last executing test programs: 14m50.050963144s ago: executing program 1 (id=108): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x7, 0x6b1, 0xfffffffa, {0x77359400}, {0x77359400}, {0x4}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x2f, 0x2, 0x0, 0x0, "e7ed06f2fd0870e91c4309d5468b69360c30533334238f56c6a622c2426a81346bdb832337a003254dcb9a2eb21dcc62dbda8036bfda047f244bd6b1984b1896"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000200", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 14m49.831497032s ago: executing program 1 (id=109): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x3ac82000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x2000, 0x2000, &(0x7f000000f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001100)=ANY=[@ANYBLOB="2d667265657a65722073204bb6bc4dd89a8f7d6c6dbbe4dfdac29bb27cea484886122de1146c54034f35b08e5189cc40ef2a8502fd77e202acb5e29ed9a1e01916e7bbf874e126dff195b28783fa17d76b2161c37b0d4582ad404d0f19ca3091e7c14f8f71398a2bd19c2c218300c1f3b5da8c718ff0361400df5d50dcfa130868177b5fe908db79f8e7ddd7dd70bae2379736f948acfbab7ffd12a5dcba929dcf323823d017c96f1038"], 0x9) r6 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}]}, 0x0) 14m47.338784436s ago: executing program 1 (id=127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000100)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8d16bf1b9e74a06fab04ab42d8c5cd7c07bcb67ce98fcb4c8a759e3fa61d1912d7121a9e51dfdd4fb9bfd6dbb6ab5a39694317ecf41cb8c319ea36ff449e54f6dc45e", 0x43}, {&(0x7f0000000240)="c9973ba2bc2c915c26b8be4a6c96ccc101a088f715562bd6e603dbf65e9cc4be7ac400712b895cf7a2e4e9c787ef7a51ec06ce2af3631911f9cae366718a1728b274dd1536", 0x45}], 0x2}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000440)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x1, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000400)=0x40) 14m46.971843667s ago: executing program 1 (id=128): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) unlinkat(r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="11002a"], 0x40}, 0x1, 0x0, 0x0, 0x20004851}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000000680)={{r1}, "2b0d3867873db2cbad03566999dca81dbe4ca7e5a84be8f9c951027f93518bfd2de2174dc97fffb3beadbf4a771e8a0ecd99e947fd4baf6ac1cf703b7caad9f76fa53db5e4ae90ef160abbc1871b1b1cd3ed5ce0a09eb455a5ea9c4ad401a2f9d702c9fe16c0654b0fd9a1b02acb9f08499587f34a4ee95f7b6539298eb7142b136185f4be477d62d638efa36f31f47e750bab3a61e7fe9693165fd59ced53a58b1cdc7fc552d978923df61ec31366c1d6e55a3e6daec858c4d2747c96ddbd27cbff33e4a48d49dc9af27bce4854e013aadc763c7cca9baf715ebf798d75f3f509fa8a37b6600aa68e5075d0b54caf50b75aa15dfefbbf363f0b0a3a4aadf6420bc088ead36252e07800497cf2068a7b5df35523c8d259b477d51dac949335c683fee1d16f702fb4ff14b19ef922e8cdc2388034d6ef6fbf85685e69f6ced6d557eb88bbda9d6793e4b012a780322ba1a065e8d28712e3ad139edda7b6c0094769336d14919e0460f921ed5293f4718d32850171dab1d573c1e2c80fc032b97b285ae87022c74670ba7445ca384a2584033c6012191ec32e335e1ec79e48188285e3d08f9a97c04c835cdd052f35073e1691246883b7b24ea9bdebc9be0156e4d3cd14e6df387a904ddbbd44516a994738d76749371ab50cafa366d2d052e9e4aa5bdc70837635d099b9d64ecc4634f6d28c2c9a43a36010e1eeec744d707f6bd871dbd25d5c0cd05cb74b604b890cf0bdb95495cc3ce30cd576d3de36201525fb1fef62cda0da003d24686bc84f996014ce2c8653ed797ed2dcb817f12b43ee1e69d3cea4b8640f62749a5d92798b23d71a46c8bea6e67891a8e85e374de057aed9cd6f0f3ade91b06a0877845edec793101915607a97ceb2fba180a31ff19f704ad2cbf0da649321802d3f2d4b40861511a2e6bcd231073f2bafc1741241952941f245c1aa0dda39ee20a5e2b965eb70e2c3702e4fed663620a6b107d12ede40e0903b28e802c2284b6d15945e0aa07a5bc05f34c897f5f687044bfb6595ada9becc2691b47d8c449f47d603c4d15eef55953e58820cc8e7f88e733b1febc012af0bf1ed1d1bf34dd80cb088b431565033af498125b4d1a2d033e23d08b1d8eff09ef92215197eff51451b321733bf01715b6c2d68504b5efd9ef6e1bc44a35b9f05e2e65d9308ce47ac6d64a17cfa48bfc7d2c964eea41b6dafe40a88bb97e460051a2b10865f78db25da64c1c93e4a03fc964169ee5567cd169d0ab92561c575e18986902e97e263999ba38becb3d8f07fa9ba5f99eafb7fea240e042198719dcc7d83236515b852d330f3a0b3e1fa12137957a55721781796d666ec01ce1fddf7550f32afe68824723aa6795f616442516aecfe5cc4a4f15a2e474eda32fb62cce2267b3952693b513c9521ea99ea09d0e64454e3b0eb6266e51f1c475641bfe530d518cf9025c5febea9425e025137178ea8a06cc5b039a2cbb1df99052365198f81fcb501ac6015854dd650eab0573ad514d822c8216523156e1bfbde1bdde2dfe26239e905354b6a3c16b2172f883a4986476e74f6bbbcfadee30d546b2492242ed6344a5b67cdfa6e1779785138f5d1560e1c5bd64cb95cfa7ae6c45d3a66c9361c692b7acf39dfeca41a3a30f1fc3476000e00749a7b8bc6e67a0b1dabbf23611f6ffb5f96dd7c9d9927f8b2b8668a236a9cf7bea0b00a7dd4f861bac88223b33636078b808e1a3545b395df38f357cfa60062e129a5165a9718cfab360d424451917d45d231877a88d4ef439e4888b55883797e19fdc64ed7b614dadc4e9290522e1d9f0b08499f8507b8380530137fc27e06b1cb770590d7219ee2e2724077ab6294101e4f362abb801361e3c44e5719f1ac89b1ab11ebe383f9a87d7ecb8991646668693c26da3f7aeb34b11b3a62ef2b21e193a9868a27d6c5c73b792766a13abc4d036b44af10395e881b6e1449e2a8d71b8f4a0a0320f06969ef3118e7708d1cac1b67eb732e39e836b9a693328768c82918c51b9c314776d936d4e3920909dd472008df2d42e1c3cae57e898850c38b680e7be80558310c59b7d2919baaca15d2e47a15cc47134265b75ec38ca18c9ed5a11e99d45ba7790bc0c27ae7fe3ee3c67bc548a2474bf0c02ae0c8a1dd3c8dfd2ff63f8c9b20468d101bccac1b6e3bcb514af16601b9b126ed55a537e773a73436e26e35a0542795305a40462fa8072a23061d7eef3885e1344c5f3ed36f07866b4c968404ee7b762dc6ebc9916b5be7daee4132d57c6e027963c2206c424fc9ce4e5b422296bbab19e1f153327f50e7df5152c9e82a28fcdec921c7d267eaf5efcf1d2448155cc3a2aaf010ffe45437301498e1530aa0c0a3c545f00939af82cf31d6076f0d55c5189988f56c706dfd758301314f4877fe137f5a2a007e0098041be7c33b974de75c09ac5fbc9b1ef23508e9ff7ed183444e8929a0b805a0618b40758fb30b717dcb8095e0f5cd066d0f810a3dee95d76b08f5387af5feb27e41078b2f1c52699c7f4e41e711d99b23daab94d9b494d3fef39b3e3749122cdb7b5bc8c65e627379a81009dc6defff28c35117b4e9363360898729e646918a30cf3a60b497bfe4bcee7691b0d051b5dab7f3c61f59f4311abeb67b434c0ae975e4a03c19e8e9574a500bf3154e8ae25ad118ede04adacec1db2c61b3d238301c5ee5e12aeb870d0a6e1f41cd2a6678084426f9d9a45c774088f0020901ab6d06e341ff7b654cb31d3f6f4fd75470a118bef60b15815a4106e153fc78218e5200a6fc0e29081410b2773be5fc65bccc040449cbf7fd991f685670538f0793b6ad3d400b09efe73a737667719a2ed4b2bcc976b3a4c99b422b245fb31c48bef71f332a1d3b85646e0d40eb874284d246d3862035ce10df1c4e1a08d692aa9d41a99ec2b1ed0ac0ed8bd18536e8015ee4105691270fd9a1c82bd76c9cab680cc4a1465d25735b6241f422036e28252a5705f518dca70088800e9cb7186eec5d4ee4d0f67f613f9f8141358b6397b288d53bbfd5073ed2991044a0f642da89f5be183d404d8e347170ff1b1c72915cd96354227b63d16270684157ce5d143d31ece355dbabfec720d2a50674ba93755c9348f42574d5f8d34f2c80018fbc1aa43970661a382eac3c055ae8d2a62ef771753252f9c5f7543111ee7b9903b7644fb2bbd3216d130d5a5cc213468052735ccbe7c2d5215f1490a8de38bc577bd3dd5782ee9f7d22b11f605ac4ad551f8db5bb6ca3345c6c84fc63828c9a1688c1846b4aef6de470655ec77958c768932dc98f77b188c22fbf8d053c14fb26efeea2bf6f51cc20da1b4a1f93ac6c4c92796e79d322509a140832cd49e95a7e6426d8a8990c8147f9fa6924005dde9e2a488880299065d034f6129e75dc74c2aca9df645096879c66a14612b855a9d3b0c9891d826a55f436c468d2f9864502b923e60a338e8330fb91472d57b8e87e2d66f20ba4d61bfa04f2f83b915b82b8079d5fd178e8313e5cbe4f1da0377417dd46fcff0a8854fa82087bfee1874a857966288dd3173423b17e613c800dbc662d1edc58f6e1ccfb1270849ae5b2155082fee163ae29c15186acc7aee74d8793aceb74f51578fab5ff7df22542adc02576aedfb66269b15e658094aedabe72977b458d886f94ba65e10985c71deaab567027e477cdb7bd92b217fa007ba3859554c3a15f88e60470ea755d7543f35f899550708eacfd408c1f78773f0e35719d02376dab2eb9425058d817b83f09337149c789311eeb4152daf4e39d70fa135dc40a8ef0bbe2be9775076971ea25f2553bbc8e2a63df8fc84f99065cf4fdf56d28e37beb004b6b2b31831155ca0fd0576b8ab4d6dc9b567d39a4743a701cbe1a6a8f729a904ef06f10f6ce94bd977a4ea0d305153c4bd5e22ff4787a19fdfadbe152ca7db04f7b068521e7a3934e6bd1a35f0bc0add18ccbc2334229a1596da8c5de922957d49d964a59fcf32fe9dc44ae5124e45c2fb128613c834d0e1454ef1de72311095b2fa8b29692832a73c12afbcbf7485b9101ce723b6648da646bfecacdf2cc39a3d81da643c0d83938fb0068311b234d2864272209d6b73af1487f164a0cdc31e15aac101bdbfacca84bfa5e86a2b89a9c9db2b5b7a091100771c69e125701e3a7ae711168f91fb26b20024c66cafe41870398b2c027fd1d577285ceaa36614db47aa3d0826650464f7b5a94008c14f8829364259aa811b3a9adfb9ff30bde67426b8a734c42e916e5de6bc349f3c33018ea5611560887e9676a2b182af1887f913f0ca797c672005f00b4ffc85dfd0c33807697cd4f3f5b7bcc9938956bb096c9cb91bdbb6ed3852411744525b00a128812fa5599769c2ba301ba8aaa502f6cb02a3330dc3a64d5589acd564575f7293d7fe02714d21291e7d9ef48d824ed2a288c143ef7d64bfaefb4edfdab30a1f5fbf45ec96df1a826c1cca8ebdd26309c48dd63a4142f1865fb16bf2df5016f45e240bf2da5cab6b83e40c73feb0f124c55017fbb3b7ebe7bbb5de2ed838924b8a13960890b6975c3380174c6edc552e546f8ed0e10366bf07de007d63e38e35f8d409a1c47c17485b7ec7e9101acbbce3ad2ec3d3c53e81ae61af7c229242acaa995467e57eab3e42a42a2765239aea5eeaf5f5e7bc8f3acdcbca5e7a65454670f598fa5aef4bb6ff6cc29987ab35d49775eb1faa822194e2cd33824ed6c484bed46053532f5dfef443e7b04b8bf415802f823f0232d3433a6f2a28d8fc08d7a42935a28a9565362d0347c1f20c32546a44405010fb76660fdb97d4e5498d1bfb6f34e47802077a468987acc8fd5877593913eb7c561219202057af910c183604d703fa028623d2db9ea34a751070acb758bf356bf29f42979683c9336346ba34e2374ba22845822e6ba28afe04fc3c790bedfa34ae4a3adbe3869a6e110137b4a6d1af7e5c7705c39fdf752e31b6ac5b93a51b5f8418e1dd1b14b0534ba47576ced88a3ddce63ef8cadb909192a08d1781ba6ae78779d1e052c8e0940507a36a88761208578e64a1e618b4f1e08a109e2b22a110cfe3a0aeb506129248facdfdcdc834ca2bad5c2fc27722c2fcbd48ab677ba52781c0cc4ceaf02c5f87bf05a43580a79f9aa179b9ed10bcc7e183f1eba4e3bf1ef1b57b3638433447d1dcf58c61bdbd2514e13e12c96f113ba042f9a8b47b109b654a69cb6dddea07d99e710878de7d82e628dc593bd90254a402e338b81a11bda8c3896c88641791c4830484a55b20728d1badb0368b115b7245e933062616b906d7f48d7d4b7d3df8144bebcef884d95f20a6479662447cd12ac5b58ae122f27fe2d6c73f82bec5352614d057967f67faefacc5e99f1361447069c59eba9c3219b491f4d6e9b3c933ee3a90ad8a4b218ee3ad51f79f27bcf9335c12e96967256f068632b2637c98801672f497ccf72d38084f1f769e263d5df5ee7b1c919c09f8ad5bcdcf3ea9c515a957d1ffcf6113d2b003607712554fea620df09a3b68542ec57f35843b9b220d37f4f7849f3e9e5aa8a4d808c1caef8da6647b7771584f56a9d40b565bade8002501ce1907de3ff9543eada32e1965fbef2e909aa7e0a05629634b8354a20e5d7ba70c7e5a94b722eef08ca45a6613d428ed58c4f57c1bf8f31b79480b706ad88e315867eaae28c0812e7e052a146a867f7d850fba74eafb6840d6af46035095072facc974e3a92652be657a79f7cf45e1ed6d8f9cf271f74d873359b2c286b7feb"}) listen(r5, 0x3) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x200, 0xb}, @exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x16, @broadcast, 0x1}, @sack={0x5, 0x2}]}}}}}}}, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, 0x0) 14m46.403761021s ago: executing program 1 (id=130): write$sysctl(0xffffffffffffffff, 0x0, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) (async) 14m45.994995985s ago: executing program 1 (id=131): fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x9d2, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x3, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r5, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 14m30.626219845s ago: executing program 32 (id=131): fsopen(&(0x7f0000000300)='befs\x00', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x9d2, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x3, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x5) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r5, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 17.305402115s ago: executing program 5 (id=2981): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x200000000000000, 0x802) write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0xea60}, 0x11, 0x2, 0x2}], 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4f9309", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 16.996641361s ago: executing program 5 (id=2982): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c4e9fac6c52a5866e5ec13e8645964b00"]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004200)=ANY=[@ANYRES64=r3, @ANYRES8=r3, @ANYBLOB="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"], 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) openat$tun(0xffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_pts(r4, 0x900) r6 = dup3(r5, r4, 0x80000) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioperm(0x0, 0xf1, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x2009, 0xffffffff9080edc4, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, r2, {{0xffffffffffffff5c, 0x6, 0x0, r3}}}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 15.67537043s ago: executing program 5 (id=2986): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) (async) r1 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0xff, 0x4) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, '\v\x00'}, @main=@item_4={0x3, 0x0, 0x9, "d12f3eb8"}, @local=@item_012={0x2, 0x2, 0x2, '\x00\b'}, @global=@item_4={0x3, 0x1, 0x2, "0200"}, @main=@item_4={0x3, 0x0, 0x8, "0400"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 13.740197404s ago: executing program 5 (id=2995): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000103b7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.681194248s ago: executing program 5 (id=2996): syz_open_dev$vim2m(0x0, 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x4, 0x40, 0x7, 0x3, 0x4, 0x9e, "a5f86d9b2530f39c2506c168b68a45bc", 0xf7, 0x78, 0xf6, 0x9, 0x0, 0x7, 0x16}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, [], "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"}}}}}}, 0xfce) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$nvram(0xffffff9c, &(0x7f00000001c0), 0x80400, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)=@setlink={0x140, 0x13, 0x30, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x288, 0x20088}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x947c}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x10}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_MTU={0x8, 0x4, 0x26f}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_VF_PORTS={0xe4, 0x18, 0x0, 0x1, [{0x4}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x24}, @IFLA_PORT_PROFILE={0x8, 0x2, 'sfq\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '@\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '-$\xa1$\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0xffff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aa554db350b735d0795316a8e0935549"}, @IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e32909408c6eeecd834ff246dbecf2f0"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xef}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6b7af7c57346a7f4d47518a2c55e2446"}, @IFLA_PORT_VF={0x8, 0x1, 0x3ff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eaac10adc782b032a2207bdf806e7aa9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0xa, 0x2, 'basic\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x21b8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) madvise(&(0x7f0000900000/0xa000)=nil, 0xa000, 0x17) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 13.6336151s ago: executing program 0 (id=2997): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) socket$alg(0x26, 0x5, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6418, r0, &(0x7f0000000000)="ab", 0x1, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x3eb, r0, 0x0, 0x0, 0x9, 0x0, 0x2}]) 13.383625339s ago: executing program 0 (id=2998): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500033c5233fe00080001400000001708000240000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0) r7 = openat$cgroup_pressure(r1, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) modify_ldt$read(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffe) close(r7) 12.10793763s ago: executing program 4 (id=3001): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)={0x7, 0x0}, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) fadvise64(r0, 0x0, 0x5, 0x4) r3 = creat(&(0x7f0000000200)='./file0\x00', 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000580)={0x0, 0xcbd, [{0xffffffffffffffff, 0x0, 0xfffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0xfffffffef0011000, 0x100000000}, {r3, 0x0, 0x100000000, 0x1000000000000}, {r7, 0x0, 0x0, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x4000}, {0xffffffffffffffff, 0x0, 0x4000}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x48, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x387a5b22aabe93e0}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x22, 0x0, @val=@tracing={r9, 0x8000000020000000}}, 0xffffffffffffffdd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r9, 0x4) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r10, 0x40045612, &(0x7f0000000040)=0x1) 11.731847576s ago: executing program 5 (id=3002): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800200000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.393842894s ago: executing program 2 (id=3005): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002bbd7000fedbdf252500000008000300", @ANYRES32=r2, @ANYBLOB="08003500030000000a0006005050505050500000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) lseek(r4, 0x6, 0x1) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000240), 0x101400) (async) r5 = openat$sndtimer(0xffffff9c, &(0x7f0000000240), 0x101400) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x120) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x120) fcntl$setlease(r6, 0x400, 0x1) fcntl$getown(r6, 0x9) (async) fcntl$getown(r6, 0x9) syz_usb_control_io$printer(r3, &(0x7f0000000180)={0xc, &(0x7f0000000040)={0x0, 0x31, 0xc9, {0xc9, 0x31, "c630631abed16e448c337f48fd9b09b20c83b894abeaff197294b11c6e3329059c96a500b4636b731229c51ae9c08713f5b3699683ac441e3c1f43ac24e3e1b9104c53e78ea9277e68dabc5a1cdadf717cb1d50a185e9c610afdbe69e4adc10899ed6c23b974243895d191826dd20bc72e720bc686387c36c01066a24aec00b4b1515b4ef6fecf16702577794df7330bf42cfbe7eed381074c81c6f422e2201ea9024239cae315969c182af66bf095865c77b23ff5d65c1dbb0ca04905f59fc4f7f913c214dc23"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}}, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0006bea336e05ede5b1fbbee3b7d411d68878062ac8f9ae179c9039d804a6c390190220f08e8a7a3fdaa4058b94a9101c7c6eb5629757056b95c1c2e5851f5a0f12dc46f51c2a0105f"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x7b}, &(0x7f0000000480)=ANY=[@ANYBLOB="39de4100000000bc342f77fb177c41fe81e68475975263f9600eb6d037e46f4083b21f657d1b8c89d5afc3c73bd45b0d41fa9c5fd7e005c9e1dcebf1fa442ff1b673e914d450d8d2b1f223daf0bec04228013a3a3804"], &(0x7f0000000340)={0x20, 0x1, 0x1}, &(0x7f0000000140)={0x20, 0x0, 0x1, 0x3}}) 10.122532496s ago: executing program 0 (id=3006): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$video(&(0x7f0000000b80), 0x8, 0x42100) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000bc0)=0x3000000) r3 = openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x9, {0x1, @usr_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x100, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x8}, {0x0, @local, 0x6, 0x5, [0x10, 0x9]}, 0x9, 0xffffffff}}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r5, 0x8010aebb, &(0x7f0000000100)={0xffff1000, 0xc000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00') read$FUSE(r8, &(0x7f0000002280)={0x2020}, 0x2020) pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r10, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r9, &(0x7f00000000c0)='!', 0xb7f40}]) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r11, 0x6, 0xd, &(0x7f0000000000), 0x4) dup3(r9, r6, 0x0) vmsplice(r3, 0x0, 0x0, 0x2) 9.700227299s ago: executing program 2 (id=3007): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000076b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.428945401s ago: executing program 2 (id=3008): mkdir(&(0x7f00000000c0)='./file0\x00', 0x110) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e900000000000000030006000000000002000000000000000000000000000000020001000000000000000316ff00002003000500000000000a000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 8.846597482s ago: executing program 0 (id=3009): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64) setsockopt$inet_tcp_int(r2, 0x6, 0x17, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', r3, 0x0, 0x7, 0x6, 0xc6, {{0x16, 0x4, 0x0, 0xb, 0x58, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x16, 0x3, [{0x0, 0x8, "4db97c337975"}, {0x7, 0x8, "51cadba52c2c"}]}, @noop, @lsrr={0x83, 0x2b, 0xda, [@rand_addr=0x64010102, @empty, @loopback, @multicast2, @empty, @private=0xa010102, @private=0xa010102, @remote, @multicast1, @private=0xa010102]}, @noop]}}}}}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYRES32], 0x0, 0x0, 0x0}, 0x0) 8.817720522s ago: executing program 4 (id=3010): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x4004551e, &(0x7f0000000140)={0x105, 0x4, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905da88235f8a5447dd2a2fd6e91626f068801000f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008dae0b74873b32103472b1eaa007969d008ba7d34171113dc06726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd50080fcffff2400000e4a62fb73c33424b437bb192cdfcc70d262d4fca60000000000000a82727ef14eee686be00b58e384f93a13e4e8bbf599394baea3a9ca1864f0a25d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db00"}) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000280)={0x3, 0x400}) 8.79567975s ago: executing program 2 (id=3011): mknod$loop(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$fuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_usb_connect(0x0, 0x3d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000fb03d1205e043a0469f50102030109022b00010000100009046700023dbb8e0009050202000202020009058202"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\xcd\xe3/c\x88\xfd?