last executing test programs: 7m8.669347145s ago: executing program 32 (id=1590): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 4m10.196885313s ago: executing program 33 (id=3323): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x4000) 3m8.162404568s ago: executing program 7 (id=3688): syz_usb_connect(0x5, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000ec0), 0x402, r2}, 0x38) 3m6.743096516s ago: executing program 34 (id=3687): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904", @ANYBLOB="872f"], 0x0) 3m5.033014255s ago: executing program 35 (id=3697): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x0, 0x0}, 0x10) 3m4.805960481s ago: executing program 7 (id=3701): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff0500"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r9, @ANYRES32=r5], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @private2, 0x4}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4880}, 0x40080) r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3m2.975843592s ago: executing program 7 (id=3702): r0 = memfd_create(&(0x7f00000001c0)='\xf1q\x97.\x8e\xc3\xfe\r\a\xee\xc9[\x9a%=\x01#\x00\r\x9a\xbf\xd9\xcb\xe4\"mqo\xa1\xd2dhV\xf3\n*_A\xef\xc7\xa4\xee\xb2z\xc0\r\n\xd2\xa3\x98_\xf6\xb6\f\xbdOS\t\xfe\x8a\xf9>\x05+\xfc\x9c\xa5y\xf8\x17Vo\x00l\v\xe5\xff\x92\xc9\xaeH\xeeK\x00S\xf6\xecz\x87iiO\xdauvJ\xad\x82\xa5\xa1]\xd5+=\xb4\xf0\x02\xadT\x81\x00\x00\x017\xc5\x8e\\\x00\x8a\x0e\xc50L \xd5\xf3\xee\xa8\x82-\xcb\x00\x00\x00\x00\x00\x00\x00\x04\xa6\x19\xe1\b\x84a\xb9^\xc4\xa3\xa2\xd8\x82\xd0\x8e\xd2\xd2m\xea\x92\xd4\x1f\x1d\xeb\xa0\xf7\x00\xf8\x00Wzh\xd6\x9a\x1d-\x03m^c\x05O\xa2wVA\xe2\xc0\"\xa9\x15\x1e\x13\x82o\xfe\x0e:\x1a\xbb_.Bt\xa7\x8c\v\x92\x90H\xb9\xfd\xf4c\f{\x86\xfd`\xce_k\x17\xf9r\xe8^\xc0N\x8b>\xd6:\x1d\x02z\xec\x9d\xd64/\xc7&\x91\xa3C\xd4\xf8\x16\x82aS]\xa0\x9a\x9bE{\xf6\xfc\x8b\xfb\x96k\xfc\xe3\xf3 \x1d\xd9@\xf6\xdcQG\'\xed(G\xb0\xba\xee8\xa5\xa8\x8c\xb1\xab\x8b\xc8e}\a\x1f\x84(\x85HB\x119\x8d\xab\\\\\xba\xb3\x89>~s1@\x9e\x8dD\xb5\x8c\xb6H\xbfJ5R\x06/.\xc5\xd4o\x0e\xa0\xdd\xb5\x8b\xddwU\xd91\xd2\xcfj\xc4=-\xdb\xa8\xb5r\x9f\xa3\x9f*}\r7B\x9e\xc20\xf5\xe8B\xd0\xb6\x00\xd52\xc9w\x8bAu,\x8b\xdc\xe7\xd8\x8d\x85\xd0\xa8\xf0\xfe\xa9\xf1\x92\x18?\xc1\x02w/\xef\xdb\x02\x87_\x89 \x14T\x9c\xc1\xf6ck\x14 \x18\x10\xb3`\xf4\'Oz\x12\xd2Wr\xc6\xba\x00\x99\x8b\xfd\xdbz\x1e\x1d\xd1\xadFb\xe7\xcb\xf52?\xfbH\xf7\x9bE\x13\xe9\xec\xea)A\x87\xfb+Y.\x85\xd5\xca\xf3F\x13L\xf3\xe7Kd\xe3\xe0*M\xdc\r\x06{.+0\xab\x86\xe7\"\xdf\x05\x90|\t}\x85\xfa\x8a=\xf7\xa0\xbd^F\xf1\'\x9c\xd7\xfc\x01p\x1frn\x83\x10u\xc6M\xfb\x92r\x1f\x8d!\xe5\xf3\xd2\x80!w\xf5\xa6\xac\v\xccr\xf7o\xbbq\x03\xd8\x90\x9a\x1d\xa6}\xf1\x88\x036\xfa\x15\xed9\xc52d\xb1\xd0:\x91\xb5K\xf0\x14\xf3d\x91w\xf2\xa2j\x91U\x02!&\x19\x12\xaeg\x12x\xb3\'xd\xddG5\xc9\xb1\x0e/\xfc\x81\xa6&\xdb\xb5e\x1d\xc9\xffK(\x9d\xdf\x8d\xc6N\xdb\xd50mY\xfbE.\x13\xddw\x8a\xef\xd2l[\x84\xbf\x0f\xa9\x18\xe9\xcfL5\xa7\x14\xcc\x92\xde\xf2X\xb6\xbb\xe3\xa4\xcc\xfb7[\xebS\x9cL\xed\xda\x04\xce/f\xa6<\xea\xee(t\x10G\x10r{\xa9\x9b\x85\xb93\xc7\x8a\'', 0x6) fcntl$addseals(r0, 0x409, 0xc) fallocate(r0, 0x3, 0x0, 0x40) 3m2.787783951s ago: executing program 7 (id=3703): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(0x0, 0x9) 3m2.603565068s ago: executing program 7 (id=3704): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x80, 0x4002}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaeea, 0x800, 0xffffffff, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 3m2.097041438s ago: executing program 5 (id=3706): socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x20000400) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x38, 0x400000000d, 0xffff, 0x7, 0x3ff, 0x109, 0x8000000000000001, 0x1}, 0x0, 0x0, 0x0) 3m1.840423361s ago: executing program 7 (id=3707): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000f80)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900", 0x2a) 3m1.439726683s ago: executing program 36 (id=3707): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000f80)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900", 0x2a) 3m0.948710385s ago: executing program 5 (id=3711): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) 3m0.775069433s ago: executing program 5 (id=3712): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)="9327b2635bccd3c3e409869943df2225b3f35abed524ade56c98b401e02ba7df5df603c79a50ae449b8e5bc996542c72a0a0d53beece3216eea0e7d9bfee460dab2f888dd5397da95b85e49d7151f2860bb55278c2204e35f1065553dbce20faf75f40f7eb63e18890a3810b9caf6e44fc95afe85de1d14c732b9b4604c6bd31fe349f43db3bc9539e5d3d0b520d6aa2c76832546ce29bd45c34795caa38583ee623f05189ccd29148b8938c3ed770861f4ca18058699550d01e7e97a164e7be7cfd732d02995452481250f7cda10b3adaa14a065de645", 0xd7}, {&(0x7f0000000580)="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", 0xa32}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000040)=0x80000003, 0x4) listen(r2, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000100039042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x410c0}, 0x4044884) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) 2m59.838920164s ago: executing program 5 (id=3713): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(0x0, 0x9) 2m59.676074591s ago: executing program 5 (id=3715): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m59.459844148s ago: executing program 5 (id=3716): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc0000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m58.94111359s ago: executing program 37 (id=3716): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc0000000109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m47.642200791s ago: executing program 0 (id=3736): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) 2m47.447900787s ago: executing program 0 (id=3737): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x18) add_key(0x0, &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 2m45.098229876s ago: executing program 0 (id=3738): syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x41, 0x6, 0xcd, 0x40, 0x6cd, 0x10f, 0xd51b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0xb, 0xfd, 0x1, 0x33, 0x77, 0x61, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x400, 0x81, 0x40, 0x6}}]}}]}}]}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2m43.519838369s ago: executing program 0 (id=3741): r0 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x2c020400) ppoll(&(0x7f0000000200)=[{r0}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 2m42.435143584s ago: executing program 0 (id=3748): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 2m42.039617434s ago: executing program 0 (id=3752): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="110800000000000000003d0000008dfe01006e657464657673696d000000b0ff02006e657464657673696d3000000d0082006c325f64726f707300000000050087000400007fbd5f4100080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302b16e3f69123ba1c2e30000000000d0087006c324664726f70730000000002948e"], 0xb4}, 0x1, 0x0, 0x0, 0x81}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0c28bd7000fedbdf5530000000", @ANYRES32=r12, @ANYBLOB="0000000000620000200012800b00010065727370616e0000100002800400120006000e0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xd, 0xfff1}, {0xffff, 0x8}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x48, 0x85}}, @TCA_RATE={0x6, 0x5, {0x40, 0xdd}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8}) sendmsg$nl_route(r0, 0x0, 0x24040040) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000001300)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="3034f4f23ba2", {0x7, 0x13}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xe00, "80e016f160b9359800f203ca53c0a22c07473b2e82787d2135966d961190ac60098f73674326832c7c6f15deac702281530a4feaccfee02a966c577b197b5c00756d3445f4755457e093ae7818f72eea039e844593ff5ff8e6df2f6493943711387994cf48129730374c766c0dc701ff78dcb2d1e20d1d15e44d28f69dc696491229b15ae8d75a169ce27b68f1a51593d6d22dbc8e2ed6587f3ccaa1e6800c0700ed8f8bd4936dbed703811cb0894a976b44671e4ce5e6a9df53c747170897cc74c69cd01687396688f0deb5d37670af69209c7aafbcde981bf01efc40cbbd1c8c965ad0b1f5f5b76f4bfe85fcb452d7e3ac9b400f50b043f02ba424c38c84325b08e024f9e4dcf09557f7cdf8e4bd4aa67a166d665be278f40c1ef9de76d1082252d060a9c0888fb58a3b709bb67267511adc0190d395f8c268105819a0fc4fed96ca04ad66559399b5a6793f6ab0680cb432cfcfe24451520a0f71a90606066a8a0e2463ffc7feaef3d9dd47bf3f12ba39ff4f134e52ad4f4867f5f8196274ac0e1002e300211f4f3a13aca538a2f72ec837881ad8ccda92f68d41b317d3940c2ad566060fe4b878758cbb15b2ea4637ac72cf3fc3f0655fd549c7331a116cf7a47146fd40b586aa0a09930ce683e2f4f1300c1b71b2b73b3bb405c1ff8c54a6fb445696a0e121bb056fdc5b822524643c98ef5e49be210e0d5e8c5472a2c2ec1ead062e998ec1aabf94d8d19ab4357d3548b8bc62fa2277972350169ddddcf3ff3c1e36e55cae3fca4e3a8a5d9493593faf9609b537fd535f76a449fcccc41db85690e9c79887793b00260743cc2d0c86135b2b25c5c9de5d6710462af9314923a69289047a444355d563314b330d4da6b9909de120fc951b89ea6ef32049a22da04275977acf1d642713661b9ab67efbf9dc01c42bb88ba7b62d2802391864620d2bfd6e30ad6e406ea539e101d733907068666608cb98a7d91f504dc322bfcc7cbae1d7f328b2d642568f341a8949aa7654541b569ad3d201a759a32f950ba54b19e376874e9ab7a4a6aad6926326d4b8d2856df8615d86a7555c68892511f3c86d82cb0895258f290f169f0a0d06543df9ec14426d157106abe1696628fc1a065e40f5c98312564cf7c6874d47fd9079ecdb157e789e5ec68e06477a2129b410608bfe6ca64851e572589cd3af71b8f866e1990a89b21e5fc3b28b762836ecaa0d4007155b20d62b60f40474a0ab5f900ded6c7d6f50614eb4da035355601e0662512570d586d18c25a1e05b71637f2f31160b8f3c372dbd40b4626a884d49ffa7425657c46e3120f598d86a46cd9732dc0d42bf82b77db218ac3fe76b6141b5d4672d65b6be718521de8f607e5cbf1b8f083484437119cb3a6ff1a9c69859ac5955763aa5d4e77fa6e0fc9a5e5e432e65f1b0511a4527f857bd7d6b9f8efb3bbee2692670d6e942bd0846aec1d283c307307231686b6e575c29270b01b2789b3a3aa19aec771e041292654c5a192d2621cff2ad04bec75b0ef653dbf34242e7108cbc36397e0e3a22102b6cde5ec1a36ea949207bb3a7de3ae5fb5ec0ce1ebf26ff6f5bb44847f6315d66c1f35d7ea5666f3a298df3442641fdd2e167a0e87ec7f24a1abc399f9cd9116e96ad950fb410178822c335fc75d6216da47829ba1018f9af9208773753c483818f760e60a52acc08203522d541661f9109b4697329bce1888602d88ce0e363df4d35111ad253b58829fad2485bf314fed902acfc0191268304a1a8982d32560aa828c19135ae1e812ec54c8a14a8a91915ffc06b6e2bd4225dbf5ab4cd3139be559e30fe64a125ea34be18b009920acb696e8d4e3ea5de249be33eadc5e69043b155ac28ccef55903c6dbf79c55eb6c2fa580065460998574047bc626d06e588b702c7fa156c7d841d94c02564978a9a517dd2262f2539b2df450bddb6f5d9ef0864140b18ab3a41dc70264ef2d89ac38ebd0d64dde55c38be3ce33f3bedc84a19dff819d459dc70c2b81a002ea3218b90c061a5703f0e842f6b151a6fce72f51c15312120f1b203384427d7fa054ff9a9c663b86de531e263410b4d35366b9432b514fa8117285ef8d7642740bae7b735ad53187d2378265db0cb5f6dfdd46f703d82db2e179cb6bf3bce65d8e194c092f571c138780575469df76d80ac80135fe296f3487c6e94a4143d0dcc7a712129b6e0e6d2cbce8aa1f32f9dd1e7226a4ac52da9de46da63670cfd0ae834d8390949af598222658f3610543f20a55b5020599b2eca38bae972866fb5ba2a84512845fe03b9f7d6a3f5f37e02e26cdd385c2401962d60986b1a4ab46239e01ce5f1bbdcaf46524dd52e548e2a61853de71ea8eb3386add7093d7c033f4e3141a43e5c21df29611513aa40c755223fcf8d6aee8204141a892fffe313f45455c9d0b5ea34f04820600db8808b1d08586c11ed0745081fdd205b705685328f33094cfcd29d92c17462421b3277010052297e64cbbc082895ac9be992ad40358f6a79e799f792f327c72fbe377322295c622437a05616eb058025aa687239d4a03e8ac8c956c0af2a05f4977da11df13059be563bd1b3398853f884733b8b91e6e6fb6df6c22f3a05cade050fa42a3d3e3f8061cbdae507a0a39455839b69e7c9bf7050e0c40a5a9f5a17a8cc3a3ce7f3e8d9f0584462a4c4e10b620da48795ec3847a7e9723f3b