462] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.210458][T17462] usb 4-1: Product: syz [ 1111.217412][T17462] usb 4-1: Manufacturer: syz [ 1111.227661][T17462] usb 4-1: SerialNumber: syz [ 1111.494762][T17462] usb-storage 4-1:6.113: USB Mass Storage device detected [ 1111.614542][T17462] usb-storage 4-1:6.113: Quirks match for vid 03f0 pid 070c: 8000 [ 1111.731515][T17462] usb 4-1: USB disconnect, device number 120 [ 1112.448229][T18785] ipt_REJECT: ECHOREPLY no longer supported. [ 1112.532419][T18788] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1112.655147][ T980] usb 1-1: 0:2 : does not exist [ 1112.681122][ T980] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1112.762267][ T980] usb 1-1: USB disconnect, device number 112 [ 1112.940488][T11079] udevd[11079]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1113.231929][ T5980] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1113.596795][ T5980] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.651322][T18809] sock: sock_set_timeout: `syz.2.3142' (pid 18809) tries to set negative timeout [ 1113.660801][ T5980] usb 1-1: config 0 has no interfaces? [ 1113.670928][T18809] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1113.743345][ T5980] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1113.805455][ T5980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.924745][T16336] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1113.948100][ T5980] usb 1-1: config 0 descriptor?? [ 1114.124881][T16336] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1114.135581][T16336] usb 4-1: config 0 has no interface number 0 [ 1114.144839][T16336] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1114.157761][T16336] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1114.170155][T16336] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1114.182744][T16336] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 1114.196349][T16336] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1114.210231][T16336] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1114.222075][T16336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.283568][T16336] usb 4-1: config 0 descriptor?? [ 1114.316773][T18811] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1114.332731][T17462] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1114.402255][T16336] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1114.482414][T17462] usb 3-1: device descriptor read/64, error -71 [ 1114.580883][ T980] usb 4-1: USB disconnect, device number 121 [ 1114.611416][ T980] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1114.733045][T17462] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1114.881890][T17462] usb 3-1: device descriptor read/64, error -71 [ 1115.016538][T17462] usb usb3-port1: attempt power cycle [ 1115.243096][ T980] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1115.260620][T18844] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1115.284339][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.291955][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.314501][T18844] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1115.348588][T18844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.356095][T18844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.363983][T18844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.371175][T18844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.381903][T17462] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1115.411970][ T5901] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1115.431277][ T980] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.442926][T17462] usb 3-1: device descriptor read/8, error -71 [ 1115.458429][ T980] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1115.470388][ T980] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1115.485716][ T980] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1115.496238][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.505845][ T980] usb 6-1: Product: syz [ 1115.508786][T18844] bridge0: entered promiscuous mode [ 1115.510678][ T980] usb 6-1: Manufacturer: syz [ 1115.526774][ T980] usb 6-1: SerialNumber: syz [ 1115.546776][T18844] bridge0: entered allmulticast mode [ 1115.576838][T18844] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1115.602096][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 1115.616799][T18844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.624764][T18844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.692313][T17462] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1115.750882][T17462] usb 3-1: device descriptor read/8, error -71 [ 1115.762885][ T5901] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 1115.778278][ T5901] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1115.791150][ T5901] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.811985][ T5901] usb 2-1: config 8 has no interface number 0 [ 1115.827475][ T5901] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1115.851437][ T5901] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1115.884855][ T5901] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1115.910901][ T5901] usb 2-1: config 8 interface 223 has no altsetting 0 [ 1115.923533][T17462] usb usb3-port1: unable to enumerate USB device [ 1116.072241][ T5901] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1116.085744][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.097503][ T5901] usb 2-1: Product: syz [ 1116.104041][ T5901] usb 2-1: Manufacturer: syz [ 1116.113989][ T5901] usb 2-1: SerialNumber: syz [ 1116.144725][T18842] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1116.281989][ T5980] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1116.404861][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 1116.427899][T18842] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1116.452268][ T5980] usb 4-1: Using ep0 maxpacket: 32 [ 1116.460668][ T5980] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 10 [ 1116.473903][ T5980] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1116.486948][ T5980] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1116.497519][ T5980] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 1116.506340][ T5980] usb 4-1: Product: syz [ 1116.511948][ T5980] usb 4-1: Manufacturer: syz [ 1116.517270][ T5980] usb 4-1: SerialNumber: syz [ 1116.525970][T17462] usb 1-1: USB disconnect, device number 113 [ 1116.547050][ T5980] usb 4-1: config 0 descriptor?? [ 1116.553544][T18852] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1116.711752][T18854] team0: Port device vlan2 added [ 1116.768965][T18854] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1116.794658][T18854] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1116.966102][ T5980] gs_usb 4-1:0.0: Configuring for 230 interfaces [ 1117.200064][T18857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2107136741 (134856751424 ns) > initial count (31747348608 ns). Using initial count to start timer. [ 1117.375777][ T5980] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1117.448891][ T5980] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 1117.555326][ T5980] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1117.617279][ T5980] usb 4-1: USB disconnect, device number 122 [ 1118.142460][ T980] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1118.186632][ T980] uvcvideo 6-1:220.0: No valid video chain found. [ 1118.218753][ T980] usb 6-1: USB disconnect, device number 93 [ 1118.328972][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1118.478922][ T5901] usb 2-1: USB disconnect, device number 83 [ 1118.516994][T18876] netlink: 'syz.5.3164': attribute type 21 has an invalid length. [ 1118.555896][T18876] netlink: 160 bytes leftover after parsing attributes in process `syz.5.3164'. [ 1119.020148][T18886] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3165'. [ 1119.362261][ T5980] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1119.380437][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1119.513088][ T5980] usb 4-1: device descriptor read/64, error -32 [ 1119.782094][ T5980] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1119.942332][ T5980] usb 4-1: Using ep0 maxpacket: 8 [ 1119.962293][ T5980] usb 4-1: config 127 has an invalid interface number: 171 but max is 1 [ 1120.001579][ T5980] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.091909][ T5980] usb 4-1: config 127 has no interface number 1 [ 1120.121938][ T5980] usb 4-1: config 127 interface 171 has no altsetting 0 [ 1120.261410][ T5980] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1120.316031][ T5980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.336942][ T5980] usb 4-1: Product: syz [ 1120.361524][ T5980] usb 4-1: Manufacturer: syz [ 1120.376450][ T5980] usb 4-1: SerialNumber: syz [ 1120.465384][T18895] TCP: TCP_TX_DELAY enabled [ 1120.729857][T18906] loop4: detected capacity change from 0 to 7 [ 1120.743147][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.751390][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.760577][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.773124][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.792952][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.801344][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.810020][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.818910][T11114] ldm_validate_partition_table(): Disk read failed. [ 1120.828994][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.838708][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.857256][T11114] Buffer