\x94Rh\xf1\xe4T\x906`__\xc9\x9f\xdbB\"\x85\\\xb9\xfc\xfdW\x8d\x0f\xd8\xe1p\xc4\xfb-`:\x95_\xcaJ9\x95\xe2\xa0\x87)\xc3\xa0@O0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) (async) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = io_uring_setup(0x25f5, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) r7 = mq_open(&(0x7f0000000340)=':\x00', 0x40, 0x1a, 0x0) (async) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000500)={0xe000200c}) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0x80000000}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @multicast1, @loopback}, &(0x7f0000000240)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newsa={0xf8, 0x10, 0xa07, 0x70bd28, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in=@multicast1, 0x4e20, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x32, r10, r11}, {@in6=@mcast2, 0x4d6, 0x2b}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x9, 0x6, 0x5, 0x0, 0x6, 0x10, 0x9e0}, {0x9433, 0x9, 0x2, 0x4}, {0xb8f6, 0x5}, 0x70bd29, 0x3501, 0x8, 0x3, 0x6, 0x50}, [@mark={0xc, 0x15, {0x35075b, 0xfffffff9}}]}, 0xf8}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="8b330800000000000000050000000800030088d4b129d5976566ae1a87cbc1714b6c95ede7ae5145980febb2a163e0844a8edc42f1b3e56bc3b6f23a04d26d5295b4a29f1604b432581b7844e4a1730027fa6a332f621ccbecd59759d245676dec738b24f9beedcef6a3fbf917b6402ec2c22d67ddba94bea3f786cf2792ef0132ffa45751fd8105b19328d6427add25358911325d22cc6753b927aeb20da2ea64e89dc5d389cd36c09465d269ccfe755c12aa8e3fbe08fe64b7e8ef3ecc633375cf9f9c28feb1a6c7bb4c3193658a66f65ce1fce0a87dc2b455e490163a00a1ad6e7144948caf965c876cc516fa1c117e", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) 8.407586845s ago: executing program 4 (id=3013): syz_open_dev$vim2m(0x0, 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x4, 0x40, 0x7, 0x3, 0x4, 0x9e, "a5f86d9b2530f39c2506c168b68a45bc", 0xf7, 0x78, 0xf6, 0x9, 0x0, 0x7, 0x16}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, [], "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"}}}}}}, 0xfce) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$nvram(0xffffff9c, &(0x7f00000001c0), 0x80400, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)=@setlink={0x140, 0x13, 0x30, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x288, 0x20088}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x947c}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x10}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_MTU={0x8, 0x4, 0x26f}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_VF_PORTS={0xe4, 0x18, 0x0, 0x1, [{0x4}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x24}, @IFLA_PORT_PROFILE={0x8, 0x2, 'sfq\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '@\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '-$\xa1$\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0xffff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aa554db350b735d0795316a8e0935549"}, @IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e32909408c6eeecd834ff246dbecf2f0"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xef}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6b7af7c57346a7f4d47518a2c55e2446"}, @IFLA_PORT_VF={0x8, 0x1, 0x3ff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eaac10adc782b032a2207bdf806e7aa9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0xa, 0x2, 'basic\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x21b8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) madvise(&(0x7f0000900000/0xa000)=nil, 0xa000, 0x17) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 7.356048005s ago: executing program 2 (id=3014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r4, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0xfffffffe) io_setup(0x80000000, &(0x7f0000000040)) r5 = socket$inet6(0xa, 0x805, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x727, 0x3, 0x5, 0x10, 0x16, "1850aa4c9f1d805c"}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) write$dsp(r4, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000180), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x282, 0x0, 0x4}, {0x4b564d01, 0x0, 0x439e}]}) 6.621649316s ago: executing program 0 (id=3015): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fc"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}}, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500033c5233fe00080001400000001708000240000000050900010073797a30000000000900020073797a32"], 0x80}}, 0x0) write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/clear_refs\x00', 0x1, 0x0) r7 = openat$cgroup_pressure(r1, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) modify_ldt$read(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xffe) close(r7) 5.984183412s ago: executing program 4 (id=3016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000480)={0x24, &(0x7f00000004c0)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="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", 0x0, 0x20048915, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)=""/220, 0xdc}], 0x1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r4 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000200)={0xc, @output={0x1000, 0x1, {0x0, 0x5}, 0xe3, 0x4}}) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd, 0x0, 0x0, 0x0, 0x2}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_enter(r5, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010000104000000004000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000000400198008d781f2f40004003a010000146c6176655f31000000000000000000"], 0x40}}, 0x0) socket$inet(0x2, 0x2, 0x73) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xa4}}, 0xd1) 3.898285948s ago: executing program 2 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b50712030000000000010902240001000000000904a774092100000001220500090581030000060000"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000640)={0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="200be9000000e90eff36e01ca5b8f18c7e3ee0036f6f434e4cdb8be2811217881473241a2240166967dbcead9d400ffa7f192cea4e726b4f8939d9fe5ee72d4a1676f1bbd5a5c318dba7d6aff28ce9e001892f152b706b1a357094f83ff68b5a598fbe5a3e6e7d07f29ff28b15ab445adc4ea9ab4f01cd5a934ca3a9e21af1f682eb104112b624046a10b276ef146d8227018575ff4c8a45645837661375bd3c02feb535b5540a9b814cecd737122212d692d1ac3c0a98b2e73926b27be145e2a91e24f85aff7537ded24916b8861b3b94ceaa8e00a9dcc4821eef3aaff17a16a5d2d5d51ecd"], &(0x7f0000000940)=ANY=[], &(0x7f0000000580)={0x0, 0x22, 0x1e, {[@global=@item_4={0x3, 0x1, 0x0, "adfd5f6d"}, @main=@item_4={0x3, 0x0, 0xc, "482c35e6"}, @global=@item_4={0x3, 0x1, 0x8, "b61cd1c8"}, @main=@item_4={0x3, 0x0, 0xa, "7bbe35dd"}, @global=@item_4={0x3, 0x1, 0x2, "a04f99d8"}, @local=@item_4={0x3, 0x2, 0x0, "246587fe"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x4, 0x1, {0x22, 0x2b5}}}}, &(0x7f0000000780)={0x18, &(0x7f0000000680)={0x0, 0x16, 0x2b, "e97faa1f3c647518ad70a92f978fda46a314ba1097a5682eb1f311a177068885ca817cdc1e6a5fa35c25b8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x1, 0xf0, "7e957ab095ab03f7b369061669edfd3feae465bed7b31f93b41bd1dceb257b8ce7af60c5ba03f19b77e3f2cec68293127afe64bed5888d2d15b030c99385056ceba94994c36c0ae6da05f8fdbde6c587baf7e97811aaa80cd8035a7fbdd5f88267cb807e2ebc873e5476ab937a9949c65cd1d7d9aeac33edbbde81c1d7e3fd44d60f1aa0dd41988a0d2c2b67e0b69452f492d5d60d7dd177b673e99294d41ca65f3707b418fd0160e826617731c112c2da9cd6e00cdf8d460999bd63af3dbb2d02c850a6aa14e94e414a70ec78fc780bbd4d5e1e2439ca82198f7fb3c1f439522b41af17efbac82edc51ae0fcf0a7fa0"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0x4c}}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x59}, 0x0}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000006c055080a115014cb62010203010902120001fe0000000904"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1b]}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a40)={&(0x7f0000000ac0)={0xa8, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "077729fbfdc05ef87a4c81fd11ea02a8"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ebb7f55b6c66"}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) write$sequencer(r9, &(0x7f0000000cc0)=ANY=[@ANYBLOB="94"], 0xffffffffffffff24) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000300)={0xc, &(0x7f0000000200)={0x20, 0x7, 0x88, {0x88, 0xf, "086647799284399edf86ff8da3b78f27547f7b17e95eefbf8a28da2e5ce46ac876683e89e9f92b1065f9551a2bf71a97b35f813be72cb881cbf0db45dc897d4eb13f22c2cc85503ac3f7d30808bce24536cb89f2ec4d5b7868cee48ab91420d0cb5be1dc95f5aa5f61b0287287e57da363a48ab2471b02ffff4653ee63d79aad0de04e1f9f0f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="200e0d00000076a00716e6c927d267119a16f0"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x80}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) preadv(r8, 0x0, 0x0, 0x8001, 0x4) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e04012840000102030147a32d0001014500040904000401030102e2092181000fde2112090905810320100200030905020342739c817f"], &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0xc, 0xff, 0x8, 0x7f}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0xc, 0x0, 0x6}]}, 0x3, [{0x58, &(0x7f00000000c0)=@string={0x58, 0x3, "f0e013505a6e9016dd009fb5b2eeaab59dc5615f742781eb935fc79fa3e4ccb07f3cb422ad23f013400970830c7be6915cd9bd216bcf88783d7b35769886d49a767830f4e3558c7f9256bf11cd3730fce03744e25468"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x0, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r12 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r12, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r12, &(0x7f0000000100)=""/90, 0x5a, 0x0, &(0x7f00000001c0)={0x77359400}) mq_timedsend(r12, 0x0, 0x0, 0x5, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) 2.6131363s ago: executing program 3 (id=3019): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0908000000000055090100c60000009500000000000000b7020000001200007b2af0ff00000000d609080008000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000056080000020000008500000007000480b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.543739853s ago: executing program 3 (id=3020): pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0xfecc) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0xb, "a2898405704bcf372c"}, @sack_perm={0x4, 0x2}, @mss={0x2, 0x4, 0x3ff}]}}}}}}}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000ec0)=@in4={0x21, 0x1, 0x2, 0xf, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x24) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x7fffffff, 0x20a00) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) 2.408976514s ago: executing program 3 (id=3021): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001200)=""/150, 0x96}], 0x1) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f00000014c0)={0xfffffffd, 0xffffffcb, 0x1c02, 0x2, 0x7f, "cc33101d3f0000002000"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) (async) r5 = syz_open_pts(r4, 0x42) r6 = dup3(r5, r4, 0x0) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002", 0x4d}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000340)="22030e00d3fc02001d00ab5d71acedd7c9560385dcb18906b617a93d85be479cbb382a6c3e9f90f5b60c0d7f4c5c2033891b7988b284d4cadc22d177bf0b", 0x3e, 0x0, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x5, 0x6, @link_local}, 0x14) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$KVM_GET_MSR_INDEX_LIST(r10, 0xc004ae02, &(0x7f0000000140)) (async) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x33524742, 0x7, 0xa, [{}, {0x0, 0x8}, {}, {0x80}], 0x0, 0x0, 0x0, 0x0, 0x1}}) 1.904107145s ago: executing program 3 (id=3022): mkdir(&(0x7f00000000c0)='./file0\x00', 0x110) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e900000000000000030006000000000002000000000000000000000000000000020001000000000000000316ff000020030005000000000016000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 1.798037423s ago: executing program 3 (id=3023): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000080)={0x1, 0x10, {0xffffffffffffffff}, {0xee01}, 0xe, 0x25f}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x42, 0x40, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) r3 = openat$vnet(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r6 = dup2(r5, r4) read$FUSE(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="24030080", @ANYRES16=r8, @ANYBLOB="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"/798], 0x324}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000340)={0x1, r6}) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f00000006c0)=""/106, 0x5c}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000002300)=""/4112, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0xfffffff5}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) 1.693825729s ago: executing program 4 (id=3024): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x20000400) r0 = syz_open_dev$admmidi(0x0, 0x20, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 1.676363784s ago: executing program 0 (id=3025): syz_open_dev$vim2m(0x0, 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0x0) ioctl$CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000000)={0x4, 0x40, 0x7, 0x3, 0x4, 0x9e, "a5f86d9b2530f39c2506c168b68a45bc", 0xf7, 0x78, 0xf6, 0x9, 0x0, 0x7, 0x16}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @param_prob={0x4, 0x1, 0x0, 0x66, {0xe, 0x6, "8e27de", 0x1, 0x87, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x28}, [], "682554f9706e0fb62d3c322c6c67d775ff15324b09c4318913f7b44eacb4ec41912d5c5166f71733079fe3d2229f409410afd35e089dbaebfaf8de63fdd689c89fde34542c7b9e1f461206d8cf949901024433d39b28021b4096e0ccb7951193c081c240ac157ac3ccf53d7b56a6b47abe6b08d2c2bf250c0f49ff274afe073e9b1e5f22679d7cd412831624156ab0fcadc8c0839ed087e10c52eea44444cae0db1644fd91fbf8691c49b617cd3dc1a48e318ace1c47295ae7a75bdb66ef5389619299c160163bfb6041558f05ce7579380ea2344134237ab60840e8ce5c9a97526a9643644d04625769c87c67c570dc37e3925e31d32f3841866d2fd5ea7fb55cbe023098fff945eee73234204641b624aa8842f9980e6f1e8b3df714b955b4253aedaee8e51f47298ee7b1672a114902bbe84079ca587ec278ac0bcdc30d5f7b204c338d635af8a46c8d09ab71f2f77a5a11465b80cb28092fa77b23d926672fc0c17686e769848cd03178261b254953bc0b6bda2156c327052d89033d7909320be4c2b9e3ea4d182b76e087232c909733e6b96f4fd3c2311694c2502d4d41b5068155250fbfa5af9353db872ae73a6e4fa98446b5526b717316aa751c3344defa459291ebac4bdc44ff5a13a15672b1b07e80ffbfc7e63eecc89861213aac10e9843a23a06fde4d616b833fd8e296d699a75c73e411a7aa04aece5834b1dbef3cecdea1f2748442f3f93e6967e34cdc4248918fa05d61263b97882eb381d16dc91302a8dce4e36375e3e4c707d6dd7b333cc4f1cc354d754c57cef9f0dca22a6d37e9da898c8db571000dbe894bae3772f9c829198b8427a5e560a7f7525b1dcf5382b46a37f9643c5b13e3fa4f267c610ccb3bb8717d7b411fde2d125db677af0d7163f1555d620bd7502943d189b80669ec5f73cfe446f68f73b610eccb6ecb8812340d6e19d438ef6456ea2f4f86e9da1d7d272b003b905f0b7198bda8bc308f559ac0781f60aeee6d502a97f1afe7cd0851b6f8bc95dc6b49581be0f29011d3e51d7b93da6a5510de03111ee775d06d230aaa817b303c05b0c80ab9beac1a9739586b4e2df0611b7b0c1ad93f0d7a0a0826ca4d5b2c9ece5f2dbdf144de7604a9a8ca9cbda27cca9c57a32cb9df0ffd5437cc579beca35eb141629e28481177a112f52e8db73ec9bf9369cd1486bdcb68bc09c1cd1423a0d6f83d3ea86d3aa291c7235f7a6c5ada06a6e9ad7706a6124d1ac2d95684a23370cc38af75616a10f4b15a009a0c63f286083e5b5f7260f0873cbb7017d60f16a51337a34daa0439f750ba6b7451d4003ae5a90867258012e393003678487cb4123e7c515e10485f6105e7abb7d16d08852796e21064c79c6a77f083a0258e38f2aaca33cafc93a986ec3c0410e70bbcf36d84ab772576ca4235f13ec5f0ff17600c5053d4eef6259233ca4f310f84178ddab045270d569fddeeaad7bfa1070b91983f5eb83a530c9cf4d216299f2bf8e201842fa3f45df6036870b1dba96b152bbe914f3ca2644920f4a6aaa4fc57279d8a23f875c2ef6eea85239dd991650c21f34445bd50739c6c5a318e04c10d62093edb8a1beab5cb3132248486b503e208b927bb1a4019a9ba2afea63dcb6886fb77a3162aa99d2f01c1e6a875e66331ec77e5e086cda949ca10c8492588d71cd42f5fe5dabfa3cd6310db3e93193635a832370525377902c64ecbfa9bb5a48f970d8da2cdc01d139b1a766427f8f14c3698844d59c07239005bcc4ee6abfcde61367b53ecd0668009fabb204a07767f7303594f1a43ae89ff4fa40a12fedf636d4a3ba0dabdc914a3b95ecb8bc16e8f8926975801589dac399e67ca386e90745cbb30310e9f085b5e52ec8eab060b7550fde176c0b4c743137ffc4a1b30ba4a193ddd79c40c0f8754ca7622dae10208f0a843e1a58f5928c656d3518e3aade1183bcd8452375b7cc237a78cbaa2906c8fc72f1f6991ee5f73fbcee227037fa03aace6e09a2a3d6ee187829a92e02a1ac75d16cc5f3c203f41f7ef745fb3af23c45644f96743981206d4d2965d4928ad14126d075214623594866f56aaedf43ddb91e0ae0bcc49c71c8928217e3de8145cd0bc020338d012c4f51a10718aeb785474f3e4bfbab1f975bbcbe424f5c1a2f198d9c9fdf10a5dd0c4652f721f07b1641d0bc1759a55911d00851c538fb2f2a1ea9c9ab1221d2b198a65159cf9caf4b72008a8bdc9f407232a2108efc6a7821e26effa2ea1498e489a57fc76b7c3fee3d4a9599c377e097905bdc23a1a481a566991b168bb32a2ba1e1aa7325ff88fe2a0ed6beffb2f3717712e93f295463f7a589a85bea543f770954dd12ce69a726e14f7d214c787f2c8e4aca98c9218ab5eccfb2283fe735e6387312796ea08c8a5eb568b8e4fab0bc56595c806c5c0d117099b024adae0056c3762d6576bab32ebf09d88f108e09368b80bf60baed0fdf6034cfbee257504f11b2f65ede7c3e38cffe7e7aba167d2d3ab9e8ff7d4bbd8f039557ab169037b0a3e05f06cfb1296d1507eb488a1be6d6eac02f949a954afe39c2331f8ef9d1ce0e8fa21d2f81f4aff2f8d695ace36b8458fef8c0e8d45008c3c6d62693002f562f07807b4eca509b89a7adccb9422528804bba203ec3636023c24c39c4ac07e591d10d0c01a7eb565920a6b6f32cfd55b18e9a568a0ef82b67af9eec38da768d57f3c6601820aa2fbaa89a824c601a24a5d24f9d7375beb704f8bb786db0b9b71c52ec8da46dc32e83b46c02f9386c828d9aa0c0899f2f870e9cdfb1be878726298b62303b3a6d90de48ded39a556a33c14c31d78e7d83bf91a0f071ae068548f369b32f98b4e0ba9dce4e7252c93568b74b5c24618018b41a2cb4624cce0a9c9c220fd43a7f8802e3433bcbe4a7b0950ddd4633a95a827a93e57d1c9ead753f4de02ade63ee62f41c34b2efd41b7b9a6080a795eba0d7b1abc3190a22be0fbae5fa06016fa059a7480