0c84344f58f87a49ca23cd3a9de3a99e9ce38943eece54891747383f1e0d313d1e051850f9df714633baf8a70657364ba7e533a76b662becacda210a3d14b12a4dcc68750ac0c9e92d45d234c9f64c9c83623d7ddecf7ef5a31bfbcefa6b22ee7b15de975496c11f587e222bf4ec72ec9ee425fb3632a6a521deb93ec6702d473719db06ffad1c0fa784868f19bb1883a62bff74e50f6e2879550bea9a59c3fb1de7e366b6b6a86f3f347140dcc4d7d7d788feccfca4e2d8d8e78f6caa534ed7b1aeb1a84fd3a98865555638efd1f147d7bb8a19d3757c0cd1ffd176d28c135d0c16e9324cf01c1668dd1f52e6d40d87c833ff2ce5da06b658141290d03e172e736882fe91ab756fb757820dd4935186156fec404c63e1af21032d16e9f766cb042b199a982deefae4686791db4cd86af707779ebfae9a9bcb84e33ea509112e214bda26266e4897cae436450bd34211c2b9e6b32a6df9a90612368d11783c9fea5890920c093104338a3aa3ba2ef1d0c684525b9b93e4f260fdbc7f4dd316d302b18f65c28b54e574ae49a8c0cb8447d16619bf19f30171d9783a71c3090338e4b3e380000317c6948a43132fa378a01b79583aece845dc788c3044de6f864b3a19a33044fda43502574b5a29b27be4834c984455900939f2de3df03082c5180e077ac18cf59fd86ef63671cce97818dd32c151a585c5bc55f3a5e9a8a683378cbdcb7ccd03cb3610176b4d6184779f816bedf63a1d3d5b55b2c578cf03ce5650f374fce576a020eea265f8f1cffe076e99819d360114b7b954b84856e6a677c50fb044d8fc958d84a4743b8307adef0f2caee8cbad0335d0118c20b84b0e4f96f6083faba4b6c3cdd34dd470ba17d882749b7f606092494b6bca58b0eb6b10d6ded54c3a0cda18ad59a4c3d7841fbeb93559fbcbed7701bf96b986bc72f5d2133adc237fe3dd2eb6abad036710a6869b2131c14f7ff9bbe290593d7e5292f3b6fa11acd1ad089e5a9bb82430505c24305f15da63eaa2c513bc9512cb56fab2fe5f5397f171a0b1bd796d56ab48056b440d7b60d1fb1e182e7ae0d1ca90e49500c19877084df504f1c63382ad7f7e5abf8a89c720b0dca31da08315a0b05b294e33133dcae3a6a3b1aceab44ac14aa512da0d48716282721fbf193884042c0b1d58cbce8d52187d94d8a79f1d636d6fabc43b951edfb3eea29634457a9b352158922b4094401dba8c521e60b309d124bf823754a38c53d7c7faea36cbd7851c049c0e34ac4f5b76b2b3fca6a5885663174d7d95fbd4a8a59d909849cce8b2400a945c7f69148542e6f6dbc55aff83b88cfaed0690798de341ed38be7ca3af90df2cb43dca81832c451c33136c702258780955ad3fb5a0689b171b06f847245ed5c0c5d765b8cf17745d6456dd4f9dcb19171e6d8bf2e37929f7ea3160af81e91f278e7b63e8c1b2a3728d10754331000f58fc85604e2a6d91220b11f233cb070063bbcdc5c5e5defa69faacc81b94de76e67768cdd31c9981ef9d1b3610da59ad8c9c9a3e103bf1685631e521fc1d0a3ddeaa7053520f6d703ac14f45a09afa2c77410999e916c4050de496caf23bb78c4689655dd19c726d51cbee6481602118347f1dca43ad417a2df3dc06cadef4b585394536c10614cb6afc528c4c001b72c792569291622d4912cc1b517ad8c26db87d272c6d49565372169410694e19af943999aa473d5ab78ec2a979937c31057bab149e5dcace971074e4ffd880f8364d5590b91ace4ec23fdaf28a1705dd932ebb90c5ddb98fad2ee321c8d222b105f53b9e5168219a24d7fb524106361c0b50e9defa5da3a342fdaf0c630736e7fa2005cd3268ec84094a463b624e57fb17893d1eb7678bf99a907cc503c2ce923ec97d68da6e84da12ef4649633c7b1e6728ec6d955c296a6c4928fc7506921ecbd556b2be49570034a4bd6fcfc3fb5a84b53e62b9758d346489238446251b89ea9f83534804744e1f580616b0af2772fc257cf07f4db6cc01936678e132d5fb4c8153c7974e3e9bed720919b5f9bbace0ae5db035457f04c47e5846b7869b315599f811684928d5a872d2c99de28d0d9ce7e8dc26fd1f0555a2c58e80ffaf80ce14af5763f9d47c8294b61a6d553b9746b4e3516562bf6bde5b89a7da3d580f71efae25a54b1f9f8589f43d204c8baeabf3fbcc18df4c62885d9677f6f0971548bf8db45f7e8ae9bf76111c7c855faef04fcd4582d3d1889c24503f8386ad2dbbdc61a3d6877f0056fee75915a08de7a95c37095abee7add2fd21a6f8e4659a45f5a45056560fcddcfa5a9d3fa607a277c75bb600e8b7e9223fb5afa2"}, {@broadcast, @broadcast, 0xe4, "331d38e3b9c8dba8834305247e5190c11761f07509e583a8fe9eab2751705b9f35c3eab3eeed00733ad93b55169f93f724a1a75812ae072afebba03cee65a23c5cab27f801a5c3e96e9595aa95d043e6a999a75bca300942c12c8f246ab92165ab0fc0b11dcd4422cc354ce5eb8ad04b59adf74f8f99616bb19cef4770998a790e3e3ff5c373a720365e3a413536d901e898ef07dbacd54152ed30093d7213b3248bc4e7dffc9cf82b209fe65b335d16e483e150ecbf481cb1b9ebdabe1e25dfe185e3cc8dd8238032e70221f9f80a2564a235868e4d9df3b536d7dff39e55547a0c7a28"}, {@device_b, @broadcast, 0x40, "a4177460c447e42f0113144039d2281faf63f229e1137ec568a2c1ce2d712a51b976e2d63cc5a5f55d6a5addee23ec9d80c29b20c53118206982843c80fc5eff"}, {@broadcast, @device_a, 0xc9, "de8220c5db16e1270daf9f722bcf32fc9a1c68a0fbb3dde0fe6ad72ebcd1281d3842ea55a57ac38dac808ee423976d1165d1059606688e34ac2140bcc2231e66185dd05ea7aeca37f27ecf3aa18f41d954b30a04eda736139f37e553445f455b9fdf923963ea5e0fa296af3e7c432965df89f25a40e05a6dcb67540698a9a69ff6841f4c0a33f61528f7407f9bc8ae5565a5703cd6be3e1a4a5a03232aeca57c2ba9dfb82624fa269a837e6042420853c7fb59bda8319980e63930d750283bb027940fdcd9ceb0109d"}, {@device_b, @device_a, 0x70, "6cd320c5c709eac55dfb259f8e10532c661455a3c622f8c331678407f9390dac67931688fdccdc0439118e3dec52cd1487e6005d76023f2582738d9eed76ad1fd91d8d65f1f4c1f478cc059f4eac575928560aaeae84277edd1ef82645be1c7305c2a1016c6023395f439f362fc49308"}, {@device_a, @broadcast, 0x2c, "580b90b82fd4d07855b15cff563d3d9ef3859032c5e798fb8bb931658f21f8102b45e911146d4c88239ab50b"}]}, 0x1104) 2m26.915250175s ago: executing program 38 (id=3752): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r5, @ANYBLOB="110800000000000000003d0000008dfe01006e657464657673696d000000b0ff02006e657464657673696d3000000d0082006c325f64726f707300000000050087000400007fbd5f4100080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830000000000080001007063690011000200303030303a30303a31302b16e3f69123ba1c2e30000000000d0087006c324664726f70730000000002948e"], 0xb4}, 0x1, 0x0, 0x0, 0x81}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010003b0c28bd7000fedbdf5530000000", @ANYRES32=r12, @ANYBLOB="0000000000620000200012800b00010065727370616e0000100002800400120006000e0000000000"], 0x40}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xd, 0xfff1}, {0xffff, 0x8}, {0x1, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x48, 0x85}}, @TCA_RATE={0x6, 0x5, {0x40, 0xdd}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001812", @ANYRES32=r13, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003bc0)={'\x00', 0xbe4f, 0x0, 0x7, 0x9, 0xed8}) sendmsg$nl_route(r0, 0x0, 0x24040040) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000001300)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="3034f4f23ba2", {0x7, 0x13}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xe00, "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"}, {@broadcast, @broadcast, 0xe4, "331d38e3b9c8dba8834305247e5190c11761f07509e583a8fe9eab2751705b9f35c3eab3eeed00733ad93b55169f93f724a1a75812ae072afebba03cee65a23c5cab27f801a5c3e96e9595aa95d043e6a999a75bca300942c12c8f246ab92165ab0fc0b11dcd4422cc354ce5eb8ad04b59adf74f8f99616bb19cef4770998a790e3e3ff5c373a720365e3a413536d901e898ef07dbacd54152ed30093d7213b3248bc4e7dffc9cf82b209fe65b335d16e483e150ecbf481cb1b9ebdabe1e25dfe185e3cc8dd8238032e70221f9f80a2564a235868e4d9df3b536d7dff39e55547a0c7a28"}, {@device_b, @broadcast, 0x40, "a4177460c447e42f0113144039d2281faf63f229e1137ec568a2c1ce2d712a51b976e2d63cc5a5f55d6a5addee23ec9d80c29b20c53118206982843c80fc5eff"}, {@broadcast, @device_a, 0xc9, "de8220c5db16e1270daf9f722bcf32fc9a1c68a0fbb3dde0fe6ad72ebcd1281d3842ea55a57ac38dac808ee423976d1165d1059606688e34ac2140bcc2231e66185dd05ea7aeca37f27ecf3aa18f41d954b30a04eda736139f37e553445f455b9fdf923963ea5e0fa296af3e7c432965df89f25a40e05a6dcb67540698a9a69ff6841f4c0a33f61528f7407f9bc8ae5565a5703cd6be3e1a4a5a03232aeca57c2ba9dfb82624fa269a837e6042420853c7fb59bda8319980e63930d750283bb027940fdcd9ceb0109d"}, {@device_b, @device_a, 0x70, "6cd320c5c709eac55dfb259f8e10532c661455a3c622f8c331678407f9390dac67931688fdccdc0439118e3dec52cd1487e6005d76023f2582738d9eed76ad1fd91d8d65f1f4c1f478cc059f4eac575928560aaeae84277edd1ef82645be1c7305c2a1016c6023395f439f362fc49308"}, {@device_a, @broadcast, 0x2c, "580b90b82fd4d07855b15cff563d3d9ef3859032c5e798fb8bb931658f21f8102b45e911146d4c88239ab50b"}]}, 0x1104) 1m23.90449431s ago: executing program 2 (id=4100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m23.311677957s ago: executing program 2 (id=4103): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) writev(r0, 0x0, 0x0) 1m23.007020342s ago: executing program 2 (id=4105): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m22.607401633s ago: executing program 2 (id=4109): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bind$packet(r2, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="7404000014"], 0x474}], 0x1, 0x0, 0x0, 0xc014}, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0xf9, 0x1, 0x0, @loopback, @private2, 0x8, 0x40, 0x1, 0x3}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c80001800378013000300717472283414d6bba919736d34290000"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 1m19.309619146s ago: executing program 2 (id=4121): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m18.763742575s ago: executing program 2 (id=4122): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1m3.541758196s ago: executing program 39 (id=4122): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 11.129954546s ago: executing program 8 (id=4392): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x402, 0xc1) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) times(&(0x7f0000002280)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 10.544689176s ago: executing program 1 (id=4394): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a310000000008000340000000000800018000000000380002800800034000000000080001800000000008000340000000000800034000000000090002"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff0000050245", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 8.276282278s ago: executing program 3 (id=4400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x40000) 8.009691489s ago: executing program 9 (id=4401): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, &(0x7f0000001200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={@multicast1, 0x0, 0x0, 0x70, 0x0, [{@remote}, {}, {@multicast1}, {@multicast2}, {@loopback}, {@dev}, {@empty}]}}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 7.851870522s ago: executing program 3 (id=4402): syz_usb_connect(0x1, 0x5d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cd0361086d040e0ab55f0102030109024b0001020000000904be000103"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 7.431846838s ago: executing program 1 (id=4404): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz1\x00', {0x3, 0xabd, 0x9, 0x43}, 0x4e, [0xffffff00, 0x6, 0x3, 0xb1b6, 0x932, 0x0, 0x7, 0x80000001, 0x3, 0x6, 0x0, 0x5, 0x3, 0x0, 0x5, 0xd088, 0x3ff, 0x1, 0x401, 0x7, 0x764, 0x6, 0x0, 0x3, 0x1eb, 0x9, 0x4, 0xc623, 0x7, 0xffff, 0xe0000000, 0x3, 0x6, 0x5, 0x4, 0x8, 0x10001, 0xd19, 0xff, 0x5, 0x2, 0xf, 0x1, 0x2, 0x1, 0x8, 0x21, 0x4, 0x80000001, 0x5, 0x1, 0x7fff, 0xffffffff, 0x9, 0xffffff36, 0x9, 0x2, 0x8000, 0x23c2, 0x81, 0xd6, 0x4, 0x8, 0x7f], [0x9, 0x9, 0x80, 0x7, 0xe, 0x40, 0xf, 0x5, 0x9bad, 0x4, 0x9, 0x1, 0x1, 0xffff, 0x2, 0x6, 0x6, 0x3, 0x2, 0xffffb510, 0x10, 0x5dc3, 0x7, 0x1, 0x100, 0x2, 0x3ff, 0x3, 0x9, 0xd, 0x1000, 0x6, 0x2, 0x367, 0x8, 0x3, 0x1, 0x7ff, 0x6, 0x7, 0x7c9, 0x9, 0xba4, 0xe3f, 0x401, 0x1, 0xe, 0xcc, 0x1, 0x5e3, 0x4, 0xfffffff7, 0x0, 0x0, 0x1, 0x10001, 0x6, 0xa, 0x3, 0x5aa, 0x771, 0x0, 0x7ff, 0x7], [0x4ff, 0x7, 0xfffffff7, 0x1, 0x9, 0x40, 0x2, 0x7, 0x6, 0x3, 0x0, 0x0, 0x100, 0x1, 0x7, 0x8001, 0x8, 0x401, 0x6, 0xa7, 0x3, 0x4, 0x7c, 0xffff, 0x0, 0x88c8, 0x2, 0x5, 0x6, 0x1, 0xffffffff, 0x5, 0xfffffff9, 0x5, 0x3, 0x6, 0x3, 0x1, 0xf, 0x5, 0xc, 0xa12, 0x0, 0x1, 0x0, 0xd, 0x0, 0x1, 0x0, 0x8, 0x7ff, 0x9, 0xd77, 0x2, 0x0, 0x8, 0x9, 0x3, 0x4, 0x46c, 0x0, 0x0, 0xffffffff, 0x3], [0x0, 0x7, 0x8, 0x3, 0x8000, 0x2, 0xfffffffd, 0xab7, 0x5, 0x401, 0x7, 0x8, 0x4, 0x15dc, 0x7, 0x40, 0x1, 0x7f, 0xfffffffd, 0x1f6f, 0x10000, 0x5, 0x0, 0x1, 0x80, 0x3, 0x8, 0x10001, 