I/O error on dev loop4, logical block 0, async page read [ 1120.890895][T11114] Dev loop4: unable to read RDB block 0 [ 1120.908733][T11114] loop4: unable to read partition table [ 1120.935526][T11114] loop4: partition table beyond EOD, truncated [ 1120.963638][T18906] ldm_validate_partition_table(): Disk read failed. [ 1120.982936][T18906] Dev loop4: unable to read RDB block 0 [ 1121.006927][T18906] loop4: unable to read partition table [ 1121.021727][T18906] loop4: partition table beyond EOD, truncated [ 1121.041158][T18906] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 1121.144289][T18910] IPv6: sit1: Disabled Multicast RS [ 1121.151164][T18910] sit1: entered allmulticast mode [ 1121.186142][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.193176][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.462307][ T7554] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1121.642240][ T7554] usb 3-1: Using ep0 maxpacket: 8 [ 1121.654816][ T7554] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.686863][ T7554] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1121.711927][ T7554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.724054][ T7554] usb 3-1: Product: syz [ 1121.734635][ T7554] usb 3-1: Manufacturer: syz [ 1121.750918][ T7554] usb 3-1: SerialNumber: syz [ 1121.768740][ T7554] usb 3-1: config 0 descriptor?? [ 1121.785989][T17462] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1121.929827][ T5980] xr_serial 4-1:127.171: xr_serial converter detected [ 1121.960487][ T5980] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1121.972025][T17462] usb 6-1: Using ep0 maxpacket: 16 [ 1121.972897][ T5980] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1122.001259][ T5980] usb 4-1: USB disconnect, device number 124 [ 1122.013068][ T7554] imon_raw 3-1:0.0: IR endpoint missing [ 1122.025447][T17462] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.050186][T17462] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1122.080275][T17462] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1122.091702][ T7554] usb 3-1: USB disconnect, device number 107 [ 1122.094371][ T5980] xr_serial 4-1:127.171: device disconnected [ 1122.129445][T17462] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.138900][T17462] usb 6-1: Product: syz [ 1122.149561][T17462] usb 6-1: Manufacturer: syz [ 1122.183202][T17462] usb 6-1: SerialNumber: syz [ 1122.358646][T18932] bridge_slave_1: left allmulticast mode [ 1122.372903][T18932] bridge_slave_1: left promiscuous mode [ 1122.393854][T18932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.421591][T18932] bridge_slave_0: left allmulticast mode [ 1122.427810][T18932] bridge_slave_0: left promiscuous mode [ 1122.443027][T18932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.456325][ C1] ------------[ cut here ]------------ [ 1122.462651][ C1] ODEBUG: free active (active state 0) object: ffff8880335c4278 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x20 [ 1122.477817][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: ksoftirqd/1/23 [ 1122.488823][ C1] Modules linked in: [ 1122.493537][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.504694][ C1] Tainted: [L]=SOFTLOCKUP [ 1122.509049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1122.519239][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1122.525701][ C1] Code: 89 44 24 20 e8 47 36 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 8a c0 8b 48 c7 c2 40 8f c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1122.545729][ C1] RSP: 0018:ffffc900001d7998 EFLAGS: 00010246 [ 1122.552194][ C1] RAX: ffffffff8a315c90 RBX: ffffffff99b516f0 RCX: 0000000000000000 [ 1122.560220][ C1] RDX: ffffffff8bc08f40 RSI: ffffffff8bc08a20 RDI: ffffffff8f8c8360 [ 1122.568313][ C1] RBP: ffffffff8b6d2500 R08: ffff8880335c4278 R09: ffffffff8b6d3660 [ 1122.576362][ C1] R10: dffffc0000000000 R11: ffffffff81ae0a10 R12: ffff8880335c4400 [ 1122.584625][ C1] R13: ffffffff8f8c8360 R14: ffff8880335c4000 R15: ffff8880335c4278 [ 1122.592790][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 1122.602348][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.609001][ C1] CR2: 000020000005f030 CR3: 00000000370b8000 CR4: 00000000003526f0 [ 1122.617052][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000001 [ 1122.625139][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1122.633216][ C1] Call Trace: [ 1122.636541][ C1] [ 1122.639529][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 1122.646665][ C1] ? kobject_put+0x228/0x570 [ 1122.651426][ C1] kfree+0x13b/0x660 [ 1122.655453][ C1] kobject_put+0x228/0x570 [ 1122.659906][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 1122.665467][ C1] ? rcu_core+0xc1a/0x1720 [ 1122.670112][ C1] rcu_core+0xc8e/0x1720 [ 