212d1c1a2a78b02ed59cfd768e97a2926378ced5f2f316ee332dc10b9d9b540dfe9a5ef2dcde7edf3a635f730c20a0012cbb8e8d5de95fc12e869f3294a6a2be22b7b8b895cb92f7872b2ca90529c8eaa5b74a6e55493ca15a9ab09a363fc019a827ee04e584a02f8769e32261339b79edae7c623540e64281dc6b0128d4995d54bcf74a1f90e3902ca9b949f32032a8694c937d9dc7388ae6f0031359464ff1ec24cea1d330383ce027c51236add7a5ff67e6998af6debd9b4cac4ee0a777972d5a96cfd7a50e5e8b26c204790f89c9367d979e50e840b2b32bcee5c8941746c749daa97e3f0bffd40e5bb73bdc338ebe3a537345a9d5d66df760229e997b01a4dd320afdb4a74cef9735d1d2f6d4cafad396209635b6b61f4198100c5fe72046ec198c43619f19e77dd615ba8037773ff68afb0fbdc778000c5c7ebd0b4f2d6b8789c545a2784e4d3d14e43221e210218be7bbadf8bc0bff3b17d2b2bdc342c7704c6cc1de4df8445e86e7d1387be4dd4572af823ea1b000488361d8c7c5a6e55ce04c379158d0e8e97d5b83de4e934c174a9fb3f50f1ff62d2bc3eceecbbb508e13951fe7245d83be275ffeca95daa873ffda3c44f66704bb6da1441ee81e662ffb6c61b3cf88c9a3e59e475090449349430e41393ec5828fda68de86f417b77022ed418dfc04d02c12a620c2af274ee12a43fe0d75a731cd99aac2e5b91775e466e6c9d11d8b98b40f62addf3b4748c8a912b3c777c84a323f2d52012a0786b81e1129e6128a1959d74137b69e3ff20fd7f0e0373fa2c7cebbbc45fb4483a63d3741b5b5c5d1f15ec769fad7c881be0eb26ac1f40218ae63371a7fa7a1043e3ea511335e2691a8fdb1a669544f27ba95463f5fd7cd8125056924822646797f3c384f8d011edc1460bb8f8178c9f26173e93e3597528757881c1201269d714a04d0df6a45ec964b23d730ecb4d870729afc69de5b897ef733595e9ebee43e029778e55edd747dd0e8ddcfd5df98d5cde29130ac48f6506535a40e73e0aee4008a93629e25ca6a6e3bd8cd89102e5d644aedc0b47a17e3f4d4406cec70b39c4b1c83fd74374a56cef6dfcf579a8ab97f5b7df1dca88eb8d74502f009257769a2de9881b8c12503ee0c37b83ddbca61841d566ef96a99c5b6e73e9fd54ffd6689cdb9552feb3614b12286f799798903bdf9b07dea8a8b33c95280650276d96c5ef018b01f6840f1b0e4350a1053719bd7d45e3b46ea1445d3400dbe0551759614d42289a0fff1b5fffb1b23a5ba9e86700937470c54791ee870df789bd0a6347aea392fe0ade6a0c46b6d4f33e436bffc32bf7dd82750ebd263f589eeb0f7a0e0bf07be482c54cddc7e1a2b961aa3c2847446fb23008d74c55349b5969a857d32ae2ec9c20519de3ae29127edc273fafc4b294658ad45c1989afec4bb54cb7fec78e00ca7d8d79ba11c343e36824a5b0f4bf7c0426a9e4e113b9823ee40b8f0e87ac8dfa4ac31585bbce4494199690ab2e5eddabbf787a792c975153e31f381d2a70b98fcf66f69f2c88e5f6185764b48b310b762a59268e24acd48dd5391ffe724e07a4e071524e7d9b52e453ebe21350803cb7796308a24ef11870b3b5af853f5e6882259752d9eaa824475a49067a5ebc402c0e0a2b884bbb8611fe93d44c3a74aedfcd2266b7dafdad94f635164432d55fa23e2c69504fc85ecf7d4e874fda244f3dbfeb8f8e8840a5fdd3ed7b13626fe679616ae79d346a29d51dd9422febcc4d4fc41dca2d481e2cb2e5f8de7f11bec6461158d706757f4924d8a33beffcc2a948c444491e46fcbea7994c43e1ae9e1bf683157cecffa7ad2fd1ac14cf38730559db6e86e37ef0b6d03861585d379ab75279afd968effca572aef7e6a9546488b008562f5e36b97ff266d8f58ccbf67bf1213da633d32357bcf1421c268cbb184eeacfc615ec21a25e3670c105b6515bd22dcbfed69eac9bf54bda86000ce8abc8d9d991f975ba74e63d69ddf16aa63e0f2bb1e2b15dd4a5894720a1a345e40f4eef6f453db0ab352dba9ecfb3e732435788806f0befe15dd5029d0b0555bdd746264d476793907953f686fbf495cde8bdef0448c39f6430fb052d4ec8658af9f6787cbae75ef6a4857f063042c3604d1297660c513b3f97e9cd59407d22a4acd1247b552dbd4a62877844a2ff0bf4902bcdd3017f4daf9b99b7135a5fd21a72aebbcff334de92611eda1dc45c13a8254562b2badc180a5a1088903483302436e7a407937791f26b7199eea7ab5bf8ca0394546fb8fe1305353f1ec7cd0accc0f98e9af7b8072716bfd1a70300d5f8bf3ee8cfb0d9df7e608659b58f48b2344ba6a54341aa94d340b59bdc75b45eda846b314452ce90c71e68057576f8621435fd7612511f4a33dabdd0abd52ce4516a399815ed79ea95390a56ca8d41f1fee733c8eaceec9732c5a1b0e4b05b95827540b93eff8668bc112d19a60c3b530e400e4531de337bb3bb8b441ba7ad74a5b707f094050692e518931953427ac772300a350e1dd74ed8d49e1ee39d7342724"}}}}}}, 0xfce) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$nvram(0xffffff9c, &(0x7f00000001c0), 0x80400, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)=@setlink={0x140, 0x13, 0x30, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x288, 0x20088}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x947c}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x10}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}, @IFLA_MTU={0x8, 0x4, 0x26f}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_VF_PORTS={0xe4, 0x18, 0x0, 0x1, [{0x4}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x24}, @IFLA_PORT_PROFILE={0x8, 0x2, 'sfq\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '@\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '-$\xa1$\x00'}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0xffff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "aa554db350b735d0795316a8e0935549"}, @IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e32909408c6eeecd834ff246dbecf2f0"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xef}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6b7af7c57346a7f4d47518a2c55e2446"}, @IFLA_PORT_VF={0x8, 0x1, 0x3ff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "eaac10adc782b032a2207bdf806e7aa9"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_PROFILE={0xa, 0x2, 'basic\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x21b8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) madvise(&(0x7f0000900000/0xa000)=nil, 0xa000, 0x17) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 1.369064992s ago: executing program 4 (id=3026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf6, 0x9}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000240)=0x6, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=3027): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000140)={[{}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r7, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0xdb, 0xc}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x46, 0xcf, 0x10, 0x4dd, 0x8002, 0xfcb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x2, 0x1}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7442ff8f99b8233b0100145274da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x20000080) kernel console output (not intermixed with test programs): 0][ T6666] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 909.241142][ T6666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=32 [ 909.262592][T15239] bridge0: entered allmulticast mode [ 909.273371][ T6666] usb 3-1: Product: syz [ 909.297208][ T6666] usb 3-1: Manufacturer: syz [ 909.301919][ T6666] usb 3-1: SerialNumber: syz [ 909.328246][ T6666] usb 3-1: config 0 descriptor?? [ 909.396047][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2614'. [ 909.542206][T15226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.571343][T15226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.587224][ T6666] usb-storage 3-1:0.0: USB Mass Storage device detected [ 909.804606][T15226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2609'. [ 909.819067][T15226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 909.925267][T15233] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2611'. [ 909.947300][ T6666] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 910.067696][T15238] delete_channel: no stack [ 910.087658][ T6666] usb 5-1: device descriptor read/64, error -71 [ 910.322126][T15261] tipc: Enabled bearer , priority 0 [ 910.333859][T15261] syzkaller0: entered promiscuous mode [ 910.346017][T15261] syzkaller0: entered allmulticast mode [ 910.351643][ T6666] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 910.375372][T15265] netlink: 'syz.0.2622': attribute type 5 has an invalid length. [ 910.423364][T15261] tipc: Resetting bearer [ 910.443023][T15259] tipc: Resetting bearer [ 910.482972][ T6666] usb 5-1: device descriptor read/64, error -71 [ 910.483880][T15259] tipc: Disabling bearer [ 910.541339][ T6676] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 910.600183][ T6666] usb usb5-port1: attempt power cycle [ 910.737913][ T6676] usb 4-1: Using ep0 maxpacket: 8 [ 910.753102][ T6676] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 910.773871][ T6676] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 910.788115][ T6676] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 910.800006][T15281] tipc: Enabled bearer , priority 0 [ 910.806958][ T6676] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 910.811652][T15281] syzkaller0: entered promiscuous mode [ 910.826240][T15281] syzkaller0: entered allmulticast mode [ 910.845047][ T6676] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 910.855757][T15281] tipc: Resetting bearer [ 910.865551][ T6676] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 910.885420][T15280] tipc: Resetting bearer [ 910.887658][ T6676] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 911.020498][ T6676] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 911.027404][ T6666] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 911.042110][ T6676] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 911.077927][ T6666] usb 5-1: device descriptor read/8, error -71 [ 911.130509][T15280] tipc: Disabling bearer [ 911.162065][ T6676] usb 4-1: string descriptor 0 read error: -22 [ 911.172948][ T6676] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 911.203152][ T6676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.233236][ T6676] adutux 4-1:168.0: interrupt endpoints not found [ 911.327481][ T6666] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 911.349908][ T6666] usb 5-1: device descriptor read/8, error -71 [ 911.417586][T13436] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 911.445628][ T6676] usb 4-1: USB disconnect, device number 109 [ 911.462783][ T6666] usb usb5-port1: unable to enumerate USB device [ 911.694748][T13436] usb 6-1: Using ep0 maxpacket: 16 [ 911.783099][ T6666] usb 3-1: USB disconnect, device number 112 [ 911.867258][T13436] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.892062][T13436] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 911.915172][T13436] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 911.925320][T13436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.935533][T13436] usb 6-1: Product: syz [ 911.941991][T13436] usb 6-1: Manufacturer: syz [ 911.949885][T13436] usb 6-1: SerialNumber: syz [ 911.956986][T13436] usb 6-1: config 0 descriptor?? [ 912.002962][T15293] loop4: detected capacity change from 0 to 7 [ 912.027968][T15293] Dev loop4: unable to read RDB block 7 [ 912.034761][T15293] loop4: unable to read partition table [ 912.070064][T15291] vivid-000: ================= START STATUS ================= [ 912.081873][T15291] vivid-000: Test Pattern: 75% Colorbar [ 912.090467][T15291] vivid-000: Fill Percentage of Frame: 100 [ 912.097438][T15291] vivid-000: Horizontal Movement: Move Left Slow [ 912.107263][T15291] vivid-000: Vertical Movement: No Movement [ 912.114325][T15291] vivid-000: OSD Text Mode: All [ 912.138018][T15291] vivid-000: Show Border: false [ 912.144719][T15291] vivid-000: Show Square: false [ 912.151964][T15291] vivid-000: Sensor Flipped Horizontally: false [ 912.158590][T15291] vivid-000: Sensor Flipped Vertically: false [ 912.178191][T15291] vivid-000: Insert SAV Code in Image: false [ 912.186237][T15291] vivid-000: Insert EAV Code in Image: false [ 912.194705][T15291] vivid-000: Insert Video Guard Band: false [ 912.202022][T15291] vivid-000: Reduced Framerate: false [ 912.212270][T15291] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 912.221566][T15291] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 912.232636][T15291] vivid-000: Enable Capture Cropping: true grabbed [ 912.242137][T15291] vivid-000: Enable Capture Composing: true grabbed [ 912.251273][T15291] vivid-000: Enable Capture Scaler: true grabbed [ 912.262717][T15291] vivid-000: Timestamp Source: End of Frame [ 912.269702][T15291] vivid-000: Colorspace: Rec. 709 [ 912.276497][T15291] vivid-000: Transfer Function: Default [ 912.282779][T15291] vivid-000: Y'CbCr Encoding: Default [ 912.290865][T15291] vivid-000: HSV Encoding: Hue 0-179 [ 912.297759][T15291] vivid-000: Quantization: Default [ 912.305783][T15291] vivid-000: Apply Alpha To Red Only: false [ 912.314124][T15291] vivid-000: Standard Aspect Ratio: 4x3 [ 912.322425][T15291] vivid-000: DV Timings Signal Mode: Current DV Timings [ 912.331765][T15291] vivid-000: DV Timings: 640x480p59 inactive [ 912.341502][T15291] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 912.350877][T15291] vivid-000: Maximum EDID Blocks: 2 [ 912.358834][T15291] vivid-000: Limited RGB Range (16-235): true [ 912.366521][T15291] vivid-000: Rx RGB Quantization Range: Automatic [ 912.373210][T15291] vivid-000: Power Present: 0x00000001 [ 912.379564][T15291] tpg source WxH: 1280x720 (R'G'B) [ 912.386488][T15291] tpg field: 1 [ 912.390909][T15291] tpg crop: (1264,0)/16x64 [ 912.396366][T15291] tpg compose: (0,0)/16x16 [ 912.404237][T15291] tpg colorspace: 3 [ 912.410156][T15291] tpg transfer function: 0/1 [ 912.417355][T15291] tpg quantization: 0/1 [ 912.421932][T15291] tpg RGB range: 0/1 [ 912.427298][T15291] vivid-000: ================== END STATUS ================== [ 912.447865][T15293] loop4: partition table beyond EOD, truncated [ 912.499663][T15293] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 913.584619][T15313] tipc: Enabled bearer , priority 0 [ 913.593562][T15310] syzkaller0: entered promiscuous mode [ 913.602965][T15310] syzkaller0: entered allmulticast mode [ 913.763347][T15313] tipc: Resetting bearer [ 913.873742][T15307] tipc: Resetting bearer [ 913.987423][T15307] tipc: Disabling bearer [ 914.050674][T13436] usb 6-1: USB disconnect, device number 86 [ 914.826280][T15327] loop4: detected capacity change from 0 to 7 [ 914.843266][T12365] Dev loop4: unable to read RDB block 7 [ 914.852342][T12365] loop4: unable to read partition table [ 914.867553][T12365] loop4: partition table beyond EOD, truncated [ 914.891372][ T6666] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 914.902840][T15327] Dev loop4: unable to read RDB block 7 [ 914.916527][T15327] loop4: unable to read partition table [ 914.922428][T15327] loop4: partition table beyond EOD, truncated [ 914.937261][T13436] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 914.948510][T15327] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 915.047496][ T6666] usb 1-1: Using ep0 maxpacket: 8 [ 915.065985][ T6666] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 915.086226][ T6666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.117538][ T6666] usb 1-1: config 0 descriptor?? [ 915.117931][T13436] usb 3-1: Using ep0 maxpacket: 8 [ 915.163206][T13436] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 915.174112][T13436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 915.209303][T13436] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.224671][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2644'. [ 915.248476][T15330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2644'. [ 915.264096][T13436] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 915.277362][T15330] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2644'. [ 915.286521][T13436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 915.317273][T15330] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2644'. [ 915.329394][T13436] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.407410][T13436] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 915.423155][T13436] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 915.464172][T13436] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 915.513134][T13436] usb 3-1: string descriptor 0 read error: -22 [ 915.521795][T13436] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 915.560385][T13436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.593371][T13436] adutux 3-1:168.0: interrupt endpoints not found [ 915.740893][ T6666] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 915.774058][ T6666] asix 1-1:0.0: probe with driver asix failed with error -61 [ 915.801564][T13436] usb 3-1: USB disconnect, device number 113 [ 916.267472][T13436] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 916.424240][T15344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2648'. [ 916.444717][T13436] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 916.467271][T13436] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.505624][T13436] usb 6-1: config 0 descriptor?? [ 916.549190][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2648'. [ 916.748079][T15339] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2647'. [ 916.823472][T13436] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 916.846078][T13436] [drm:udl_init] *ERROR* Selecting channel failed [ 916.895346][T13436] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 916.926343][T13436] [drm] Initialized udl on minor 2 [ 916.935186][T13436] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 916.965641][T13436] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 917.020306][ T6676] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 917.078545][T13436] usb 6-1: USB disconnect, device number 87 [ 917.091216][ T6676] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 917.396573][ T6667] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 917.560028][ T6667] usb 4-1: Using ep0 maxpacket: 8 [ 917.567090][ T6667] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 917.575421][ T6667] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 917.610061][ T6667] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.637179][ T6667] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 917.657791][ T6667] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 917.701882][ T6667] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 917.721607][ T6667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.791643][ T6667] usbtmc 4-1:16.0: bulk endpoints not found [ 918.579244][T15372] openvswitch: netlink: ct_state flags 7fffffff unsupported [ 918.618945][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2654'. [ 918.652401][T15378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 919.143096][ T6676] usb 1-1: USB disconnect, device number 5 [ 919.627275][ T6676] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 919.677280][ T5930] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 919.787348][ T6676] usb 1-1: Using ep0 maxpacket: 8 [ 919.801906][ T6676] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 919.815918][ T6676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 919.835503][ T6676] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.887227][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 919.895224][ T6676] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 919.926109][ T6676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 919.946026][ T5930] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 919.956141][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.967287][ T6676] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.983765][ T5930] usb 5-1: Product: syz [ 919.988796][ T5930] usb 5-1: Manufacturer: syz [ 920.015091][ T5930] usb 5-1: SerialNumber: syz [ 920.022930][ T6676] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 920.038099][ T5930] usb 5-1: config 0 descriptor?? [ 920.051412][ T6676] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 920.081677][ T5930] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 920.101504][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2662'. [ 920.121041][ T6676] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 920.282382][ T6676] usb 1-1: string descriptor 0 read error: -22 [ 920.291627][ T5930] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 920.300658][ T6676] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 920.313029][ T5930] visor 5-1:0.0: probe with driver visor failed with error -5 [ 920.321272][ T6676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.364769][ T6676] adutux 1-1:168.0: interrupt endpoints not found [ 920.456007][ T6676] usb 4-1: USB disconnect, device number 110 [ 920.947949][ T6666] usb 5-1: USB disconnect, device number 127 [ 920.979262][ T6667] usb 1-1: USB disconnect, device number 6 [ 921.747882][T15415] fuse: Unknown parameter 'gª¢rotp_„­HH6§\ÛÉä [ 921.747882][T15415] BNÇŸ  gˆ¹ðÔÑ?rsØeƒîÑêPõeÊ*Qÿwm´•àœ#)XJXçU[úŸ.