0x9696, 0x3, 0xf462, 0x4, 0x2, 0x4, 0x120e212f, 0x7f, 0x400, 0xd75b, 0x1de9, 0x2, 0x6, 0x8, 0x19, 0xffffffff, 0x9, 0x7, 0x0, 0x200, 0x8, 0x98, 0x0, 0x0, 0x3, 0xffff, 0x5, 0x1, 0x7cc, 0x0, 0x1, 0x80000000, 0x7292, 0xc, 0x1, 0x9]}, 0x45c) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x80, 0x4002}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x747a, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 6.955884924s ago: executing program 1 (id=4405): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x8bc19000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={0x0}) 6.425100218s ago: executing program 8 (id=4407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000400)={0x0, 0x0, 0x7316}, 0x8) 5.98042105s ago: executing program 3 (id=4408): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000140)='shortad', &(0x7f0000000180)='O', 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x4000, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x26, 0x0) fcntl$lock(r8, 0x25, 0x0) fcntl$lock(r8, 0x25, 0x0) connect$vsock_stream(r8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r9, 0x180000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/address_bits', 0x0, 0x0) 5.760578876s ago: executing program 6 (id=4409): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @time}) 5.413389044s ago: executing program 9 (id=4411): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mlockall(0x2) 5.368608219s ago: executing program 6 (id=4413): sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x160}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32=r1], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) 5.329732461s ago: executing program 8 (id=4414): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x4, {0x4, 0x4ffd271b2776e994, 'th'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.543132776s ago: executing program 9 (id=4415): r0 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc53a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x8, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x20, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe, 0x0, 0x4}}}}}]}}]}}, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xb933, 0x8, 0xfffffffd, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 4.407722389s ago: executing program 1 (id=4416): r0 = socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x28, 0x0, 0x0) 4.395426171s ago: executing program 6 (id=4417): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz1\x00', {0x3, 0xabd, 0x9, 0x43}, 0x4e, [0xffffff00, 0x6, 0x3, 0xb1b6, 0x932, 0x0, 0x7, 0x80000001, 0x3, 0x6, 0x0, 0x5, 0x3, 0x0, 0x5, 0xd088, 0x3ff, 0x1, 0x401, 0x7, 0x764, 0x6, 0x0, 0x3, 0x1eb, 0x9, 0x4, 0xc623, 0x7, 0xffff, 0xe0000000, 0x3, 0x6, 0x5, 0x4, 0x8, 0x10001, 0xd19, 0xff, 0x5, 0x2, 0xf, 0x1, 0x2, 0x1, 0x8, 0x21, 0x4, 0x80000001, 0x5, 0x1, 0x7fff, 0xffffffff, 0x9, 0xffffff36, 0x9, 0x2, 0x8000, 0x23c2, 0x81, 0xd6, 0x4, 0x8, 0x7f], [0x9, 0x9, 0x80, 0x7, 0xe, 0x40, 0xf, 0x5, 0x9bad, 0x4, 0x9, 0x1, 0x1, 0xffff, 0x2, 0x6, 0x6, 0x3, 0x2, 0xffffb510, 0x10, 0x5dc3, 0x7, 0x1, 0x100, 0x2, 0x3ff, 0x3, 0x9, 0xd, 0x1000, 0x6, 0x2, 0x367, 0x8, 0x3, 0x1, 0x7ff, 0x6, 0x7, 0x7c9, 0x9, 0xba4, 0xe3f, 0x401, 0x1, 0xe, 0xcc, 0x1, 0x5e3, 0x4, 0xfffffff7, 0x0, 0x0, 0x1, 0x10001, 0x6, 0xa, 0x3, 0x5aa, 0x771, 0x0, 0x7ff, 0x7], [0x4ff, 0x7, 0xfffffff7, 0x1, 0x9, 0x40, 0x2, 0x7, 0x6, 0x3, 0x0, 0x0, 0x100, 0x1, 0x7, 0x8001, 0x8, 0x401, 0x6, 0xa7, 0x3, 0x4, 0x7c, 0xffff, 0x0, 0x88c8, 0x2, 0x5, 0x6, 0x1, 0xffffffff, 0x5, 0xfffffff9, 0x5, 0x3, 0x6, 0x3, 0x1, 0xf, 0x5, 0xc, 0xa12, 0x0, 0x1, 0x0, 0xd, 0x0, 0x1, 0x0, 0x8, 0x7ff, 0x9, 0xd77, 0x2, 0x0, 0x8, 0x9, 0x3, 0x4, 0x46c, 0x0, 0x0, 0xffffffff, 0x3], [0x0, 0x7, 0x8, 0x3, 0x8000, 0x2, 0xfffffffd, 0xab7, 0x5, 0x401, 0x7, 0x8, 0x4, 0x15dc, 0x7, 0x40, 0x1, 0x7f, 0xfffffffd, 0x1f6f, 0x10000, 0x5, 0x0, 0x1, 0x80, 0x3, 0x8, 0x10001, 0x9696, 0x3, 0xf462, 0x4, 0x2, 0x4, 0x120e212f, 0x7f, 0x400, 0xd75b, 0x1de9, 0x2, 0x6, 0x8, 0x19, 0xffffffff, 0x9, 0x7, 0x0, 0x200, 0x8, 0x98, 0x0, 0x0, 0x3, 0xffff, 0x5, 0x1, 0x7cc, 0x0, 0x1, 0x80000000, 0x7292, 0xc, 0x1, 0x9]}, 0x45c) read$FUSE(r0, &(0x7f000000e280)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x80, 0x4002}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x747a, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) 4.127849697s ago: executing program 1 (id=4419): socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x402, 0xc1) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 3.983367638s ago: executing program 4 (id=4420): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x187}], 0x1}, 0xff00) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000340)) 3.983109658s ago: executing program 6 (id=4421): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0xb6, &(0x7f0000000340)=""/182}]}) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 3.157686646s ago: executing program 4 (id=4422): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2.343907884s ago: executing program 8 (id=4423): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)="9327b2635bccd3c3e409869943df2225b3f35abed524ade56c98b401e02ba7df5df603c79a50ae449b8e5bc996542c72a0a0d53beece3216eea0e7d9bfee460dab2f888dd5397da95b85e49d7151f2860bb55278c2204e35f1065553dbce20faf75f40f7eb63e18890a3810b9caf6e44fc95afe85de1d14c732b9b4604c6bd31fe349f43db3bc9539e5d3d0b520d6aa2c76832546ce29bd45c34795caa38583ee623f05189ccd29148b8938c3ed770861f4ca18058699550d01e7e97a164e7be7cfd732d02995452481250f7cda10b3adaa14a065de645", 0xd7}, {&(0x7f0000000580)="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", 0xa32}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000fc0c000900090000060015"], 0x38}}, 0x2000a080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.205509907s ago: executing program 9 (id=4424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) 1.913568615s ago: executing program 3 (id=4425): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x1ff}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c1000000000000000", 0x56}], 0x1) 1.791896995s ago: executing program 9 (id=4426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 1.760820576s ago: executing program 4 (id=4427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000851}, 0x40c08c4) 1.552135534s ago: executing program 3 (id=4428): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f000000b580)=""/4110, 0x100e}, {&(0x7f0000000900)=""/85, 0x55}, {&(0x7f0000000700)=""/47, 0x2f}, {&(0x7f00000006c0)=""/23, 0x17}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000b40)=""/206, 0xce}], 0x6}, 0x6}], 0x1, 0x2202, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], 0x18}], 0x1}, 0x2000080) 1.347808477s ago: executing program 4 (id=4429): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20024084, &(0x7f00000018c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000000c0)=0x101, 0x4) sendto$inet(r0, &(0x7f0000000280)="b2", 0x1, 0x0, 0x0, 0x0) 1.270379885s ago: executing program 8 (id=4430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) fanotify_init(0xf00, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x2) fallocate(r5, 0x0, 0x0, 0x1) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x9, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.078838191s ago: executing program 1 (id=4431): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80084) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0x5, 0x9, 0x2, 0x80000001}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r4, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast2, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) r6 = socket(0x8, 0x3, 0xf29b) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c000000021400002bbd7000ffdbdf", @ANYRES32, @ANYRES32, @ANYBLOB="31000000000900020073797a31000000080000000000000000000000000000004e6d7a142f7ffeb697c63e0000000055783f3e6cb9aa576ba3b8abb8ffff249f4db82f774cfdd93c114ffea795d0bced443723c40cef4dcae36b3f3648756fafdedbf2ddb3a93c077583053865450eb5397864a1127f2a51ed17a5a7eebb7d3b970624ab05cbff03000078d55b1a04078ea8c3ab0dab22ed5208eb1da4f522ee39a25faa51bfcd728e75a27293f03c1446d42bceff562589123e"], 0x6c}, 0x1, 0x0, 0x0, 0x40090}, 0x28008018) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.036620354s ago: executing program 4 (id=4432): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0x8940) socket$packet(0x11, 0x3, 0x300) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16a", 0x51}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0xdc}, {&(0x7f0000000480)="11", 0x1}], 0x3) 217.703537ms ago: executing program 6 (id=4433): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xcd}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 157.051205ms ago: executing program 3 (id=4434): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d", 0x24a}], 0x1}, 0xff00) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0xc0109207, &(0x7f0000000340)) 156.679173ms ago: executing program 9 (id=4435): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x184, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x154, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0xffffffff}, @TCA_FLOW_EMATCHES={0x128, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0xe81c}, {0x7, 0xc27e, 0x9, 0x7fff}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x4}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147bab4e8cc66"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x81}, {0x10, 0xd, 0x6, 0xd4c}}}]}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x100}, {0xffffffff, 0xffffff81, 0x7, 0x1, 0x4}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x2}, {0x80, 0x8, 0x6, 0x4, 0x6}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x8}, {0x3, 0x2, 0x2, "2096"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4, 0x8, 0x3}, {0x2, 0x5, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x7fff}, {{0x3, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x28}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x3, 0x2}, {0x4, 0x0, 0x9, 0xffffffff}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7fff, 0x1, 0x8}, {0xc6, 0xdb, 0x200, 0x9, 0x5, 0x1, 0x1}}}]}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x184}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 156.045141ms ago: executing program 8 (id=4436): r0 = syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc53a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x80, [{{0x9, 0x4, 0x0, 0x8, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x20, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe, 0x0, 0x4}}}}}]}}]}}, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xb933, 0x8, 0xfffffffd, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 36.651564ms ago: executing program 6 (id=4437): r0 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = fsopen(&(0x7f0000000100)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000140)='shortad', &(0x7f0000000180)='O', 0x1) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x88f, &(0x7f0000000400)={0x0, 0xaee2, 0x4000, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) bind$inet6(r7, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r8, 0x26, 0x0) fcntl$lock(r8, 0x25, 0x0) fcntl$lock(r8, 0x25, 0x0) connect$vsock_stream(r8, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x55c, 0x20100) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, r9, 0x180000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/address_bits', 0x0, 0x0) 0s ago: executing program 4 (id=4438): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): failed: -4 [ 