1122.674483][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1122.679335][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1122.684471][ C1] handle_softirqs+0x22b/0x7c0 [ 1122.689379][ C1] ? run_ksoftirqd+0x36/0x60 [ 1122.694339][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1122.699469][ C1] run_ksoftirqd+0x36/0x60 [ 1122.704012][ C1] smpboot_thread_fn+0x542/0xa60 [ 1122.709125][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1122.714422][ C1] kthread+0x711/0x8a0 [ 1122.718521][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1122.724060][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.728828][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.734837][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.739498][ C1] ret_from_fork+0x510/0xa50 [ 1122.744193][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.749351][ C1] ? __switch_to+0xc9e/0x1480 [ 1122.754194][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.758869][ C1] ret_from_fork_asm+0x1a/0x30 [ 1122.763846][ C1] [ 1122.766923][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1122.774258][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.785068][ C1] Tainted: [L]=SOFTLOCKUP [ 1122.789620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1122.800030][ C1] Call Trace: [ 1122.803367][ C1] [ 1122.806405][ C1] vpanic+0x1e0/0x670 [ 1122.810966][ C1] panic+0xb9/0xc0 [ 1122.814835][ C1] ? __pfx_panic+0x10/0x10 [ 1122.819312][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1122.824320][ C1] __warn+0x317/0x4b0 [ 1122.828358][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1122.834158][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1122.839963][ C1] __report_bug+0x288/0x500 [ 1122.844521][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1122.849814][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 1122.855650][ C1] ? __pfx___report_bug+0x10/0x10 [ 1122.860715][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1122.865707][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1122.870715][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1122.875801][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1122.882002][ C1] report_bug_entry+0x19a/0x290 [ 1122.886904][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 1122.892672][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 1122.898537][ C1] handle_bug+0xca/0x200 [ 1122.902835][ C1] exc_invalid_op+0x1a/0x50 [ 1122.907474][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1122.912367][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 1122.918802][ C1] Code: 89 44 24 20 e8 47 36 8f fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 8a c0 8b 48 c7 c2 40 8f c0 8b 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 1122.938679][ C1] RSP: 0018:ffffc900001d7998 EFLAGS: 00010246 [ 1122.944803][ C1] RAX: ffffffff8a315c90 RBX: ffffffff99b516f0 RCX: 0000000000000000 [ 1122.952818][ C1] RDX: ffffffff8bc08f40 RSI: ffffffff8bc08a20 RDI: ffffffff8f8c8360 [ 1122.960879][ C1] RBP: ffffffff8b6d2500 R08: ffff8880335c4278 R09: ffffffff8b6d3660 [ 1122.969037][ C1] R10: dffffc0000000000 R11: ffffffff81ae0a10 R12: ffff8880335c4400 [ 1122.977068][ C1] R13: ffffffff8f8c8360 R14: ffff8880335c4000 R15: ffff8880335c4278 [ 1122.985097][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 1122.990548][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 1122.997634][ C1] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 1123.004718][ C1] ? kobject_put+0x228/0x570 [ 1123.009364][ C1] kfree+0x13b/0x660 [ 1123.013320][ C1] kobject_put+0x228/0x570 [ 1123.017786][ C1] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 1123.023369][ C1] ? rcu_core+0xc1a/0x1720 [ 1123.027848][ C1] rcu_core+0xc8e/0x1720 [ 1123.032301][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1123.037118][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1123.042210][ C1] handle_softirqs+0x22b/0x7c0 [ 1123.047023][ C1] ? run_ksoftirqd+0x36/0x60 [ 1123.051675][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1123.056854][ C1] run_ksoftirqd+0x36/0x60 [ 1123.061324][ C1] smpboot_thread_fn+0x542/0xa60 [ 1123.066390][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1123.071859][ C1] kthread+0x711/0x8a0 [ 1123.076195][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1123.081785][ C1] ? __pfx_kthread+0x10/0x10 [ 1123.086446][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1123.091708][ C1] ? __pfx_kthread+0x10/0x10 [ 1123.096374][ C1] ret_from_fork+0x510/0xa50 [ 1123.101015][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1123.106209][ C1] ? __switch_to+0xc9e/0x1480 [ 1123.110946][ C1] ? __pfx_kthread+0x10/0x10 [ 1123.115597][ C1] ret_from_fork_asm+0x1a/0x30 [ 1123.120438][ C1] [ 1123.124278][ C1] Kernel Offset: disabled [ 1123.128631][ C1] Rebooting in 86400 seconds..