ÿûÐñdÂ"GÍR3*z`û˜0' [ 922.032755][T15418] __nla_validate_parse: 1 callbacks suppressed [ 922.032775][T15418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2666'. [ 922.120769][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2666'. [ 923.990013][T15438] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2669'. [ 924.483176][T15443] tipc: Enabled bearer , priority 0 [ 924.594420][T15449] syzkaller0: entered promiscuous mode [ 924.611934][T15449] syzkaller0: entered allmulticast mode [ 924.925604][T15443] tipc: Resetting bearer [ 924.997087][T15452] fuse: Bad value for 'fd' [ 925.025308][T15441] tipc: Resetting bearer [ 925.347298][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 925.360687][T15441] tipc: Disabling bearer [ 925.588670][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 925.618652][ T5930] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 925.680200][ T5930] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 925.736222][ T5930] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.800606][ T5930] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 925.817410][ T5930] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 925.837730][ T5930] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.858093][ T5930] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 925.869975][ T5930] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 925.891761][ T5930] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 926.107030][ T5930] usb 5-1: string descriptor 0 read error: -22 [ 926.113753][ T5930] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 926.141871][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.198362][T15472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 926.226542][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'. [ 926.353600][ T5930] adutux 5-1:168.0: interrupt endpoints not found [ 926.550288][T15477] vti0: entered promiscuous mode [ 926.563419][T15477] vti0: entered allmulticast mode [ 926.944764][ T5930] usb 5-1: USB disconnect, device number 2 [ 927.537945][T15485] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 927.783170][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2684'. [ 927.829788][T15503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2684'. [ 928.541116][T15510] tipc: Enabled bearer , priority 0 [ 928.563976][T15510] syzkaller0: entered promiscuous mode [ 928.590217][T15510] syzkaller0: entered allmulticast mode [ 928.607673][T15510] tipc: Resetting bearer [ 928.625723][T15507] tipc: Resetting bearer [ 928.656675][T15507] tipc: Disabling bearer [ 930.897313][T13436] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 931.047347][T13436] usb 1-1: Using ep0 maxpacket: 32 [ 931.065961][T13436] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 931.085254][T13436] usb 1-1: config 0 has no interface number 0 [ 931.095418][T13436] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 931.125604][T13436] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 931.141056][ T5930] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 931.167462][T13436] usb 1-1: config 0 interface 54 has no altsetting 0 [ 931.180205][T13436] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 931.190428][T13436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.206519][T13436] usb 1-1: Product: syz [ 931.216653][T13436] usb 1-1: Manufacturer: syz [ 931.227882][T13436] usb 1-1: SerialNumber: syz [ 931.240173][T13436] usb 1-1: config 0 descriptor?? [ 931.256214][T15531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 931.264588][T15531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 931.307229][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 931.315083][T15527] input: syz1 as /devices/virtual/input/input53 [ 931.335818][ T5930] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 931.367382][ T5930] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 931.401481][ T5930] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.442563][ T5930] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 931.474433][ T5930] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 931.490389][T15531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.517248][ T5930] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.519067][T15531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.559689][ T5930] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 931.579901][T13436] ums_eneub6250 1-1:0.54: USB Mass Storage device detected [ 931.597265][ T5930] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 931.616953][ T5930] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 931.652094][T13436] scsi host1: usb-storage 1-1:0.54 [ 931.663638][ T5930] usb 3-1: string descriptor 0 read error: -22 [ 931.679891][ T5930] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 931.705370][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.712537][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.722902][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.790495][ T5930] adutux 3-1:168.0: interrupt endpoints not found [ 931.820369][T13436] ums_eneub6250 1-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 931.864295][T13436] usb 1-1: USB disconnect, device number 7 [ 931.994905][T13435] usb 3-1: USB disconnect, device number 114 [ 932.138383][ T6676] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 932.299036][ T6676] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 932.317529][ T6676] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.357425][ T6676] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.380494][ T6676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.417364][T13436] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 932.590319][T13436] usb 1-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 932.622373][ T6676] usb 6-1: usb_control_msg returned -32 [ 932.648766][ T6676] usbtmc 6-1:16.0: can't read capabilities [ 932.664882][T13436] usb 1-1: config 0 interface 0 has no altsetting 0 [ 932.732333][T13436] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 932.786295][T13436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.817377][T13435] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 932.843668][T13436] usb 1-1: config 0 descriptor?? [ 933.011129][T13435] usb 4-1: Using ep0 maxpacket: 16 [ 933.021761][T13435] usb 4-1: config 128 has an invalid interface number: 31 but max is 3 [ 933.032292][T13435] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 933.050272][T13435] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 933.071662][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.135612][T13435] usb 4-1: config 128 has no interface number 0 [ 933.152131][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.173184][T13435] usb 4-1: config 128 interface 31 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 933.187948][T13435] usb 4-1: config 128 interface 31 altsetting 8 has an endpoint descriptor with address 0x4E, changing to 0xE [ 933.200941][T13435] usb 4-1: config 128 interface 31 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 933.218211][T13435] usb 4-1: config 128 interface 31 has no altsetting 0 [ 933.229701][T13435] usb 4-1: New USB device found, idVendor=3537, idProduct=dbd2, bcdDevice=7f.af [ 933.269788][T13435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.288855][T13435] usb 4-1: Product: â°‰ [ 933.293247][T13435] usb 4-1: Manufacturer: á ‰ [ 933.306716][T13435] usb 4-1: SerialNumber: syz [ 933.454929][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.466370][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.610169][T13436] usbhid 1-1:0.0: can't add hid device: -71 [ 933.626337][T13436] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 933.644192][T13436] usb 1-1: USB disconnect, device number 8 [ 933.674157][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 933.697781][ T6667] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 933.725325][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2708'. [ 933.816294][T13435] usb 4-1: USB disconnect, device number 111 [ 933.877460][ T6667] usb 5-1: Using ep0 maxpacket: 8 [ 933.888049][ T6667] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 933.896355][ T6667] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 933.912185][ T6667] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 933.924308][ T6667] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 933.940310][ T6667] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 933.957918][ T6667] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 933.970953][ T6667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.055379][ T6667] usbtmc 5-1:16.0: bulk endpoints not found [ 934.757246][T13436] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 934.909864][T13436] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 935.083612][T13436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.095110][T13435] usb 6-1: USB disconnect, device number 88 [ 935.296190][T13436] usb 1-1: config 0 descriptor?? [ 935.341465][T13436] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 935.744211][T13436] cpia1 1-1:0.0: unexpected state after lo power cmd: f8 [ 935.774488][T15604] fuse: Unknown parameter 'gª¢rotp_„­HH6§\ÛÉä [ 935.774488][T15604] BNÇŸ  gˆ¹ðÔÑ?rsØeƒîÑêPõeÊ*Qÿwm´•àœ#)XJXçU[úŸ.ÿûÐñdÂ"GÍR3*z`û˜0' [ 936.003385][T15580] !€ÿ: renamed from bond_slave_0 [ 936.034002][T13436] gspca_cpia1: usb_control_msg 01, error -71 [ 936.062591][T13436] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 936.099899][T13436] usb 1-1: USB disconnect, device number 9 [ 936.425115][ T30] audit: type=1326 audit(1754949662.789:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 936.650533][ T6667] usb 5-1: USB disconnect, device number 3 [ 936.676000][ T30] audit: type=1326 audit(1754949662.789:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 936.765444][ T30] audit: type=1326 audit(1754949662.979:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=384 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 936.829919][ T30] audit: type=1326 audit(1754949662.979:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 936.903975][ T30] audit: type=1326 audit(1754949662.979:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 936.931126][ T30] audit: type=1326 audit(1754949662.999:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 937.235225][ T30] audit: type=1326 audit(1754949662.999:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 937.363253][ T30] audit: type=1326 audit(1754949662.999:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15609 comm="syz.2.2718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 937.557388][ T6667] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 937.739064][ T6667] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 937.766225][ T6667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.821993][ T6667] usb 3-1: config 0 descriptor?? [ 937.861048][ T6667] gspca_main: spca508-2.14.0 probing 8086:0110 [ 938.073012][ T6667] gspca_spca508: reg_read err -32 [ 938.084234][ T6667] gspca_spca508: reg_read err -32 [ 938.091963][ T6667] gspca_spca508: reg_read err -32 [ 938.315814][ T6667] gspca_spca508: reg_read err -71 [ 938.325415][ T6667] gspca_spca508: reg write: error -71 [ 938.332700][ T6667] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 938.477523][ T6667] usb 3-1: USB disconnect, device number 115 [ 938.507280][T13436] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 938.713510][T13436] usb 4-1: config 0 has no interfaces? [ 938.768166][T13436] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 938.781656][T13436] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.790732][T13436] usb 4-1: Product: syz [ 938.794917][T13436] usb 4-1: Manufacturer: syz [ 938.808972][T13436] usb 4-1: SerialNumber: syz [ 938.834753][T13436] usb 4-1: config 0 descriptor?? [ 939.336533][ T6667] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 939.434030][ T5988] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 939.453147][T15651] netlink: 'syz.0.2732': attribute type 1 has an invalid length. [ 939.534212][ T6667] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 939.544763][ T6667] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 939.561825][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2727'. [ 939.603233][ T6667] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 939.618028][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 939.623311][ T6667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.644278][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2727'. [ 939.654119][ T6667] usb 5-1: Product: syz [ 939.654143][ T6667] usb 5-1: Manufacturer: syz [ 939.663826][ T6667] usb 5-1: SerialNumber: syz [ 939.671727][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 939.686570][ T6667] usb 5-1: config 0 descriptor?? [ 939.692289][T15641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 939.791635][T15651] bond5: entered promiscuous mode [ 939.803798][T15641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 939.812937][T15651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 939.824796][ T5988] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 939.896180][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.952503][T15652] 8021q: adding VLAN 0 to HW filter on device bond5 [ 939.960510][T15652] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 939.979290][T15652] bond5: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 939.998092][T15652] bond5: (slave vxcan1): making interface the new active one [ 940.005629][T15652] vxcan1: entered promiscuous mode [ 940.013408][T15652] bond5: (slave vxcan1): Enslaving as an active interface with an up link [ 940.117585][T15641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 940.120058][ T5988] usb 3-1: config 0 descriptor?? [ 940.141893][ T5988] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 940.147349][T15641] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 940.393515][T15661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.403614][T15661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.456204][ T5217] bcm5974 3-1:0.0: could not read from device [ 940.549654][T15645] bcm5974 3-1:0.0: could not read from device [ 940.564244][ T5217] bcm5974 3-1:0.0: could not read from device [ 940.569395][ T5988] usb 3-1: USB disconnect, device number 116 [ 940.592304][ T5217] bcm5974 3-1:0.0: could not read from device [ 940.609256][ T5217] bcm5974 3-1:0.0: could not read from device [ 940.616268][ T5217] bcm5974 3-1:0.0: could not read from device [ 940.695870][T12473] bcm5974 3-1:0.0: could not read from device [ 940.752183][ T6667] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 940.854480][T13436] usb 4-1: USB disconnect, device number 112 [ 940.953095][ T6667] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 941.016744][ T6667] usb 5-1: USB disconnect, device number 4 [ 941.227237][T13435] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 941.404352][T13435] usb 1-1: Using ep0 maxpacket: 16 [ 941.441031][T13435] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 941.452737][T13435] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 941.482678][T13435] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 941.498278][T13435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.507826][T15673] loop4: detected capacity change from 0 to 7 [ 941.542294][T13435] usb 1-1: Product: syz [ 941.549584][T15673] Dev loop4: unable to read RDB block 7 [ 941.555851][T13435] usb 1-1: Manufacturer: syz [ 941.564590][T15673] loop4: unable to read partition table [ 941.571932][T13435] usb 1-1: SerialNumber: syz [ 941.574999][T15675] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2738'. [ 941.582367][T15673] loop4: partition table beyond EOD, truncated [ 941.604921][T15673] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 941.828662][T13435] usb 1-1: 0:2 : does not exist [ 941.867951][T13435] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 941.927403][T13436] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 941.959637][T13435] usb 1-1: USB disconnect, device number 10 [ 942.072023][T12365] udevd[12365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 942.117250][T13436] usb 5-1: Using ep0 maxpacket: 8 [ 942.137452][T13436] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 942.145150][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 942.187972][T13436] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.228671][T13436] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 942.250436][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 942.266619][T13436] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.291370][T13436] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 942.300248][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 942.322520][T13436] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 942.372733][T13436] usb 5-1: string descriptor 0 read error: -22 [ 942.388370][T13436] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 942.417333][T13436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.437970][T13436] adutux 5-1:168.0: interrupt endpoints not found [ 942.451711][T15697] tipc: Enabled bearer , priority 0 [ 942.477816][T15697] syzkaller0: entered promiscuous mode [ 942.483361][T15697] syzkaller0: entered allmulticast mode [ 942.548349][T15697] tipc: Resetting bearer [ 942.562863][T15696] tipc: Resetting bearer [ 942.594984][T12948] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 942.611853][T15696] tipc: Disabling bearer [ 942.645752][T13435] usb 5-1: USB disconnect, device number 5 [ 942.727219][T12948] usb 6-1: device descriptor read/64, error -71 [ 942.757449][T13436] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 942.927884][T13436] usb 1-1: Using ep0 maxpacket: 8 [ 942.935326][T13436] usb 1-1: config 162 has an invalid interface number: 97 but max is 0 [ 942.949207][T13436] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 942.960670][T13436] usb 1-1: config 162 has no interface number 0 [ 942.967737][T12948] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 942.977297][T13436] usb 1-1: too many endpoints for config 162 interface 97 altsetting 3: 255, using maximum allowed: 30 [ 942.989153][ T6676] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 943.002107][T13436] usb 1-1: config 162 interface 97 altsetting 3 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 943.015412][T13436] usb 1-1: config 162 interface 97 altsetting 3 endpoint 0x85 has invalid wMaxPacketSize 0 [ 943.023443][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 943.026257][T13436] usb 1-1: config 162 interface 97 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 943.056361][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2748'. [ 943.108745][T13436] usb 1-1: config 162 interface 97 has no altsetting 0 [ 943.123167][T13436] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 943.133254][T13436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.141960][T13436] usb 1-1: Product: syz [ 943.146309][T13436] usb 1-1: Manufacturer: syz [ 943.153581][T13436] usb 1-1: SerialNumber: syz [ 943.167392][T12948] usb 6-1: device descriptor