646.261175][T15910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 646.267778][T15910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 646.281793][T15910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 646.324801][T15910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 646.343026][T15910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 646.366794][T15910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 646.672983][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 646.798037][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.851265][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.912847][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 646.920132][T15959] loop4: detected capacity change from 0 to 256 [ 647.024703][T14594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.046502][T15959] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 647.089840][T14594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.196621][ T31] audit: type=1800 audit(1767236424.340:67): pid=15959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3763" name="bus" dev="loop4" ino=1048679 res=0 errno=0 [ 647.392655][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 647.523946][ T6031] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 647.683444][T15975] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3717'. [ 647.767809][ T6031] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 647.793648][ T6031] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.894530][ T6031] usb 9-1: config 0 descriptor?? [ 647.907182][T15975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 647.914628][T15975] IPv6: NLM_F_CREATE should be set when creating new route [ 647.921892][T15975] IPv6: NLM_F_CREATE should be set when creating new route [ 647.929181][T15975] IPv6: NLM_F_CREATE should be set when creating new route [ 648.192093][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 648.273390][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 648.352061][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 648.413095][ T31] audit: type=1326 audit(1767236425.560:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15982 comm="syz.9.3770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae0b38f749 code=0x0 [ 648.752387][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 648.772054][ T5935] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 648.924534][ T5935] usb 10-1: Using ep0 maxpacket: 8 [ 648.942755][ T5935] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 648.967959][ T5935] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 648.992166][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 649.005024][ T5935] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.020071][ T5935] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.033625][ T5935] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.049804][ T5935] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 649.059103][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.090752][ T6031] usb 9-1: Cannot set autoneg [ 649.100447][ T6031] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 649.282521][ T5935] usb 10-1: usb_control_msg returned -32 [ 649.294136][ T6031] usb 9-1: USB disconnect, device number 2 [ 649.311333][ T5935] usbtmc 10-1:16.0: can't read capabilities [ 649.472180][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 650.273173][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.344064][ T6022] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 650.362768][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 650.432430][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 650.448803][T16030] usbtmc 10-1:16.0: usb_control_msg returned -32 [ 650.582864][ T6022] usb 3-1: Using ep0 maxpacket: 8 [ 650.599479][ T6022] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 650.638221][ T6022] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 650.661494][ T6022] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.707546][ T6022] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 650.749834][ T6022] usb 3-1: config 0 interface 0 has no altsetting 0 [ 650.765697][ T6022] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 650.780689][ T6022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.809039][ T6022] usb 3-1: config 0 descriptor?? [ 650.835205][ T5832] Bluetooth: hci5: command 0x0c1a tx timeout [ 651.062521][ T6022] usbhid 3-1:0.0: can't add hid device: -71 [ 651.071984][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 651.092351][ T6022] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 651.126268][ T6022] usb 3-1: USB disconnect, device number 59 [ 651.562180][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 651.805282][ T6037] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 651.838673][ T9685] usb 10-1: USB disconnect, device number 2 [ 651.997486][ T6037] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 652.051336][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.087362][T16060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 652.094081][ T6037] usb 5-1: Product: syz [ 652.094633][T16060] IPv6: NLM_F_CREATE should be set when creating new route [ 652.105957][T16060] IPv6: NLM_F_CREATE should be set when creating new route [ 652.113169][T16060] IPv6: NLM_F_CREATE should be set when creating new route [ 652.139597][ T6037] usb 5-1: Manufacturer: syz [ 652.155825][ T6037] usb 5-1: SerialNumber: syz [ 652.200902][ T6037] hub 5-1:24.0: bad descriptor, ignoring hub [ 652.219867][ T6037] hub 5-1:24.0: probe with driver hub failed with error -5 [ 652.344653][T16067] loop8: detected capacity change from 0 to 256 [ 652.353936][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.413071][T16067] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 652.414135][ T6037] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 652.452041][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 652.517953][ T6037] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.522436][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 652.581251][ T31] audit: type=1800 audit(1767236429.720:69): pid=16067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3790" name="bus" dev="loop8" ino=1048691 res=0 errno=0 [ 652.606772][ T6037] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 652.639172][ T6037] usb 5-1: media controller created [ 652.727429][ T6037] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 652.919274][ T6037] DVB: Unable to find symbol dib7000p_attach() [ 652.943756][ T6037] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 653.141971][ T6037] rc_core: IR keymap rc-dib0700-rc5 not found [ 653.158288][ T6037] Registered IR keymap rc-empty [ 653.163898][ T6037] dvb-usb: could not initialize remote control. [ 653.181983][ T6037] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 653.218107][ T6037] usb 5-1: USB disconnect, device number 57 [ 653.296979][ T31] audit: type=1326 audit(1767236430.380:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 653.354811][ T31] audit: type=1326 audit(1767236430.380:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 653.510968][ T31] audit: type=1326 audit(1767236430.380:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 653.548772][ T31] audit: type=1326 audit(1767236430.380:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 653.666762][ T6037] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 653.796612][ T31] audit: type=1326 audit(1767236430.380:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 653.871499][ T31] audit: type=1326 audit(1767236430.380:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 654.044402][ T31] audit: type=1326 audit(1767236430.380:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 654.136854][ T31] audit: type=1326 audit(1767236430.380:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 654.220773][ T31] audit: type=1326 audit(1767236430.380:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.8.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 654.357182][ T6017] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 654.502383][ T7832] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 654.512357][ T6017] usb 5-1: Using ep0 maxpacket: 8 [ 654.523290][ T6017] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 654.531485][ T6017] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.672162][ T7832] usb 7-1: Using ep0 maxpacket: 8 [ 654.697563][ T7832] usb 7-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 654.699000][ T6017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 654.765599][ T6017] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 654.797735][ T7832] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 654.807628][ T6017] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.822113][ T7832] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.822144][ T7832] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 654.822179][ T7832] usb 7-1: config 0 interface 0 has no altsetting 0 [ 654.822222][ T7832] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 654.822251][ T7832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.885416][ T7832] usb 7-1: config 0 descriptor?? [ 655.026540][ T6017] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 655.111086][ T7832] usbhid 7-1:0.0: can't add hid device: -71 [ 655.117618][ T7832] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 655.140185][ T7832] usb 7-1: USB disconnect, device number 26 [ 655.233758][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.530948][ T6017] usb 5-1: usb_control_msg returned -32 [ 655.576478][ T6017] usbtmc 5-1:16.0: can't read capabilities [ 656.693573][T16144] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 658.104260][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 658.116143][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 658.129998][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 658.140785][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 658.149266][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 658.368725][T16176] netlink: set zone limit has 4 unknown bytes [ 658.442761][ T7755] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 658.457285][ T1220] usb 5-1: USB disconnect, device number 58 [ 658.649595][ T7755] usb 9-1: config 0 has an invalid interface number: 11 but max is 0 [ 658.699885][ T7755] usb 9-1: config 0 has no interface number 0 [ 658.789576][ T7755] usb 9-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 658.888218][ T7755] usb 9-1: config 0 interface 11 has no altsetting 0 [ 658.931290][ T7755] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 658.968131][ T7755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.069813][ T7755] usb 9-1: config 0 descriptor?? [ 659.110191][T16168] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 659.175839][ T7755] keyspan 9-1:0.11: Keyspan 2 port adapter converter detected [ 659.222384][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 87 [ 659.263515][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 81 [ 659.295904][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 82 [ 659.340569][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 1 [ 659.381732][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 2 [ 659.415446][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 85 [ 659.454102][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 5 [ 659.504884][ T7755] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 