read/64, error -71 [ 943.187229][ T6676] usb 3-1: Using ep0 maxpacket: 32 [ 943.194599][ T6676] usb 3-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 943.205650][ T6676] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 943.219162][ T6676] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 943.228311][ T6676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.240449][ T6676] usb 3-1: config 0 descriptor?? [ 943.251397][ T6676] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 943.292812][T12948] usb usb6-port1: attempt power cycle [ 943.381655][T13436] metro_usb 1-1:162.97: interrupt-out endpoint missing [ 943.412990][T13436] usb 1-1: USB disconnect, device number 11 [ 943.637295][T12948] usb 6-1: new full-speed USB device number 91 using dummy_hcd [ 943.734556][T12948] usb 6-1: device descriptor read/8, error -71 [ 943.986676][T12948] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 944.013534][T15715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2751'. [ 944.028154][T12948] usb 6-1: device descriptor read/8, error -71 [ 944.137814][T12948] usb usb6-port1: unable to enumerate USB device [ 945.037555][ T43] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 945.163749][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2762'. [ 945.177402][T13436] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 945.197289][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 945.204613][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 945.214482][ T43] usb 4-1: config 7 has an invalid interface number: 132 but max is 0 [ 945.223885][ T43] usb 4-1: config 7 has no interface number 0 [ 945.230876][ T43] usb 4-1: config 7 interface 132 altsetting 6 endpoint 0x4 has invalid maxpacket 1531, setting to 64 [ 945.242959][ T43] usb 4-1: config 7 interface 132 has no altsetting 0 [ 945.252758][ T43] usb 4-1: New USB device found, idVendor=083a, idProduct=4506, bcdDevice=eb.9b [ 945.262264][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.270372][ T43] usb 4-1: Product: syz [ 945.274555][ T43] usb 4-1: Manufacturer: syz [ 945.279240][ T43] usb 4-1: SerialNumber: syz [ 945.316629][T13436] usb 1-1: device descriptor read/64, error -71 [ 945.553571][T15754] netlink: 'syz.5.2764': attribute type 2 has an invalid length. [ 945.578450][ T43] usb 4-1: Could not find all expected endpoints [ 945.587529][T13436] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 945.593701][ T43] usb 4-1: USB disconnect, device number 113 [ 945.727328][T13436] usb 1-1: device descriptor read/64, error -71 [ 945.751179][ T6676] usb 3-1: USB disconnect, device number 117 [ 945.847936][T13436] usb usb1-port1: attempt power cycle [ 945.867298][ T6667] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 946.031493][ T6667] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 946.052756][ T6667] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.062552][ T6667] usb 6-1: Product: syz [ 946.126252][ T6667] usb 6-1: Manufacturer: syz [ 946.140842][ T6667] usb 6-1: SerialNumber: syz [ 946.197386][T13436] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 946.208680][ T6667] usb 6-1: config 0 descriptor?? [ 946.219089][T13436] usb 1-1: device descriptor read/8, error -71 [ 946.251241][T15763] fuse: blksize only supported for fuseblk [ 946.275411][ T5868] Bluetooth: hci3: urb ffff888142b92800 submission failed (2) [ 946.464644][T13436] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 946.498776][ T6667] usb 6-1: USB disconnect, device number 93 [ 946.529549][T13436] usb 1-1: device descriptor read/8, error -71 [ 946.641148][T13436] usb usb1-port1: unable to enumerate USB device [ 946.858295][T15772] batadv_slave_1: entered promiscuous mode [ 946.914614][T15772] batadv_slave_1: left promiscuous mode [ 947.989247][ T6667] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 948.275374][ T6667] usb 3-1: device descriptor read/64, error -71 [ 948.422249][T15796] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2776'. [ 948.529204][ T6667] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 948.715982][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2776'. [ 948.767182][ T6667] usb 3-1: device descriptor read/64, error -71 [ 948.870101][ T43] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 948.900777][ T6667] usb usb3-port1: attempt power cycle [ 949.029755][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 949.039817][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 949.083553][ T43] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 949.158370][ T43] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 949.198319][ T43] usb 1-1: language id specifier not provided by device, defaulting to English [ 949.239938][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 949.266046][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.277195][ T6667] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 949.296585][ T6666] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 949.330580][ T43] usb 1-1: Product: syz [ 949.342665][ T43] usb 1-1: SerialNumber: syz [ 949.356911][ T6667] usb 3-1: device descriptor read/8, error -71 [ 949.481133][ T6666] usb 5-1: config 5 has an invalid interface number: 159 but max is 1 [ 949.522696][ T6666] usb 5-1: config 5 has no interface number 1 [ 949.543017][ T6666] usb 5-1: config 5 interface 159 has no altsetting 0 [ 949.572412][T15808] tipc: Enabled bearer , priority 0 [ 949.588789][ T43] cdc_ncm 1-1:1.0: bind() failure [ 949.604259][ T6666] usb 5-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice=6b.64 [ 949.614273][ T6667] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 949.631845][ T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 949.632350][T15808] syzkaller0: entered promiscuous mode [ 949.642444][ T6666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.658030][ T43] cdc_ncm 1-1:1.1: bind() failure [ 949.665508][T15808] syzkaller0: entered allmulticast mode [ 949.671478][ T6666] usb 5-1: Product: syz [ 949.671504][ T6666] usb 5-1: Manufacturer: syz [ 949.671523][ T6666] usb 5-1: SerialNumber: syz [ 949.677962][ T6667] usb 3-1: device descriptor read/8, error -71 [ 949.697215][ T43] usb 1-1: USB disconnect, device number 16 [ 949.838979][ T6667] usb usb3-port1: unable to enumerate USB device [ 949.878367][T15808] tipc: Resetting bearer [ 949.893961][T15807] tipc: Resetting bearer [ 949.914254][T15807] tipc: Disabling bearer [ 949.957959][ T6666] usb 5-1: USB disconnect, device number 6 [ 949.996184][T12365] udevd[12365]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.159/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.117459][ T6676] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 950.143239][T15816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 950.177427][T15816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 950.198432][T15816] macvlan9: entered promiscuous mode [ 950.203885][T15816] macvlan9: entered allmulticast mode [ 950.266567][ T6676] usb 4-1: Using ep0 maxpacket: 8 [ 950.274503][ T6676] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 950.283662][ T6676] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 950.296194][ T6676] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 950.307171][ T6676] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 950.317926][ T6676] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 950.331941][ T6676] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 950.342406][ T6676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.365079][ T6676] usbtmc 4-1:16.0: bulk endpoints not found [ 950.433612][T15821] tipc: Enabled bearer , priority 0 [ 950.442408][T15821] syzkaller0: entered promiscuous mode [ 950.450914][T15821] syzkaller0: entered allmulticast mode [ 950.478027][T15821] tipc: Resetting bearer [ 950.507508][T15820] tipc: Resetting bearer [ 950.546810][T15820] tipc: Disabling bearer [ 950.829594][T15830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 950.854110][T15830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2787'. [ 950.997426][ T6667] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 951.168749][ T6667] usb 1-1: Using ep0 maxpacket: 16 [ 951.183865][ T6667] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.195710][ T6667] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 951.219699][ T6667] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 951.744761][ T6667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.763374][ T6667] usb 1-1: config 0 descriptor?? [ 951.963037][ T6676] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 952.112897][T15827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.144330][T15827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.184037][T15827] dummy0: entered promiscuous mode [ 952.190911][T15827] vlan3: entered promiscuous mode [ 952.219367][ T6676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.233540][ T6676] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.250641][ T6676] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 952.263239][ T6676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.291504][ T6676] usb 3-1: config 0 descriptor?? [ 952.298444][ T6667] usb 1-1: USB disconnect, device number 17 [ 952.751210][T15838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.765719][T15838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.933668][ T6667] usb 4-1: USB disconnect, device number 114 [ 952.966040][T15848] tipc: Enabled bearer , priority 0 [ 952.997607][T15848] syzkaller0: entered promiscuous mode [ 953.003551][T15848] syzkaller0: entered allmulticast mode [ 953.101202][T15853] syzkaller0: mtu less than device minimum [ 953.135914][T15847] tipc: Resetting bearer [ 953.192327][ T6676] uclogic 0003:256C:006D.002F: failed retrieving Huion firmware version: -71 [ 953.211535][ T6676] uclogic 0003:256C:006D.002F: failed probing parameters: -71 [ 953.215708][T15847] tipc: Disabling bearer [ 953.224513][ T6676] uclogic 0003:256C:006D.002F: probe with driver uclogic failed with error -71 [ 953.246229][ T6676] usb 3-1: USB disconnect, device number 122 [ 953.420073][T15861] tipc: Enabled bearer , priority 0 [ 953.440399][T15861] syzkaller0: entered promiscuous mode [ 953.449313][T15861] syzkaller0: entered allmulticast mode [ 953.470634][T15861] tipc: Resetting bearer [ 953.527582][T15856] tipc: Resetting bearer [ 953.585796][T15856] tipc: Disabling bearer [ 953.603825][T15865] syz_tun: entered allmulticast mode [ 953.658118][T15864] syz_tun: left allmulticast mode [ 954.270658][T15885] kvm: user requested TSC rate below hardware speed [ 954.626528][ T6667] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 954.868611][ T6676] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 954.997357][ T6667] usb 1-1: Using ep0 maxpacket: 8 [ 955.005836][ T6667] usb 1-1: config 0 has an invalid interface number: 170 but max is 0 [ 955.015953][ T6667] usb 1-1: config 0 has no interface number 0 [ 955.034640][ T6667] usb 1-1: config 0 interface 170 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 955.035381][ T6676] usb 6-1: config 0 has no interfaces? [ 955.073313][ T6676] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 955.085303][ T6676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.095360][ T6676] usb 6-1: Product: syz [ 955.095471][ T6667] usb 1-1: config 0 interface 170 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 955.103719][ T6676] usb 6-1: Manufacturer: syz [ 955.198105][ T6667] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0x88 has invalid maxpacket 10453, setting to 1024 [ 955.271299][T15897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.293193][ T6667] usb 1-1: config 0 interface 170 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 955.295016][ T6676] usb 6-1: SerialNumber: syz [ 955.334425][ T6676] usb 6-1: config 0 descriptor?? [ 955.417155][ T6667] usb 1-1: config 0 interface 170 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 955.484861][ T6667] usb 1-1: config 0 interface 170 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 955.517263][ T6667] usb 1-1: config 0 interface 170 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 955.561737][ T6667] usb 1-1: New USB device found, idVendor=7366, idProduct=f8cb, bcdDevice=3a.11 [ 955.578963][ T6667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.589768][ T6667] usb 1-1: Product: syz [ 955.593997][ T6667] usb 1-1: Manufacturer: syz [ 955.604574][ T6667] usb 1-1: SerialNumber: syz [ 955.619422][ T6667] usb 1-1: config 0 descriptor?? [ 955.789335][T15890] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 955.797810][T15890] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 955.892807][T15905] tipc: Enabled bearer , priority 0 [ 955.901581][T15905] syzkaller0: entered promiscuous mode [ 955.907870][T15905] syzkaller0: entered allmulticast mode [ 955.955669][T15905] tipc: Resetting bearer [ 955.979247][T15904] tipc: Resetting bearer [ 956.026376][ T6676] usb 1-1: USB disconnect, device number 18 [ 956.066055][T15904] tipc: Disabling bearer [ 956.797297][T13436] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 956.947136][T13436] usb 5-1: Using ep0 maxpacket: 8 [ 956.954618][T13436] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 956.957735][ T6667] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 956.968262][T13436] usb 5-1: config 0 has no interface number 0 [ 957.006064][ T43] usb 6-1: USB disconnect, device number 94 [ 957.007341][T13436] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 957.044151][T13436] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 957.081468][T13436] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 957.133801][T13436] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 957.164678][ T6667] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 957.177197][T13436] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 957.177232][T13436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.180400][T13436] usb 5-1: config 0 descriptor?? [ 957.235098][ T6667] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.270653][ T6667] usb 1-1: config 0 interface 0 has no altsetting 0 [ 957.341449][ T6667] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 957.361722][ T6667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.396213][T13436] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 957.403174][ T6667] usb 1-1: config 0 descriptor?? [ 957.418327][T15934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2818'. [ 957.527172][T15934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2818'. [ 957.674824][T15940] random: crng reseeded on system resumption [ 957.809575][ T43] usb 5-1: USB disconnect, device number 7 [ 957.878913][ T43] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 958.772924][ T6667] usbhid 1-1:0.0: can't add hid device: -71 [ 958.780662][ T6667] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 958.812398][ T6667] usb 1-1: USB disconnect, device number 19 [ 959.713461][T15950] tipc: Enabled bearer , priority 0 [ 959.734998][T15950] syzkaller0: entered promiscuous mode [ 959.747071][T15950] syzkaller0: entered allmulticast mode [ 959.775513][T15950] tipc: Resetting bearer [ 959.794598][T15949] tipc: Resetting bearer [ 959.835781][T15949] tipc: Disabling bearer [ 959.966235][T15936] delete_channel: no stack [ 960.207251][T13436] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 960.387685][T13436] usb 5-1: Using ep0 maxpacket: 8 [ 960.398833][T13436] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 960.415471][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 960.447643][T13436] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.464808][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 960.557597][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 960.577086][T13436] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 960.584669][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 960.612733][T13436] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 960.630922][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 960.644172][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 960.751297][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2834'. [ 960.846362][T13436] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 960.917427][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 960.919185][ T6667] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 960.980104][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'. [ 961.040793][T13436] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 961.181728][ T6667] usb 6-1: Using ep0 maxpacket: 8 [ 961.202681][ T6667] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 961.230040][ T6667] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 961.233452][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 961.324870][ T6667] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 961.342207][ T6667] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 961.387517][ T6667] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 961.390920][T13436] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 961.425610][T13436] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 961.597001][T13435] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 961.875405][T13436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.892348][T13436] usb 5-1: Product: syz [ 961.913266][T13436] usb 5-1: Manufacturer: syz [ 961.927480][T13436] usb 5-1: SerialNumber: syz [ 961.936659][ T6667] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 961.999649][ T6667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.017419][T13435] usb 3-1: Using ep0 maxpacket: 8 [ 962.024420][T13435] usb 3-1: config 50 has 0 interfaces, different from the descriptor's value: 1 [ 962.037290][T13435] usb 3-1: New USB device found, idVendor=ec4f, idProduct=ea35, bcdDevice=4d.9d [ 962.047465][T13435] usb 3-1: New USB device strings: Mfr=145, Product=254, SerialNumber=3 [ 962.061058][T13435] usb 3-1: Product: syz [ 962.065708][T13435] usb 3-1: Manufacturer: syz [ 962.077143][T13435] usb 3-1: SerialNumber: syz [ 962.087586][ T6667] usbtmc 6-1:16.0: bulk endpoints not found [ 962.280189][T13436] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 962.301443][T15996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.310791][T15996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.324496][T13436] usb 5-1: USB disconnect, device number 8 [ 963.184980][T16021] tipc: Enabled bearer , priority 0 [ 963.201652][T16021] syzkaller0: entered promiscuous mode [ 963.218294][T16021] syzkaller0: entered allmulticast mode [ 963.265146][T16021] tipc: Resetting bearer [ 963.289985][T16017] tipc: Resetting bearer [ 963.334642][T16017] tipc: Disabling bearer [ 963.587170][T13435] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 963.743322][T13435] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 963.767464][T13435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.809479][T13435] usb 4-1: config 0 descriptor?? [ 964.084887][ T6667] usb 3-1: USB disconnect, device number 123 [ 964.234944][ T6666] usb 6-1: USB disconnect, device number 95 [ 964.468751][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.480919][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.898137][T13435] ath6kl: Failed to submit usb control message: -110 [ 964.943675][T13435] ath6kl: unable to send the bmi data to the device: -110 [ 964.964656][T13435] ath6kl: Unable to send get target info: -110 [ 964.987550][ T6666] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 965.011676][T13435] ath6kl: Failed to init ath6kl core: -110 [ 965.021773][T13435] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 965.156852][ T6666] usb 1-1: Using ep0 maxpacket: 8 [ 965.163713][ T6666] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 965.172987][ T6666] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 965.182126][ T43] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 965.187237][ T6676] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 965.195489][ T6666] usb 1-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 965.208221][ T6666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.216307][ T6666] usb 1-1: Product: syz [ 965.220815][ T6666] usb 1-1: Manufacturer: syz [ 965.225653][ T6666] usb 1-1: SerialNumber: syz [ 965.241731][ T6666] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 965.256073][ T6666] usb 1-1: no configuration chosen from 1 choice [ 965.267418][ T6667] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 965.339598][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.350602][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 965.364190][ T6676] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 965.365843][ T43] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 965.388783][ T6676] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 965.443119][ T6676] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 965.453809][ T6676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.457402][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 965.470877][ T6667] usb 5-1: Using ep0 maxpacket: 8 [ 965.491955][ T6667] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 965.494740][T16056] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 965.506837][ T6667] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.567414][ T6667] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.593322][ T43] usb 3-1: SerialNumber: syz [ 965.604522][ T6676] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 965.605388][ T6667] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 965.641152][ T6667] usb 5-1: config 0 interface 0 has no altsetting 0 [ 965.658791][ T6667] usb 5-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 965.674242][ T6667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.727946][ T6667] usb 5-1: config 0 descriptor?? [ 965.847592][ T43] usb 3-1: 0:2 : does not exist [ 965.891143][T16060] binder: 16055:16060 unknown command 0 [ 965.897497][T16060] binder: 16055:16060 ioctl c0306201 80000480 returned -22 [ 965.925196][T16060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.955796][T16060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.970855][ T43] usb 3-1: USB disconnect, device number 124 [ 966.063753][T12473] udevd[12473]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 966.148059][ T6667] asus 0003:0B05:1822.0030: item fetching failed at offset 5/7 [ 966.158354][ T6667] asus 0003:0B05:1822.0030: Asus hid parse failed: -22 [ 966.165947][ T6667] asus 0003:0B05:1822.0030: probe with driver asus failed with error -22 [ 966.351038][ T43] usb 5-1: USB disconnect, device number 9 [ 966.644687][ T43] usb 4-1: USB disconnect, device number 115 [ 967.027231][T13435] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 967.179600][T13435] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 967.190464][T13435] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 967.203880][T13435] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 967.213768][T13435] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.222538][T13435] usb 3-1: Product: syz [ 967.227417][T13435] usb 3-1: Manufacturer: syz [ 967.232106][T13435] usb 3-1: SerialNumber: syz [ 967.241029][T13435] usb 3-1: config 0 descriptor?? [ 967.250343][T16069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 967.258046][T16069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 967.470158][T16069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 967.481570][T16069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 967.725562][ T6676] usb 1-1: USB disconnect, device number 20 [ 967.892672][ T6666] usb 6-1: USB disconnect, device number 96 [ 967.913442][T13435] Error reading MAC address [ 967.950844][T13435] usb 3-1: USB disconnect, device number 125 [ 968.117577][ T6676] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 968.209214][T16093] binder: 16092:16093 ioctl ae01 40000e returned -22 [ 968.277025][ T6676] usb 1-1: Using ep0 maxpacket: 8 [ 968.284181][ T6676] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 968.293346][ T6676] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 968.304429][ T6676] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 968.314896][ T6676] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 968.325463][ T6676] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 968.352256][ T6676] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 968.362642][ T6676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.381716][ T6676] usbtmc 1-1:16.0: bulk endpoints not found [ 968.752260][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 968.817703][ T30] audit: type=1326 audit(1754949695.179:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16104 comm="syz.3.2867" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 968.941664][T16098] bond0: (slave team0): Releasing backup interface [ 968.960826][T16098] team0 (unregistering): left promiscuous mode [ 968.970499][T16098] team_slave_0: left promiscuous mode [ 968.982280][T16098] team_slave_1: left promiscuous mode [ 968.989488][T16098] team0 (unregistering): left allmulticast mode [ 968.996071][T16098] team_slave_0: left allmulticast mode [ 969.009045][T16098] team_slave_1: left allmulticast mode [ 969.020162][T16098] team0 (unregistering): Port device team_slave_0 removed [ 969.035251][T16098] team0 (unregistering): Port device team_slave_1 removed [ 969.636107][T16111] macsec1: entered promiscuous mode [ 969.642097][T16111] macsec1: entered allmulticast mode [ 970.107499][ T6666] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 970.285995][ T6666] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 970.309966][ T6666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.319840][ T6666] usb 3-1: Product: syz [ 970.324057][ T6666] usb 3-1: Manufacturer: syz [ 970.330317][ T6666] usb 3-1: SerialNumber: syz [ 970.354128][ T6666] usb 3-1: config 0 descriptor?? [ 970.544375][T16122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2870'. [ 970.847704][ T6676] usb 1-1: USB disconnect, device number 21 [ 970.957231][ T6667] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 971.112453][ T6667] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 971.392886][ T6667] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 971.489729][ T6667] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 971.508932][ T6667] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.589722][T16124] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 971.623543][ T6667] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 971.877298][ T43] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 972.031993][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 972.044627][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 972.059811][ T43] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 972.078755][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.147786][ T43] usb 6-1: Product: syz [ 972.153417][ T43] usb 6-1: Manufacturer: syz [ 972.166662][ T43] usb 6-1: SerialNumber: syz [ 972.196167][ T43] usb 6-1: config 0 descriptor?? [ 972.227740][T16137] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 972.242320][T16137] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 972.333894][T16147] loop4: detected capacity change from 0 to 7 [ 972.342861][T16147] Dev loop4: unable to read RDB block 7 [ 972.354262][T16147] loop4: unable to read partition table [ 972.361272][T16147] loop4: partition table beyond EOD, truncated [ 972.373527][T16147] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 972.494226][T16137] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 972.527369][T16137] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 972.886074][ T6666] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 972.931156][ T6666] asix 3-1:0.0: probe with driver asix failed with error -71 [ 972.950928][ T43] Error reading MAC address [ 973.037888][ T43] usb 6-1: USB disconnect, device number 97 [ 973.044203][ T6666] usb 3-1: USB disconnect, device number 126 [ 973.543244][ T43] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 973.638617][T16163] tipc: Invalid UDP bearer configuration [ 973.638659][T16163] tipc: Enabling of bearer rejected, failed to enable media [ 973.664630][T16162] tipc: Enabled bearer , priority 0 [ 973.674725][T16162] syzkaller0: entered promiscuous mode [ 973.681048][T16162] syzkaller0: entered allmulticast mode [ 973.687669][T12948] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 973.704482][T16140] usb 4-1: USB disconnect, device number 116 [ 973.738274][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 973.758862][ T43] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 973.773492][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 973.837244][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 973.850089][T16160] tipc: Resetting bearer [ 973.898680][T12948] usb 1-1: Using ep0 maxpacket: 8 [ 973.900590][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 973.916312][T12948] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 973.943236][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 973.964203][T12948] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 973.999825][T16160] tipc: Disabling bearer [ 974.006581][ T43] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 974.013957][T12948] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 974.027718][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.035903][ T43] usb 3-1: Product: syz [ 974.041245][ T43] usb 3-1: Manufacturer: syz [ 974.048591][ T43] usb 3-1: SerialNumber: syz [ 974.061784][T12948] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 974.068898][ T43] usb 3-1: config 0 descriptor?? [ 974.105342][T12948] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 974.119669][T12948] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 974.129478][T12948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.338836][T12948] usbtmc 1-1:16.0: bulk endpoints not found [ 974.382086][T16175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2886'. [ 974.413182][T16176] netlink: 'syz.4.2887': attribute type 30 has an invalid length. [ 974.477533][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2886'. [ 974.578717][ T43] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 974.609519][ T43] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 974.881055][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 974.897694][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.229810][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.236650][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.243535][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.250312][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.256997][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.263526][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.289830][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.301977][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.309256][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.319316][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.328404][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.363571][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.371690][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.386311][ T43] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 975.394482][ T43] input input55: Timeout waiting for response from device. [ 975.435713][ T43] usb 3-1: USB disconnect, device number 127 [ 975.909744][T16198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2892'. [ 975.964618][T16198] macvtap1: entered allmulticast mode [ 975.995833][T16198] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 976.524582][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'. [ 976.551498][T16218] tipc: Enabled bearer , priority 0 [ 976.560952][T16218] syzkaller0: entered promiscuous mode [ 976.566662][T16218] syzkaller0: entered allmulticast mode [ 976.864017][T16218] tipc: Resetting bearer [ 976.879769][T16214] delete_channel: no stack [ 976.889268][T16217] tipc: Resetting bearer [ 976.904742][T16216] program syz.5.2895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.991426][T16140] usb 1-1: USB disconnect, device number 22 [ 977.041869][T16217] tipc: Disabling bearer [ 977.997293][T13435] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 978.096687][T16140] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 978.141216][T16243] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 978.148041][T16243] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 978.165978][T16243] vhci_hcd vhci_hcd.0: Device attached [ 978.184035][T13435] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 978.195723][T13435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.224417][T16247] vhci_hcd vhci_hcd.0: port 0 already used [ 978.232372][T13435] usb 4-1: config 0 descriptor?? [ 978.246369][T16245] vhci_hcd: connection closed [ 978.260104][T11279] vhci_hcd: stop threads [ 978.273368][T16140] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 978.284277][T16140] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 978.296208][T11279] vhci_hcd: release socket [ 978.304348][T16140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.320054][T11279] vhci_hcd: disconnect device [ 978.328667][T16140] usb 3-1: config 0 has no interface number 0 [ 978.335406][T16140] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 978.380357][T16140] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 978.422146][T16140] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 978.492960][T16140] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 978.510280][T16140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.529168][T16140] usb 3-1: config 0 descriptor?? [ 978.576160][T16140] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 978.691681][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2906'. [ 978.717647][T16264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2906'. [ 978.841929][ T4586] usb 3-1: Failed to submit usb control message: -71 [ 978.841982][ T4586] usb 3-1: unable to send the bmi data to the device: -71 [ 978.841997][ T4586] usb 3-1: unable to get target info from device [ 978.842010][ T4586] usb 3-1: could not get target info (-71) [ 978.842041][ T4586] usb 3-1: could not probe fw (-71) [ 978.922706][T16140] usb 3-1: USB disconnect, device number 2 [ 978.946688][T13435] ath6kl: mismatched byte count -769682397 vs. expected 12 [ 978.961665][T13435] ath6kl: Failed to init ath6kl core: -22 [ 978.962204][T13435] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 979.157741][T13435] usb 4-1: USB disconnect, device number 117 [ 980.787510][T12948] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 981.071408][T12948] usb 4-1: device descriptor read/64, error -71 [ 981.146653][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 981.317298][T12948] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 981.345245][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 981.361205][ T43] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 981.381289][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 981.467603][T12948] usb 4-1: device descriptor read/64, error -71 [ 981.537249][ T43] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 981.600027][T12948] usb usb4-port1: attempt power cycle [ 981.615902][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 981.641349][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 981.674407][ T43] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 981.691706][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 981.714072][ T43] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 981.737128][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 981.752207][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 981.793066][ T43] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 981.802024][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 981.840401][ T43] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 981.864173][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 981.887082][ T43] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 981.909623][ T43] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 981.921880][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.952217][ T43] usb 3-1: Product: syz [ 981.967220][T16059] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 981.985306][ T43] usb 3-1: Manufacturer: syz [ 981.995589][ T43] usb 3-1: SerialNumber: syz [ 982.020235][T12948] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 982.057279][T12948] usb 4-1: device descriptor read/8, error -71 [ 982.120374][T16059] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 982.137333][T16059] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 982.180146][T16059] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 982.201026][T16059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.231448][ T43] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 982.240371][T16059] usb 5-1: Product: syz [ 982.244665][T16059] usb 5-1: Manufacturer: syz [ 982.255916][T16059] usb 5-1: SerialNumber: syz [ 982.263949][ T43] usb 3-1: USB disconnect, device number 3 [ 982.275263][T16059] usb 5-1: config 0 descriptor?? [ 982.287984][T16316] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 982.295695][T16320] loop4: detected capacity change from 0 to 7 [ 982.316273][T16316] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 982.318761][T16320] Dev loop4: unable to read RDB block 7 [ 982.334143][T12948] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 982.352390][T16320] loop4: unable to read partition table [ 982.363793][T16320] loop4: partition table beyond EOD, truncated [ 982.374574][T12948] usb 4-1: device descriptor read/8, error -71 [ 982.401206][T16320] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 982.507117][T12948] usb usb4-port1: unable to enumerate USB device [ 982.544951][T16316] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 982.557502][T16316] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 982.889992][T16327] tipc: Enabled bearer , priority 0 [ 982.899519][T16327] syzkaller0: entered promiscuous mode [ 982.911289][T16327] syzkaller0: entered allmulticast mode [ 983.348428][T16059] Error reading MAC address [ 983.359039][T16059] usb 5-1: USB disconnect, device number 10 [ 983.453627][T16327] tipc: Resetting bearer [ 983.473489][T16326] tipc: Resetting bearer [ 983.508442][T16326] tipc: Disabling bearer [ 983.856814][ T6676] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 984.145828][ T6676] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 984.211304][ T6676] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 984.266011][ T6676] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 984.288262][ T6676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.357344][T12948] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 984.632136][T12948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 984.698403][T12948] usb 5-1: not running at top speed; connect to a high speed hub [ 984.724686][T12948] usb 5-1: config 9 has an invalid interface number: 8 but max is 0 [ 984.732957][T12948] usb 5-1: config 9 has no interface