659.560955][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 83 [ 659.602592][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 84 [ 659.629114][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3 [ 659.664066][T16172] chnl_net:caif_netlink_parms(): no params data found [ 659.677350][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4 [ 659.711830][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 86 [ 659.756188][ T7755] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 6 [ 659.792347][ T5828] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 659.804655][ T7755] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 659.876938][ T7755] usb 9-1: USB disconnect, device number 3 [ 659.926631][ T7755] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 659.962223][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 659.981365][ T5828] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 660.014612][ T7755] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 660.050490][ T5828] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 660.086065][ T7755] keyspan 9-1:0.11: device disconnected [ 660.119172][ T5828] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.202061][ T5832] Bluetooth: hci6: command tx timeout [ 660.225849][ T5828] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 660.265921][ T5828] usb 5-1: config 0 interface 0 has no altsetting 0 [ 660.285415][ T5828] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 660.309598][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.349989][ T5828] usb 5-1: config 0 descriptor?? [ 660.367742][T16172] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.397812][T16172] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.416005][T16172] bridge_slave_0: entered allmulticast mode [ 660.443181][T16172] bridge_slave_0: entered promiscuous mode [ 660.470532][T16172] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.490076][T16172] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.515535][T16172] bridge_slave_1: entered allmulticast mode [ 660.550752][T16172] bridge_slave_1: entered promiscuous mode [ 660.659140][ T5828] usbhid 5-1:0.0: can't add hid device: -71 [ 660.718482][ T5828] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 660.762654][ T5828] usb 5-1: USB disconnect, device number 59 [ 660.843154][T16211] batadv0: entered promiscuous mode [ 660.862448][T16211] macsec1: entered allmulticast mode [ 660.879852][T16211] batadv0: entered allmulticast mode [ 660.891744][T16211] batadv0: left allmulticast mode [ 660.912651][T16211] batadv0: left promiscuous mode [ 660.993022][T16172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.038369][T16172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.287758][T16223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3821'. [ 661.291112][T16172] team0: Port device team_slave_0 added [ 661.390840][T16228] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3821'. [ 661.458602][T16172] team0: Port device team_slave_1 added [ 661.577305][T16228] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.586107][T16228] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.656263][T16172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.770649][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.899999][T16172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.920816][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 661.920846][ T31] audit: type=1326 audit(1767236439.060:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16240 comm="syz.4.3826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f347a98f749 code=0x0 [ 661.986159][T16172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.004043][T16172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.150495][T16172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.272626][ T5832] Bluetooth: hci6: command tx timeout [ 662.282607][ T5828] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 662.436996][T16172] hsr_slave_0: entered promiscuous mode [ 662.442063][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 662.468371][T16172] hsr_slave_1: entered promiscuous mode [ 662.474404][ T5828] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 662.494016][ T5828] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.512356][ T9685] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 662.540256][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 662.551450][T16172] debugfs: 'hsr0' already exists in 'hsr' [ 662.567579][T16172] Cannot create hsr debugfs directory [ 662.581991][ T5828] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 662.623764][ T5828] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.674444][ T9685] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.684889][ T9685] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 662.686214][ T7755] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 662.724813][ T5828] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 662.753309][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.778359][ T9685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 662.834573][ T9685] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 662.883073][ T9685] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 662.932995][ T7755] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 662.944903][ T7755] usb 3-1: config 0 has no interface number 0 [ 662.945191][ T9685] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 662.951040][ T7755] usb 3-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 663.016872][ T5828] usb 5-1: usb_control_msg returned -32 [ 663.031566][ T9685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 663.051888][ T9685] usb 7-1: Product: syz [ 663.059704][ T9685] usb 7-1: Manufacturer: syz [ 663.065332][ T9685] usb 7-1: SerialNumber: syz [ 663.074865][ T5828] usbtmc 5-1:16.0: can't read capabilities [ 663.092140][ T7755] usb 3-1: config 0 interface 11 has no altsetting 0 [ 663.134920][ T9685] usb 7-1: config 0 descriptor?? [ 663.161997][ T7755] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 663.196111][ T7755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.226771][ T7755] usb 3-1: config 0 descriptor?? [ 663.251648][T16248] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 663.265726][ T7755] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 663.312997][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 663.360266][ T9685] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 663.370840][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 663.419663][ T9685] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 663.419718][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 663.484268][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 663.521164][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 663.560200][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 663.574324][ T9685] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 663.576777][T16172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.593109][ T9685] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 663.605486][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 663.631302][ T7755] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 663.663742][ T9685] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 663.674187][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 663.745925][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 663.767882][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 663.778043][ T9685] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 663.792210][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 663.826162][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86 [ 663.865770][ T7755] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 663.913207][ T7755] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 663.967953][T16172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.982344][ T7755] usb 3-1: USB disconnect, device number 60 [ 664.021834][ T7755] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 664.090556][T16262] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 664.096359][ T7755] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 664.157062][T16266] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 664.162404][ T7755] keyspan 3-1:0.11: device disconnected [ 664.280739][T16172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.351989][ T5832] Bluetooth: hci6: command tx timeout [ 664.464204][T16172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.727651][T16280] loop9: detected capacity change from 0 to 256 [ 664.794973][T16280] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 664.996994][T16172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 665.017822][ T31] audit: type=1800 audit(1767236442.160:116): pid=16280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3834" name="bus" dev="loop9" ino=1048698 res=0 errno=0 [ 665.061436][T16172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 665.251517][T16172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 665.343052][T16172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 665.462094][ T7755] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 665.505652][ T972] usb 5-1: USB disconnect, device number 60 [ 665.652800][ T7755] usb 9-1: Using ep0 maxpacket: 8 [ 665.679328][ T7755] usb 9-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 665.731721][ T7755] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 665.769465][T16172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.781351][ T7755] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.818257][ T7755] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 665.840371][ T7755] usb 9-1: config 0 interface 0 has no altsetting 0 [ 665.851204][T16172] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.878594][ T7755] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 665.920703][ T7755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.925457][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.936308][ T8331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.974974][ T7755] usb 9-1: config 0 descriptor?? [ 666.035826][ T6037] usb 7-1: USB disconnect, device number 27 [ 666.052418][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.059660][ T8331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.348043][ T7755] usbhid 9-1:0.0: can't add hid device: -71 [ 666.373174][ T7755] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 666.414767][ T7755] usb 9-1: USB disconnect, device number 4 [ 666.434229][ T5832] Bluetooth: hci6: command tx timeout [ 666.583166][ T6037] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 666.772925][ T6037] usb 7-1: Using ep0 maxpacket: 8 [ 666.786619][ T6037] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 666.828732][ T6037] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 666.863120][ T6037] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 666.899739][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.918025][ T6037] usb 7-1: Product: syz [ 666.951383][ T6037] usb 7-1: Manufacturer: syz [ 666.965346][ T6037] usb 7-1: SerialNumber: syz [ 666.990634][ T6037] usb 7-1: config 0 descriptor?? [ 667.052648][T16172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.303625][ T6037] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 668.183164][T16172] veth0_vlan: entered promiscuous mode [ 668.254048][T16172] veth1_vlan: entered promiscuous mode [ 668.352021][ T6037] usb 5-1: Using ep0 maxpacket: 8 [ 668.371629][ T6037] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 668.383282][T16172] veth0_macvtap: entered promiscuous mode [ 668.402657][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.417960][T16172] veth1_macvtap: entered promiscuous mode [ 668.428389][ T6037] usb 5-1: Product: syz [ 668.450441][ T6037] usb 5-1: Manufacturer: syz [ 668.465122][ T6037] usb 5-1: SerialNumber: syz [ 668.488536][ T6037] usb 5-1: config 0 descriptor?? [ 668.494196][T16172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.511282][ T6037] gspca_main: se401-2.14.0 probing 047d:5003 [ 668.535280][T16172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.574875][T15493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.617686][T15493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.655703][T15493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.746448][T15493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.928710][T15493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.972606][T15493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.053331][T15493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.081692][T15493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.233560][ T9685] usb 7-1: USB disconnect, device number 28 [ 669.422273][ T6031] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 669.528575][ T6037] gspca_se401: read req failed req 0x06 error -19 [ 669.558739][ T6037] usb 5-1: USB disconnect, device number 61 [ 669.595932][ T6031] usb 3-1: device descriptor read/64, error -71 [ 669.685558][T16372] netlink: 5128 bytes leftover after parsing attributes in process `syz.9.3853'. [ 669.723205][T16372] netlink: 5128 bytes leftover after parsing attributes in process `syz.9.3853'. [ 669.772011][T16372] netlink: 584 bytes leftover after parsing attributes in process `syz.9.3853'. [ 669.854002][ T6031] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 671.199192][ T6017] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 671.207740][ T6031] usb 3-1: device descriptor read/64, error -71 [ 671.252074][ T5927] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 671.372725][ T6031] usb usb3-port1: attempt power cycle [ 671.418896][ T6017] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.473084][ T6017] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 671.492508][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 671.502468][ T6017] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 671.511614][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 671.521612][ T5927] usb 2-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 671.552257][ T6017] usb 10-1: SerialNumber: syz [ 671.575015][ T5927] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 671.613791][ T5927] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.669348][ T5927] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 671.732050][ T6031] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 671.732403][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 671.763088][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 671.765215][ T6031] usb 3-1: device descriptor read/8, error -71 [ 671.788142][ T6017] usb 10-1: 0:2 : does not exist [ 671.792014][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.812222][ T6017] usb 10-1: unit 5 not found! [ 671.856005][ T6017] usb 10-1: USB disconnect, device number 3 [ 671.876890][ T5927] usb 2-1: config 0 descriptor?? [ 671.920716][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.042958][ T6031] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 672.072992][ T6031] usb 3-1: device descriptor read/8, error -71 [ 672.111174][T16408] input: syz0 as /devices/virtual/input/input18 [ 672.195956][ T6031] usb usb3-port1: unable to enumerate USB device [ 672.267100][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 672.328212][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 672.379252][ T5927] usb 2-1: USB disconnect, device number 61 [ 672.812005][ T6031] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 672.982063][ T6031] usb 10-1: Using ep0 maxpacket: 8 [ 672.999573][ T6031] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 673.017140][ T6031] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.030931][ T6031] usb 10-1: Product: syz [ 673.073310][ T6031] usb 10-1: Manufacturer: syz [ 673.084232][ T6031] usb 10-1: SerialNumber: syz [ 673.098444][ T6031] usb 10-1: config 0 descriptor?? [ 673.112179][ T6031] gspca_main: se401-2.14.0 probing 047d:5003 [ 673.999046][T16455] netlink: 'syz.8.3874': attribute type 4 has an invalid length. [ 674.161642][ T6031] gspca_se401: read req failed req 0x06 error -19 [ 674.233398][ T6031] usb 10-1: USB disconnect, device number 4 [ 674.242057][ T6037] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 674.382170][ T6037] usb 3-1: device descriptor read/64, error -71 [ 674.662249][ T6037] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 674.833450][ T6037] usb 3-1: device descriptor read/64, error -71 [ 674.891578][ T56] block nbd0: Possible stuck request ffff888024de0000: control (read@0,1024B). Runtime 330 seconds [ 674.905652][ T56] block nbd0: Possible stuck request ffff888024de0200: control (read@1024,1024B). Runtime 330 seconds [ 674.920084][ T56] block nbd0: Possible stuck request ffff888024de0400: control (read@2048,1024B). Runtime 330 seconds [ 674.952157][ T56] block nbd0: Possible stuck request ffff888024de0600: control (read@3072,1024B). Runtime 330 seconds [ 674.971495][ T6037] usb usb3-port1: attempt power cycle [ 675.040251][ T4533] bridge_slave_1: left allmulticast mode [ 675.094415][ T4533] bridge_slave_1: left promiscuous mode [ 675.102241][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.202885][ T4533] bridge_slave_0: left allmulticast mode [ 675.221753][ T4533] bridge_slave_0: left promiscuous mode [ 675.238409][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.382156][ T6037] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 675.447408][ T6037] usb 3-1: device descriptor read/8, error -71 [ 675.722123][ T6037] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 675.772680][ T6037] usb 3-1: device descriptor read/8, error -71 [ 675.884569][ T6037] usb usb3-port1: unable to enumerate USB device [ 676.078031][ T6031] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 676.242165][ T6031] usb 10-1: Using ep0 maxpacket: 8 [ 676.262636][ T6031] usb 10-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 676.292030][ T6031] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 676.318888][ T6031] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.329336][ T6031] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 676.371641][ T6031] usb 10-1: config 0 interface 0 has no altsetting 0 [ 676.389041][ T6031] usb 10-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 676.399230][ T6031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.429676][ T6031] usb 10-1: config 0 descriptor?? [ 676.718615][ T6031] usbhid 10-1:0.0: can't add hid device: -71 [ 676.738665][ T6031] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 676.781198][ T6031] usb 10-1: USB disconnect, device number 5 [ 677.087867][ T4533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.209333][ T4533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.274722][ T4533] bond0 (unregistering): Released all slaves [ 677.447984][T16521] program syz.8.3890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 677.752255][ T5988] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 677.932884][ T5988] usb 10-1: Using ep0 maxpacket: 8 [ 677.955690][ T5988] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 677.958418][T16530] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 678.018934][T14592] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.019286][ T5988] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.061225][T14592] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.103992][ T5988] usb 10-1: Product: syz [ 678.118134][ T5988] usb 10-1: Manufacturer: syz [ 678.136595][ T5988] usb 10-1: SerialNumber: syz [ 678.160965][T14206] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.178101][ T5988] usb 10-1: config 0 descriptor?? [ 678.198225][T14206] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 678.234204][ T5988] gspca_main: se401-2.14.0 probing 047d:5003 [ 678.346011][ T4533] hsr_slave_0: left promiscuous mode [ 678.368549][ T4533] hsr_slave_1: left promiscuous mode [ 678.394026][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.435424][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.487901][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.519615][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.684203][ T4533] veth1_macvtap: left promiscuous mode [ 678.714364][ T4533] veth0_macvtap: left promiscuous mode [ 678.739045][ T4533] veth1_vlan: left promiscuous mode [ 678.767808][ T4533] veth0_vlan: left promiscuous mode [ 679.080409][T16549] netlink: 'syz.2.3898': attribute type 4 has an invalid length. [ 679.194751][ T6037] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 679.226149][ T5988] gspca_se401: read req failed req 0x06 error -19 [ 679.270555][ T5988] usb 10-1: USB disconnect, device number 6 [ 679.382032][ T6037] usb 7-1: Using ep0 maxpacket: 8 [ 679.407944][ T6037] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.451182][ T6037] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 679.483375][ T6037] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 679.525517][ T6037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.573570][ T6037] usb 7-1: Product: syz [ 679.594086][ T6037] usb 7-1: Manufacturer: syz [ 679.634957][ T6037] usb 7-1: SerialNumber: syz [ 679.686091][ T6037] usb 7-1: config 0 descriptor?? [ 680.090469][ T6037] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 680.273043][ T6037] usb 5-1: Using ep0 maxpacket: 8 [ 680.298664][ T6037] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 680.368642][ T6037] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 680.402940][ T6037] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.443145][ T6037] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 680.476646][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 680.551353][ T6037] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 680.578708][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.642401][ T6037] usb 5-1: config 0 descriptor?? [ 680.916536][ T6037] usbhid 5-1:0.0: can't add hid device: -71 [ 680.932079][ T6037] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 680.996134][ T6037] usb 5-1: USB disconnect, device number 62 [ 681.042038][ T5828] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 681.211986][ T5828] usb 2-1: Using ep0 maxpacket: 32 [ 681.231766][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.249348][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.269579][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 681.307644][ T4533] team0 (unregistering): Port device team_slave_1 removed [ 681.307939][ T5828] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 681.343905][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.360381][ T4533] team0 (unregistering): Port device team_slave_0 removed [ 681.367317][ T5828] usb 2-1: config 0 descriptor?? [ 681.979703][ T5828] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0016/input/input19 [ 681.991129][ T1220] usb 7-1: USB disconnect, device number 29 [ 682.129128][ T5828] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0016/input/input20 [ 682.258269][ T5828] kye 0003:0458:5011.0016: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 682.328510][ T5828] usb 2-1: USB disconnect, device number 62 [ 682.358047][T16588] netlink: 5128 bytes leftover after parsing attributes in process `syz.6.3913'. [ 682.394460][T16588] netlink: 5128 bytes leftover after parsing attributes in process `syz.6.3913'. [ 682.437360][T16588] netlink: 584 bytes leftover after parsing attributes in process `syz.6.3913'. [ 682.471360][T16587] fido_id[16587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 682.702181][ T1220] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 682.852466][ T1220] usb 7-1: device descriptor read/64, error -71 [ 683.022219][ T5988] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 683.152470][ T1220] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 683.242249][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 683.285273][ T5988] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 683.302094][ T794] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 683.322046][ T1220] usb 7-1: device descriptor read/64, error -71 [ 683.342043][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.442099][ T5988] usb 5-1: Product: syz [ 683.446306][ T5988] usb 5-1: Manufacturer: syz [ 683.472165][ T5988] usb 5-1: SerialNumber: syz [ 683.479041][ T1220] usb usb7-port1: attempt power cycle [ 683.501192][ T5988] usb 5-1: config 0 descriptor?? [ 683.540231][ T5988] gspca_main: se401-2.14.0 probing 047d:5003 [ 683.572690][ T794] usb 2-1: Using ep0 maxpacket: 16 [ 683.596779][ T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 683.644281][ T794] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 683.673787][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.718852][ T794] usb 2-1: Product: syz [ 683.743447][T16591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.773386][ T794] usb 2-1: Manufacturer: syz [ 683.778036][ T794] usb 2-1: SerialNumber: syz [ 683.816885][T16591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.842609][ T1220] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 683.855479][ T6031] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 683.856336][ T794] usb 2-1: config 0 descriptor?? [ 683.892670][ T1220] usb 7-1: device descriptor read/8, error -71 [ 683.973629][ T794] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 683.982360][ T7755] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 684.064426][ T6031] usb 3-1: config 0 has no interfaces? [ 684.081457][ T6031] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.122180][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.137759][ T1220] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 684.206084][ T6031] usb 3-1: config 0 descriptor?? [ 684.212330][ T7755] usb 9-1: Using ep0 maxpacket: 8 [ 684.223641][ T7755] usb 9-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 684.232595][ T1220] usb 7-1: device descriptor read/8, error -71 [ 684.252189][ T7755] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 684.271365][ T7755] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.282995][ T7755] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 684.296465][ T7755] usb 9-1: config 0 interface 0 has no altsetting 0 [ 684.303924][ T7755] usb 9-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 684.314040][ T7755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.352800][ T1220] usb usb7-port1: unable to enumerate USB device [ 684.452220][ T7755] usb 9-1: config 0 descriptor?? [ 684.735012][ T5988] gspca_se401: read req failed req 0x06 error -19 [ 684.765406][ T7755] usbhid 9-1:0.0: can't add hid device: -71 [ 684.781320][ T7755] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 684.785272][ T5988] usb 5-1: USB disconnect, device number 63 [ 684.864761][ T7755] usb 9-1: USB disconnect, device number 5 [ 685.017672][T16636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3924'. [ 685.036742][T16636] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.044046][T16636] IPv6: NLM_F_CREATE should be set when creating new route [ 685.051315][T16636] IPv6: NLM_F_CREATE should be set when creating new route [ 685.058568][T16636] IPv6: NLM_F_CREATE should be set when creating new route [ 685.080210][ T8331] usb 2-1: Failed to submit usb control message: -110 [ 685.094079][ T8331] usb 2-1: unable to send the bmi data to the device: -110 [ 685.111081][ T8331] usb 2-1: unable to get target info from device [ 685.329267][ T8331] usb 2-1: could not get target info (-110) [ 685.344598][ T8331] usb 2-1: could not probe fw (-110) [ 686.141998][ T9685] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 686.239857][T16623] syzkaller0: entered promiscuous mode [ 686.292042][T16623] syzkaller0: entered allmulticast mode [ 686.305625][ T9685] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 686.319710][ T9685] usb 9-1: config 0 has no interface number 0 [ 686.351109][ T9685] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 686.452833][ T9685] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.865206][ T9685] usb 9-1: config 0 descriptor?? [ 686.921837][ T9685] usb 9-1: selecting invalid altsetting 1 [ 686.963949][ T9685] dvb_ttusb_budget: ttusb_init_controller: error [ 686.990311][ T9685] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 687.040564][ T7755] usb 2-1: USB disconnect, device number 63 [ 687.504126][ T9685] DVB: Unable to find symbol cx22700_attach() [ 687.703395][ T9685] DVB: Unable to find symbol tda10046_attach() [ 687.730026][ T9685] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 687.765941][ T9685] usb 9-1: USB disconnect, device number 6 [ 688.147288][ T9685] usb 3-1: USB disconnect, device number 69 [ 688.407946][T16668] netlink: 'syz.9.3933': attribute type 4 has an invalid length. [ 689.064931][T16678] binder: 16676:16678 ioctl c0306201 200000000540 returned -22 [ 689.632827][T16690] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3939'. [ 689.682028][T16338] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 689.802110][ T5832] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 690.175535][T16338] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 690.222588][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.228886][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.556844][T16338] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 690.677811][T16338] usb 7-1: config 220 interface 0 has no altsetting 0 [ 690.731186][T16338] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 690.740377][T16338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.748568][T16338] usb 7-1: Product: syz [ 690.755733][T16338] usb 7-1: Manufacturer: syz [ 690.760324][T16338] usb 7-1: SerialNumber: syz [ 693.697226][ T794] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 693.907102][T16742] binder: 16741:16742 ioctl c0306201 200000000540 returned -22 [ 693.924680][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.944544][T16745] netlink: 'syz.8.3953': attribute type 4 has an invalid length. [ 693.974382][T16338] uvcvideo 7-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 694.021833][T16338] uvcvideo 7-1:220.0: No valid video chain found. [ 694.070370][ T794] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 694.083198][T16338] usb 7-1: USB disconnect, device number 34 [ 694.116114][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 694.180652][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 694.232352][ T794] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 694.269123][ T794] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 694.305647][ T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 694.350685][ T794] usb 5-1: Product: syz [ 694.374995][ T794] usb 5-1: Manufacturer: syz [ 694.395076][ T794] usb 5-1: SerialNumber: syz [ 694.458614][T16761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3957'. [ 694.473138][T16761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 694.480375][T16761] IPv6: NLM_F_CREATE should be set when creating new route [ 694.487694][T16761] IPv6: NLM_F_CREATE should be set when creating new route [ 694.494937][T16761] IPv6: NLM_F_CREATE should be set when creating new route [ 694.523918][ T794] usb 5-1: config 0 descriptor?? [ 694.811800][ T794] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 694.821841][ T794] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 694.999548][ T794] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 695.176896][ T794] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 695.189665][ T794] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 695.212971][ T794] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 695.756137][T16786] netlink: set zone limit has 4 unknown bytes [ 696.567324][T16799] netlink: 'syz.9.3968': attribute type 4 has an invalid length. [ 697.481422][ T794] usb 5-1: USB disconnect, device number 64 [ 698.253883][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3976'. [ 698.739163][ T31] audit: type=1800 audit(1767236475.880:117): pid=16831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3978" name="file0" dev="tmpfs" ino=221 res=0 errno=0 [ 699.134108][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3982'. [ 699.396015][ T794] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 699.449978][T16850] netlink: 'syz.9.3981': attribute type 4 has an invalid length. [ 699.496733][T16848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.542204][ T7832] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 699.821083][ T794] usb 9-1: Using ep0 maxpacket: 16 [ 699.924286][ T794] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 699.946130][ T7832] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 699.964377][ T794] usb 9-1: config 1 has no interface number 0 [ 699.991704][ T7832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.999811][ T794] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 700.040967][ T7832] usb 5-1: config 0 descriptor?? [ 700.046094][ T794] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 700.069674][ T7832] gspca_main: spca508-2.14.0 probing 8086:0110 [ 700.098228][ T794] usb 9-1: config 1 interface 105 has no altsetting 0 [ 700.123186][ T794] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 700.187515][ T794] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.220670][ T794] usb 9-1: Product: syz [ 700.269648][ T7832] gspca_spca508: reg_read err -71 [ 700.288475][ T794] usb 9-1: Manufacturer: syz [ 700.303083][ T7832] gspca_spca508: reg_read err -71 [ 700.310166][ T794] usb 9-1: SerialNumber: syz [ 700.320620][ T7832] gspca_spca508: reg_read err -71 [ 700.353644][T16838] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 700.392214][ T6022] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 700.515713][ T7832] gspca_spca508: reg_read err -71 [ 700.551740][T16838] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 700.582020][ T6022] usb 2-1: Using ep0 maxpacket: 16 [ 700.592945][ T7832] gspca_spca508: reg_read err -71 [ 700.628046][ T6022] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.674391][ T7832] gspca_spca508: reg write: error -71 [ 700.681691][ T7832] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 700.730312][ T6022] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 700.744381][ T7832] usb 5-1: USB disconnect, device number 65 [ 700.754405][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.841485][ T6022] usb 2-1: Product: syz [ 700.870471][ T6022] usb 2-1: Manufacturer: syz [ 700.898346][ T6022] usb 