number 0 [ 984.739197][T12948] usb 5-1: config 9 interface 8 has no altsetting 0 [ 984.758937][T12948] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=2a.9c [ 984.768774][T12948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.786040][T12948] usb 5-1: Product: syz [ 984.836454][T12948] usb 5-1: Manufacturer: syz [ 984.861618][T12948] usb 5-1: SerialNumber: syz [ 985.093504][T12948] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 985.114173][T12948] cxusb: set interface failed [ 985.199898][T12948] dvb-usb: bulk message failed: -22 (1/0) [ 985.219583][T12948] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 985.463201][T13436] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 985.514281][T12948] dvb-usb: AVerMedia AVerTVHD Volar (A868R) error while loading driver (-19) [ 985.524436][T12948] dvb_usb_cxusb 5-1:9.8: probe with driver dvb_usb_cxusb failed with error -22 [ 985.542938][T12948] usb 5-1: USB disconnect, device number 11 [ 985.610814][T16367] [U] k [ 985.649014][T13436] usb 6-1: Using ep0 maxpacket: 8 [ 985.680467][T13436] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 985.688756][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 985.705829][T13436] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.721663][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 985.733686][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 985.771180][T13436] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 985.811546][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 985.880461][T13436] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.974425][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 986.005490][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 986.024422][T13436] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 986.033025][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 986.053937][T13436] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.075581][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 986.237464][T13436] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 986.299902][T13436] usb 6-1: string descriptor 0 read error: -22 [ 986.315293][T13436] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 986.337240][T13435] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 986.461832][T13436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.594320][T13436] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 986.670248][T13435] usb 1-1: config 0 has no interfaces? [ 986.707416][T13435] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 986.783001][ T43] usb 6-1: USB disconnect, device number 98 [ 986.883820][T13435] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.987350][T16059] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 987.047076][T13435] usb 1-1: Product: syz [ 987.052557][T13435] usb 1-1: Manufacturer: syz [ 987.058271][T13435] usb 1-1: SerialNumber: syz [ 987.139379][T16059] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 987.139445][T13435] usb 1-1: config 0 descriptor?? [ 987.150909][T16059] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 987.261302][T16059] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 987.301036][T16059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.344604][T16059] usb 4-1: Product: syz [ 987.393309][ T43] usb 3-1: USB disconnect, device number 4 [ 987.454644][T16059] usb 4-1: Manufacturer: syz [ 987.499424][T16059] usb 4-1: SerialNumber: syz [ 987.568349][T16059] usb 4-1: config 0 descriptor?? [ 987.592582][T16379] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 987.606890][T16379] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 987.843731][T16379] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 987.873936][T16379] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 987.888427][ T6676] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 988.057491][ T6676] usb 3-1: Using ep0 maxpacket: 8 [ 988.204916][ T6676] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 988.216291][ T6676] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 988.241621][ T6676] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 988.322374][ T6676] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.341283][T16059] Error reading MAC address [ 988.356271][T16059] usb 4-1: USB disconnect, device number 122 [ 988.380139][ T6676] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 988.398279][ T6676] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.932322][T16392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2944'. [ 989.465748][T16394] tipc: Enabled bearer , priority 0 [ 989.503549][ T6666] usb 1-1: USB disconnect, device number 23 [ 989.789184][T16393] tipc: Disabling bearer [ 990.139975][T16408] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2949'. [ 990.717229][ T6666] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 990.798789][ T6676] usb 3-1: usb_control_msg returned -71 [ 990.804523][ T6676] usbtmc 3-1:16.0: can't read capabilities [ 990.837028][ T43] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 990.851166][ T6676] usb 3-1: USB disconnect, device number 5 [ 990.890580][ T6666] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 990.900930][ T6666] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 990.964230][ T6666] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 991.018516][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 991.035281][ T6666] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 991.079022][ T43] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 991.091410][ T6666] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 991.103666][ T43] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 991.170019][ T43] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 991.193138][ T6666] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 991.205152][ T6666] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 991.218145][ T6666] usb 1-1: Product: syz [ 991.222966][ T6666] usb 1-1: Manufacturer: syz [ 991.273283][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 991.298931][ T6666] cdc_wdm 1-1:1.0: skipping garbage [ 991.318534][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.341199][ T6666] cdc_wdm 1-1:1.0: skipping garbage [ 991.362882][ T43] usb 4-1: Product: syz [ 991.368627][ T6666] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 991.377431][ T43] usb 4-1: Manufacturer: syz [ 991.393904][ T6666] cdc_wdm 1-1:1.0: Unknown control protocol [ 991.403142][ T43] usb 4-1: SerialNumber: syz [ 991.418386][T16439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2956'. [ 991.491313][ T43] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 991.539040][ T43] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 991.545364][ T43] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 991.573851][T16140] usb 1-1: USB disconnect, device number 24 [ 991.757817][T13435] usb 4-1: USB disconnect, device number 123 [ 992.122993][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 992.214902][T16450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2957'. [ 992.251577][T16450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2957'. [ 992.329867][T16455] tipc: Enabled bearer , priority 0 [ 992.498259][T16468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2961'. [ 993.197593][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.205096][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.388881][T16458] tipc: Resetting bearer [ 993.590993][T16454] tipc: Disabling bearer [ 993.827284][ T6666] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 994.183304][ T6666] usb 6-1: Using ep0 maxpacket: 16 [ 994.237654][ T6666] usb 6-1: config 0 has no interfaces? [ 994.245707][ T6666] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 994.276142][ T6666] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.352859][ T6666] usb 6-1: Product: syz [ 994.362213][ T6666] usb 6-1: Manufacturer: syz [ 994.370445][ T6666] usb 6-1: SerialNumber: syz [ 994.389194][ T6666] usb 6-1: config 0 descriptor?? [ 994.847554][T13435] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 995.027274][T13435] usb 5-1: Using ep0 maxpacket: 32 [ 995.034621][T13435] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 995.046662][T13435] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 995.130228][T13435] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 995.154436][T13435] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 995.319821][T13435] usb 5-1: config 0 interface 0 has no altsetting 0 [ 995.380445][T13435] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 995.394754][T13435] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 995.395424][T16489] loop4: detected capacity change from 0 to 7 [ 995.410661][T13435] usb 5-1: Product: syz [ 995.415090][T13435] usb 5-1: Manufacturer: syz [ 995.429746][T13435] usb 5-1: SerialNumber: syz [ 995.442109][T13435] usb 5-1: config 0 descriptor?? [ 995.457189][T13435] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 995.467329][T16489] Dev loop4: unable to read RDB block 7 [ 995.467381][T16489] loop4: unable to read partition table [ 995.467609][T16489] loop4: partition table beyond EOD, truncated [ 995.491994][T13435] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 995.527264][T16489] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 995.658679][T13435] usb 5-1: USB disconnect, device number 12 [ 995.718117][T13435] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 995.947535][ T6666] usb 6-1: USB disconnect, device number 99 [ 996.787470][ T6676] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 996.877282][T13435] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 996.957260][ T6676] usb 5-1: Using ep0 maxpacket: 16 [ 996.973262][ T6676] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 996.992232][ T6676] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 997.031958][ T6676] usb 5-1: config 0 interface 0 has no altsetting 0 [ 997.039886][T13435] usb 4-1: Using ep0 maxpacket: 8 [ 997.057629][T13435] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 997.076266][T13435] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 997.101570][ T6676] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 997.116321][T13435] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.138301][ T6676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.146362][ T6676] usb 5-1: Product: syz [ 997.147741][ T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 997.155996][T13435] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.173059][ T6676] usb 5-1: Manufacturer: syz [ 997.177950][ T6676] usb 5-1: SerialNumber: syz [ 997.184514][T13435] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 997.204008][ T6676] usb 5-1: config 0 descriptor?? [ 997.210059][T13435] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 997.222696][T13435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.236375][ T6676] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58 [ 997.259035][T13435] usbtmc 4-1:16.0: bulk endpoints not found [ 997.306772][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 997.315933][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 997.326015][ T43] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 997.338678][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.352743][ T43] usb 1-1: Product: syz [ 997.362333][ T43] usb 1-1: Manufacturer: syz [ 997.372244][ T43] usb 1-1: SerialNumber: syz [ 997.399161][ T43] usb 1-1: config 0 descriptor?? [ 997.603651][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 997.677786][T16527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2978'. [ 997.831453][ T43] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 997.839017][ T43] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 997.859980][T16532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2974'. [ 997.874039][ T43] usb 1-1: USB disconnect, device number 25 [ 998.633337][T16539] fuse: Unknown parameter 'NŸ¬lR¥†n^Á>†E–K' [ 998.927335][ T6666] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 999.087352][ T6666] usb 1-1: Using ep0 maxpacket: 8 [ 999.101781][ T6666] usb 1-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 999.159071][ T6666] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.251855][ T6666] usb 1-1: Product: syz [ 999.274459][ T6666] usb 1-1: Manufacturer: syz [ 999.339443][ T6666] usb 1-1: SerialNumber: syz [ 999.374199][ T6666] usb 1-1: config 0 descriptor?? [ 999.427720][ T6666] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 999.484102][T13435] usb 5-1: USB disconnect, device number 13 [ 999.608154][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.622846][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.667715][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.684113][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.747749][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.787193][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.798703][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.834636][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.837750][T16555] fuse: Unknown parameter 'rootmod{' [ 999.872983][T16542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.903519][T16542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.956596][ T43] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1000.173665][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1000.185055][ T6666] gspca_m5602: Failed to find a sensor [ 1000.192740][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.208342][ T6666] ALi m5602 1-1:0.0: ALi m5602 webcam failed [ 1000.214413][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.230558][ T6666] usb 1-1: USB disconnect, device number 26 [ 1000.245898][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.262232][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1000.274881][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.297952][ T43] usb 6-1: config 0 descriptor?? [ 1000.403411][T16059] usb 4-1: USB disconnect, device number 124 [ 1000.746575][T16059] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1000.768974][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0031/input/input59 [ 1000.887818][ T43] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1000.942768][T16059] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1001.005809][T16564] syzkaller0: entered promiscuous mode [ 1001.011517][ T43] usb 6-1: USB disconnect, device number 100 [ 1001.014727][T16059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.042531][T16059] usb 4-1: Product: syz [ 1001.069524][T16059] usb 4-1: Manufacturer: syz [ 1001.074247][T16059] usb 4-1: SerialNumber: syz [ 1001.075521][T16565] fido_id[16565]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1001.091032][T16059] usb 4-1: config 0 descriptor?? [ 1001.095344][T16564] syzkaller0: entered allmulticast mode [ 1001.104192][T16059] ch341 4-1:0.0: ch341-uart converter detected [ 1001.717470][T13436] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1001.873025][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2996'. [ 1001.894931][T16593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2996'. [ 1001.949288][T13436] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1001.962538][T13436] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1002.018724][T13436] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1002.028750][T13436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.138955][T13436] usb 3-1: Product: syz [ 1002.143187][T13436] usb 3-1: Manufacturer: syz [ 1002.188341][T13436] usb 3-1: SerialNumber: syz [ 1002.207319][T16059] ch341-uart ttyUSB0: failed to read break control: -71 [ 1002.214380][T16059] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1002.234262][T16059] usb 4-1: USB disconnect, device number 125 [ 1002.292012][T13436] usb 3-1: config 0 descriptor?? [ 1002.311651][T16577] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2992'. [ 1002.320726][T16579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1002.321290][T16579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1002.337479][ T6676] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1002.352045][T16059] ch341 4-1:0.0: device disconnected [ 1002.486765][ T6676] usb 1-1: Using ep0 maxpacket: 8 [ 1002.494309][ T6676] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1002.504280][ T6676] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.655901][ T6676] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1002.666711][ T6676] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1002.667197][T16579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1002.677539][ T6676] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1002.706691][T16579] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1002.807373][ T6676] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1002.877836][ T6676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.959682][ T6676] usbtmc 1-1:16.0: bulk endpoints not found [ 1002.974003][T16599] tipc: Enabled bearer , priority 0 [ 1003.176652][T13436] Error reading MAC address [ 1003.216660][T13436] usb 3-1: USB disconnect, device number 6 [ 1003.237202][T16140] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1003.286273][ T30] audit: type=1326 audit(1754949729.649:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 1003.342051][ T30] audit: type=1326 audit(1754949729.649:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f94558 code=0x7ffc0000 [ 1003.375300][ T30] audit: type=1326 audit(1754949729.649:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f94558 code=0x7ffc0000 [ 1003.407506][ T30] audit: type=1326 audit(1754949729.649:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 1003.437999][T16140] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1003.452293][T16140] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 1003.463986][T16140] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1003.478649][ T30] audit: type=1326 audit(1754949729.649:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f94558 code=0x7ffc0000 [ 1003.510960][T16140] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1003.545556][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 1003.547166][T16140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.587358][ T30] audit: type=1326 audit(1754949729.649:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 1003.658167][T16599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1003.725622][T16140] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1003.744222][ T30] audit: type=1326 audit(1754949729.649:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f94558 code=0x7ffc0000 [ 1003.918673][ T30] audit: type=1326 audit(1754949729.649:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 1004.015325][ T30] audit: type=1326 audit(1754949729.649:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f94558 code=0x7ffc0000 [ 1004.226266][ T30] audit: type=1326 audit(1754949729.649:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16603 comm="syz.4.3001" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000 [ 1005.119493][T13436] usb 1-1: USB disconnect, device number 27 [ 1005.257997][T16620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.298194][T16620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.497192][T16140] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1005.919948][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1005.937169][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1005.949769][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1005.962133][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1005.971592][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1006.045261][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1006.057513][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1006.078566][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1006.088101][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1006.096006][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1006.491094][T16059] usb 4-1: USB disconnect, device number 126 [ 1006.508770][T16617] tipc: Disabling bearer [ 1006.672610][T11283] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.713099][T16639] warning: `syz.4.3010' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1006.728787][T13435] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1006.743203][T16641] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1006.771307][T16639] usb usb8: usbfs: process 16639 (syz.4.3010) did not claim interface 3 before use [ 1006.830876][T11283] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.857464][T16140] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1006.935601][T13435] usb 1-1: Using ep0 maxpacket: 32 [ 1006.942945][T13435] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 1006.943027][T11283] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.953448][T13435] usb 1-1: config 4 has no interface number 0 [ 1007.000976][T13435] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.020747][T16140] usb 3-1: Using ep0 maxpacket: 32 [ 1007.027200][T13435] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.029852][T16140] usb 3-1: config 0 has an invalid interface number: 103 but max is 0 [ 1007.044012][T13435] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1007.046210][T16059] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1007.060466][T13435] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.144916][T16140] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.161962][T16140] usb 3-1: config 0 has no interface number 0 [ 1007.168629][T13435] hub 1-1:4.128: USB hub found [ 1007.177417][T16140] usb 3-1: config 0 interface 103 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1007.187909][T16140] usb 3-1: config 0 interface 103 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1007.191862][T11283] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.235451][T16140] usb 3-1: New USB device found, idVendor=045e, idProduct=043a, bcdDevice=f5.69 [ 1007.246331][T16140] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.257952][T16140] usb 3-1: Product: syz [ 1007.263713][T16140] usb 3-1: Manufacturer: syz [ 1007.272565][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3013'. [ 1007.329719][T16059] usb 4-1: Using ep0 maxpacket: 32 [ 1007.335311][T16140] usb 3-1: SerialNumber: syz [ 1007.343642][T16059] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1007.355544][T16059] usb 4-1: config 7 has an invalid interface number: 128 but max is 0 [ 1007.367728][T16059] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1007.377772][T13435] hub 1-1:4.128: 2 ports detected [ 1007.385287][T13435] hub 1-1:4.128: Using single TT (err -22) [ 1007.394476][T16059] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.415443][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 1007.454694][T16059] usb 4-1: config 7 has no interface number 0 [ 1007.462769][T16059] usb 4-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 1007.480197][T16140] usb 3-1: config 0 descriptor?? [ 1007.485448][T16059] usb 4-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 1007.500114][T16140] ipaq 3-1:0.103: PocketPC PDA converter detected [ 1007.514622][T16140] usb 3-1: active config #0 != 1 ?? [ 1007.537956][T16059] usb 4-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 1007.550619][T16059] usb 4-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1007.564411][T16059] usb 4-1: config 7 interface 128 has no altsetting 0 [ 1007.577530][T16059] usb 4-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 1007.585516][T13435] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 1007.601321][T16059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.606467][T13435] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 1007.688023][T13435] usb 1-1: USB disconnect, device number 28 [ 1007.711137][T16059] usb 4-1: Product: syz [ 1007.716318][T16059] usb 4-1: Manufacturer: syz [ 1007.842205][T13436] usb 3-1: USB disconnect, device number 8 [ 1007.846030][T16059] usb 4-1: SerialNumber: syz [ 1007.872788][T16642] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1008.116820][T16059] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1008.233372][ T5868] Bluetooth: hci3: command tx timeout [ 1008.289590][T16059] usb 4-1: MIDIStreaming interface descriptor not found [ 1008.535434][T11283] macvlan7: left allmulticast mode [ 1008.559474][T11283] macvlan7: left promiscuous mode [ 1008.580294][T16059] usb 4-1: USB disconnect, device number 127 [ 1008.615549][T11283] bridge0: port 1(macvlan7) entered disabled state [ 1008.876227][T12354] udevd[12354]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.276764][ T6676] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1009.577279][ T6676] usb 1-1: Using ep0 maxpacket: 8 [ 1009.607582][ T6676] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1009.657434][ T6676] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.717856][T16059] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1009.735991][ T6676] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1009.746926][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1009.793402][ T6676] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1009.836454][ T6676] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1009.887817][ T6676] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1009.917781][ T6676] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.942391][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1009.963208][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1009.974014][T16059] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1009.990276][T16059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.000874][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1010.046008][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1010.061424][T16059] usb 4-1: config 0 descriptor?? [ 1010.066538][ T6676] usbtmc 1-1:16.0: bulk endpoints not found [ 1010.087672][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1010.256460][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.257266][ T5868] Bluetooth: hci3: command tx timeout [ 1010.294183][ T43] usb 5-1: config 0 descriptor?? [ 1010.548353][ T43] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 1010.568046][ T43] hdpvr 5-1:0.0: device init failed [ 1010.577614][ T43] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1010.590206][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 1010.720038][T16689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.730506][T16689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.874401][T16690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1011.145662][T16059] ath6kl: Failed to submit usb control message: -110 [ 1011.222011][T16059] ath6kl: unable to send the bmi data to the device: -110 [ 1011.233154][T16059] ath6kl: Unable to send get target info: -110 [ 1011.278271][T16059] ath6kl: Failed to init ath6kl core: -110 [ 1011.285095][T16059] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1011.795726][ T6667] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1011.950134][T11283]  (unregistering): Released all slaves [ 1011.972687][ T6667] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 1011.981553][ T6667] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1012.050153][ T6667] usb 3-1: config 0 has no interface number 0 [ 1012.060437][ T6667] usb 3-1: config 0 interface 167 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1012.406823][ T5868] Bluetooth: hci3: command tx timeout [ 1012.425516][ T6667] usb 3-1: config 0 interface 167 has no altsetting 0 [ 1012.442448][ T6667] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1012.451716][ T6667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.477660][ T6667] usb 3-1: config 0 descriptor?? [ 1012.594642][ T43] usb 4-1: USB disconnect, device number 2 [ 1012.642099][T11283] bond1 (unregistering): Released all slaves [ 1012.905221][T11283] bond2 (unregistering): Released all slaves [ 1013.333865][T11283] bond3 (unregistering): Released all slaves [ 1013.368179][T11283] bond4 (unregistering): Released all slaves [ 1013.427424][T16633] chnl_net:caif_netlink_parms(): no params data found [ 1013.506104][ T6666] usb 5-1: USB disconnect, device number 14 [ 1013.572320][T13436] usb 1-1: USB disconnect, device number 29 [ 1013.769644][T16722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.853456][T11283] tipc: Left network mode [ 1013.917272][T16727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1013.977594][T16722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.014102][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1014.185553][ T30] kauditd_printk_skb: 409 callbacks suppressed [ 1014.185589][ T30] audit: type=1326 audit(1754949740.519:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.224399][T16722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.274650][T16722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.346264][ T30] audit: type=1326 audit(1754949740.529:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.437579][ T30] audit: type=1326 audit(1754949740.529:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=333 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.499707][ T5868] Bluetooth: hci3: command tx timeout [ 1014.576093][ T30] audit: type=1326 audit(1754949740.529:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.590306][T16633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.606269][ T30] audit: type=1326 audit(1754949740.529:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.627677][T16633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.629709][ T30] audit: type=1326 audit(1754949740.529:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.670134][ T30] audit: type=1326 audit(1754949740.529:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.682686][T16633] bridge_slave_0: entered allmulticast mode [ 1014.747265][ T30] audit: type=1326 audit(1754949740.529:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.771005][ T30] audit: type=1326 audit(1754949740.679:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.866694][T16633] bridge_slave_0: entered promiscuous mode [ 1014.890104][ T30] audit: type=1326 audit(1754949740.689:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16696 comm="syz.2.3018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f46539 code=0x7ffc0000 [ 1014.934807][T16732] syzkaller0: entered promiscuous mode [ 1014.945648][T16732] syzkaller0: entered allmulticast mode [ 1015.120227][T16633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.134785][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.155204][T16633] bridge_slave_1: entered allmulticast mode [ 1015.181626][T16633] bridge_slave_1: entered promiscuous mode [ 1015.333486][T11283] ------------[ cut here ]------------ [ 1015.347480][T11283] ODEBUG: activate active (active state 1) object: ffff888057456e00 object type: rcu_head hint: 0x0 [ 1015.359030][T11283] WARNING: CPU: 0 PID: 11283 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 1015.368695][T11283] Modules linked in: [ 1015.372960][T11283] CPU: 0 UID: 0 PID: 11283 Comm: kworker/u8:13 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1015.383611][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.393724][T11283] Workqueue: netns cleanup_net [ 1015.398572][T11283] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1015.404522][T11283] Code: 4c 89 ff e8 57 19 53 fd 4d 8b 0f 48 c7 c7 a0 3c e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 8a 4a b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 af d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1015.424308][T11283] RSP: 0018:ffffc9000b7674f8 EFLAGS: 00010282 [ 1015.430451][T11283] RAX: 109ab45e96de0500 RBX: dffffc0000000000 RCX: ffff88806a35bc00 [ 1015.438531][T11283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1015.446585][T11283] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 1015.454592][T11283] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 0000000000000000 [ 1015.463386][T11283] R13: ffffffff8be33e20 R14: ffff888057456e00 R15: ffffffff8b8bd3c0 [ 1015.471474][T11283] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 1015.480642][T11283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1015.487352][T11283] CR2: 0000000080186000 CR3: 0000000078eae000 CR4: 00000000003526f0 [ 1015.495364][T11283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1015.503433][T11283] DR3: 00000000e08e800c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1015.511517][T11283] Call Trace: [ 1015.514829][T11283] [ 1015.517863][T11283] debug_object_activate+0x26a/0x420 [ 1015.523202][T11283] kvfree_call_rcu+0x4f/0x410 [ 1015.527980][T11283] bss_free+0xb9/0x250 [ 1015.532072][T11283] cfg80211_put_bss+0x1e2/0x230 [ 1015.536992][T11283] cfg80211_dev_free+0x257/0x2d0 [ 1015.541956][T11283] ? kfree+0x4d/0x440 [ 1015.546046][T11283] ? __pfx_wiphy_dev_release+0x10/0x10 [ 1015.551559][T11283] device_release+0x99/0x1c0 [ 1015.556170][T11283] kobject_put+0x22b/0x480 [ 1015.560670][T11283] mac80211_hwsim_del_radio+0x2de/0x460 [ 1015.566249][T11283] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1015.572402][T11283] hwsim_exit_net+0x584/0x640 [ 1015.577127][T11283] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1015.582370][T11283] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1015.588365][T11283] ops_undo_list+0x497/0x990 [ 1015.593003][T11283] ? __pfx_ops_undo_list+0x10/0x10 [ 1015.598176][T11283] ? do_raw_spin_unlock+0x122/0x240 [ 1015.603595][T11283] cleanup_net+0x4c5/0x800 [ 1015.608093][T11283] ? __pfx_cleanup_net+0x10/0x10 [ 1015.613095][T11283] ? _raw_spin_unlock_irq+0x23/0x50 [ 1015.618436][T11283] ? process_scheduled_works+0x9ef/0x17b0 [ 1015.624182][T11283] ? process_scheduled_works+0x9ef/0x17b0 [ 1015.629976][T11283] process_scheduled_works+0xade/0x17b0 [ 1015.635573][T11283] ? __pfx_process_scheduled_works+0x10/0x10 [ 1015.641609][T11283] worker_thread+0x8a0/0xda0 [ 1015.646218][T11283] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1015.652612][T11283] ? __kthread_parkme+0x7b/0x200 [ 1015.657596][T11283] kthread+0x70e/0x8a0 [ 1015.661689][T11283] ? __pfx_worker_thread+0x10/0x10 [ 1015.666857][T11283] ? __pfx_kthread+0x10/0x10 [ 1015.671467][T11283] ? _raw_spin_unlock_irq+0x23/0x50 [ 1015.676713][T11283] ? lockdep_hardirqs_on+0x9c/0x150 [ 1015.681992][T11283] ? __pfx_kthread+0x10/0x10 [ 1015.686695][T11283] ret_from_fork+0x3f9/0x770 [ 1015.691320][T11283] ? __pfx_ret_from_fork+0x10/0x10 [ 1015.696503][T11283] ? __switch_to_asm+0x39/0x70 [ 1015.701296][T11283] ? __switch_to_asm+0x33/0x70 [ 1015.706077][T11283] ? __pfx_kthread+0x10/0x10 [ 1015.710742][T11283] ret_from_fork_asm+0x1a/0x30 [ 1015.715560][T11283] [ 1015.718627][T11283] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1015.725913][T11283] CPU: 0 UID: 0 PID: 11283 Comm: kworker/u8:13 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1015.736523][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.746596][T11283] Workqueue: netns cleanup_net [ 1015.751400][T11283] Call Trace: [ 1015.754717][T11283] [ 1015.757742][T11283] dump_stack_lvl+0x99/0x250 [ 1015.762353][T11283] ? __asan_memcpy+0x40/0x70 [ 1015.766959][T11283] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1015.772168][T11283] ? __pfx__printk+0x10/0x10 [ 1015.776802][T11283] vpanic+0x281/0x750 [ 1015.780793][T11283] ? __pfx__printk+0x10/0x10 [ 1015.785392][T11283] ? __pfx_vpanic+0x10/0x10 [ 1015.789921][T11283] ? is_bpf_text_address+0x292/0x2b0 [ 1015.795227][T11283] panic+0xb9/0xc0 [ 1015.798967][T11283] ? __pfx_panic+0x10/0x10 [ 1015.803402][T11283] __warn+0x31b/0x4b0 [ 1015.807408][T11283] ? debug_print_object+0x16b/0x1e0 [ 1015.812622][T11283] ? debug_print_object+0x16b/0x1e0 [ 1015.817827][T11283] report_bug+0x2be/0x4f0 [ 1015.822163][T11283] ? debug_print_object+0x16b/0x1e0 [ 1015.827372][T11283] ? debug_print_object+0x16b/0x1e0 [ 1015.832599][T11283] ? debug_print_object+0x16d/0x1e0 [ 1015.837825][T11283] handle_bug+0x84/0x160 [ 1015.842075][T11283] exc_invalid_op+0x1a/0x50 [ 1015.846579][T11283] asm_exc_invalid_op+0x1a/0x20 [ 1015.851446][T11283] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1015.857274][T11283] Code: 4c 89 ff e8 57 19 53 fd 4d 8b 0f 48 c7 c7 a0 3c e3 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 8a 4a b3 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 af d3 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1015.876911][T11283] RSP: 0018:ffffc9000b7674f8 EFLAGS: 00010282 [ 1015.882986][T11283] RAX: 109ab45e96de0500 RBX: dffffc0000000000 RCX: ffff88806a35bc00 [ 1015.890996][T11283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1015.898993][T11283] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004 [ 1015.906968][T11283] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: 0000000000000000 [ 1015.914947][T11283] R13: ffffffff8be33e20 R14: ffff888057456e00 R15: ffffffff8b8bd3c0 [ 1015.922963][T11283] debug_object_activate+0x26a/0x420 [ 1015.928307][T11283] kvfree_call_rcu+0x4f/0x410 [ 1015.933187][T11283] bss_free+0xb9/0x250 [ 1015.937276][T11283] cfg80211_put_bss+0x1e2/0x230 [ 1015.942135][T11283] cfg80211_dev_free+0x257/0x2d0 [ 1015.947082][T11283] ? kfree+0x4d/0x440 [ 1015.951074][T11283] ? __pfx_wiphy_dev_release+0x10/0x10 [ 1015.956539][T11283] device_release+0x99/0x1c0 [ 1015.961161][T11283] kobject_put+0x22b/0x480 [ 1015.965593][T11283] mac80211_hwsim_del_radio+0x2de/0x460 [ 1015.971160][T11283] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1015.977279][T11283] hwsim_exit_net+0x584/0x640 [ 1015.981969][T11283] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1015.987177][T11283] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1015.993016][T11283] ops_undo_list+0x497/0x990 [ 1015.997626][T11283] ? __pfx_ops_undo_list+0x10/0x10 [ 1016.002752][T11283] ? do_raw_spin_unlock+0x122/0x240 [ 1016.007959][T11283] cleanup_net+0x4c5/0x800 [ 1016.012389][T11283] ? __pfx_cleanup_net+0x10/0x10 [ 1016.017338][T11283] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.022543][T11283] ? process_scheduled_works+0x9ef/0x17b0 [ 1016.028269][T11283] ? process_scheduled_works+0x9ef/0x17b0 [ 1016.034015][T11283] process_scheduled_works+0xade/0x17b0 [ 1016.039587][T11283] ? __pfx_process_scheduled_works+0x10/0x10 [ 1016.045591][T11283] worker_thread+0x8a0/0xda0 [ 1016.050207][T11283] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1016.056571][T11283] ? __kthread_parkme+0x7b/0x200 [ 1016.061520][T11283] kthread+0x70e/0x8a0 [ 1016.065597][T11283] ? __pfx_worker_thread+0x10/0x10 [ 1016.070723][T11283] ? __pfx_kthread+0x10/0x10 [ 1016.075326][T11283] ? _raw_spin_unlock_irq+0x23/0x50 [ 1016.080531][T11283] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.085741][T11283] ? __pfx_kthread+0x10/0x10 [ 1016.090367][T11283] ret_from_fork+0x3f9/0x770 [ 1016.094972][T11283] ? __pfx_ret_from_fork+0x10/0x10 [ 1016.100109][T11283] ? __switch_to_asm+0x39/0x70 [ 1016.104881][T11283] ? __switch_to_asm+0x33/0x70 [ 1016.109718][T11283] ? __pfx_kthread+0x10/0x10 [ 1016.114341][T11283] ret_from_fork_asm+0x1a/0x30 [ 1016.119130][T11283] [ 1016.122531][T11283] Kernel Offset: disabled [ 1016.126867][T11283] Rebooting in 86400 seconds..