2-1: SerialNumber: syz [ 700.931886][ T6022] usb 2-1: config 0 descriptor?? [ 701.041712][T16838] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 701.053902][ T6022] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 701.102528][T16838] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 701.801327][ T794] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 701.863932][ T794] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 702.077318][ T794] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 702.123374][ T8206] usb 2-1: Failed to submit usb control message: -110 [ 702.150975][ T794] usb 9-1: USB disconnect, device number 7 [ 702.163325][ T8206] usb 2-1: unable to send the bmi data to the device: -110 [ 702.218443][ T794] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 702.235152][ T8206] usb 2-1: unable to get target info from device [ 702.281562][ T8206] usb 2-1: could not get target info (-110) [ 702.318191][ T8206] usb 2-1: could not probe fw (-110) [ 702.405667][ T794] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 702.478458][ T794] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 702.533589][ T794] aqc111 9-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 704.417236][T16390] usb 2-1: USB disconnect, device number 64 [ 704.692150][ T5927] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 704.921387][ T56] block nbd0: Possible stuck request ffff888024de0000: control (read@0,1024B). Runtime 360 seconds [ 704.932108][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 704.932989][ T56] block nbd0: Possible stuck request ffff888024de0200: control (read@1024,1024B). Runtime 360 seconds [ 704.979075][ T56] block nbd0: Possible stuck request ffff888024de0400: control (read@2048,1024B). Runtime 360 seconds [ 705.001010][ T56] block nbd0: Possible stuck request ffff888024de0600: control (read@3072,1024B). Runtime 360 seconds [ 705.013172][ T5927] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 705.013205][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.013232][ T5927] usb 3-1: Product: syz [ 705.013251][ T5927] usb 3-1: Manufacturer: syz [ 705.013270][ T5927] usb 3-1: SerialNumber: syz [ 705.016369][ T5927] usb 3-1: config 0 descriptor?? [ 705.220060][ T5927] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 705.628326][ T5927] gspca_sonixj: reg_r err -32 [ 705.649405][ T5927] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 706.351472][T16937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4002'. [ 707.545316][T16338] usb 3-1: USB disconnect, device number 70 [ 708.009245][T16955] netdevsim netdevsim9: Direct firmware load for / [ 708.009245][T16955] failed with error -2 [ 708.040709][T16955] netdevsim netdevsim9: Falling back to sysfs fallback for: / [ 708.040709][T16955] [ 709.772070][ T6022] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 709.932023][ T6022] usb 7-1: Using ep0 maxpacket: 8 [ 709.972599][ T6022] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 710.002197][ T6022] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.011148][ T6022] usb 7-1: Product: syz [ 710.106719][ T6022] usb 7-1: Manufacturer: syz [ 710.148633][ T6022] usb 7-1: SerialNumber: syz [ 710.181319][ T6022] usb 7-1: config 0 descriptor?? [ 710.225530][ T6022] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 710.665685][ T6022] gspca_sonixj: reg_r err -32 [ 710.670510][ T6022] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 710.764833][T17014] netdevsim netdevsim8: Direct firmware load for / [ 710.764833][T17014] failed with error -2 [ 710.775690][T17014] netdevsim netdevsim8: Falling back to sysfs fallback for: / [ 710.775690][T17014] [ 712.508499][ T7832] usb 7-1: USB disconnect, device number 35 [ 714.067517][T16390] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 714.242446][T16390] usb 2-1: Using ep0 maxpacket: 8 [ 714.250218][T16390] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 714.263345][T16338] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 714.271003][T16390] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 714.295741][T16390] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.326834][T16390] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.361479][T16390] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 714.393139][T16390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.432085][T16338] usb 7-1: Using ep0 maxpacket: 8 [ 714.447537][T16338] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 714.458029][T16338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.516138][T16338] usb 7-1: Product: syz [ 714.534598][T16338] usb 7-1: Manufacturer: syz [ 714.549936][T16338] usb 7-1: SerialNumber: syz [ 714.577415][T16338] usb 7-1: config 0 descriptor?? [ 714.604462][T16338] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 714.641155][T16390] usb 2-1: GET_CAPABILITIES returned 0 [ 714.647092][T16390] usbtmc 2-1:16.0: can't read capabilities [ 714.761755][T17109] Cannot find add_set index 0 as target [ 714.851530][T16390] usb 2-1: USB disconnect, device number 65 [ 715.011181][T16338] gspca_sonixj: reg_r err -32 [ 715.032269][T16338] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 715.789654][T17136] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 716.772142][T17159] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 717.035820][T16338] usb 7-1: USB disconnect, device number 36 [ 717.113170][T17167] process 'syz.9.4075' launched '/dev/fd/8' with NULL argv: empty string added [ 719.562176][ T9685] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 719.873014][ T9685] usb 9-1: Using ep0 maxpacket: 8 [ 719.893929][ T9685] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 719.929619][ T9685] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.968711][ T9685] usb 9-1: Product: syz [ 719.979029][ T9685] usb 9-1: Manufacturer: syz [ 719.987378][ T9685] usb 9-1: SerialNumber: syz [ 720.002100][ T9685] usb 9-1: config 0 descriptor?? [ 720.035115][ T9685] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 720.433546][ T9685] gspca_sonixj: reg_r err -32 [ 720.448656][ T9685] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 720.562605][T17232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4095'. [ 720.578329][T17232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.588858][ T1220] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 720.982044][ T1220] usb 7-1: Using ep0 maxpacket: 16 [ 720.993140][ T1220] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.006758][ T1220] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 721.021984][ T1220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.066444][ T1220] usb 7-1: config 0 descriptor?? [ 721.128544][ T1220] uvcvideo 7-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 721.181617][ T1220] uvcvideo 7-1:0.0: No valid video chain found. [ 721.293632][ T1220] usb 7-1: USB disconnect, device number 37 [ 721.917543][ T1220] usb 9-1: USB disconnect, device number 8 [ 722.806098][T17283] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4111' sets config #0 [ 725.479322][T16390] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 725.612167][ T794] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 725.651986][T16390] usb 10-1: Using ep0 maxpacket: 16 [ 725.659103][T16390] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 725.690554][T16390] usb 10-1: config 1 has no interface number 0 [ 725.731173][T16390] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 725.772024][ T794] usb 9-1: Using ep0 maxpacket: 16 [ 725.781071][ T794] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 725.842010][ T794] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 725.878940][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.895275][T16390] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 725.946756][ T794] usb 9-1: config 0 descriptor?? [ 725.956131][T16390] usb 10-1: config 1 interface 105 has no altsetting 0 [ 725.979516][ T794] uvcvideo 9-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 726.005054][T16390] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 726.058322][ T794] uvcvideo 9-1:0.0: No valid video chain found. [ 726.061953][T16390] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.112101][T16390] usb 10-1: Product: syz [ 726.126575][T16390] usb 10-1: Manufacturer: syz [ 726.181619][ T6017] usb 9-1: USB disconnect, device number 9 [ 726.190490][T16390] usb 10-1: SerialNumber: syz [ 726.275238][T17312] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 726.316809][T17312] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 726.805936][T17312] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 726.827941][T17339] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4126'. [ 726.842671][T17339] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 726.850205][T17312] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 727.303396][T16390] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 727.355116][T16390] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 727.420726][T16390] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 727.582002][ T6017] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 727.708362][T16390] aqc111 10-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 727.812032][ T794] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 727.852001][ T6017] usb 7-1: Using ep0 maxpacket: 8 [ 727.860194][T16390] usb 10-1: USB disconnect, device number 7 [ 727.882887][ T6017] usb 7-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 727.912024][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.944995][T16390] aqc111 10-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 727.964230][ T794] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 727.983472][ T6017] usb 7-1: Product: syz [ 727.983909][ T794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.987627][ T6017] usb 7-1: Manufacturer: syz [ 727.987649][ T6017] usb 7-1: SerialNumber: syz [ 728.018124][ T6017] usb 7-1: config 0 descriptor?? [ 728.117106][ T6017] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 728.119022][ T794] usb 9-1: config 0 descriptor?? [ 728.216542][ T794] gspca_main: spca508-2.14.0 probing 8086:0110 [ 728.252971][T16390] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 728.305530][T16390] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 728.378278][T16390] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 728.632124][ T794] gspca_spca508: reg_read err -71 [ 728.647694][ T794] gspca_spca508: reg_read err -71 [ 728.678042][ T794] gspca_spca508: reg_read err -71 [ 728.694643][ T6017] pwc: send_video_command error -71 [ 728.702372][ T794] gspca_spca508: reg_read err -71 [ 728.709356][ T6017] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 728.727437][ T794] gspca_spca508: reg write: error -71 [ 728.731847][ T6017] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 728.751859][ T794] spca508 9-1:0.0: probe with driver spca508 failed with error -71 [ 728.804744][ T6017] usb 7-1: USB disconnect, device number 38 [ 728.826328][ T794] usb 9-1: USB disconnect, device number 10 [ 728.895758][T17365] xt_CT: No such helper "syz0" [ 729.209737][T17374] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4135' sets config #0 [ 729.847639][ T6015] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 730.041988][ T6015] usb 7-1: Using ep0 maxpacket: 16 [ 730.049800][ T6015] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.074388][ T6015] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 730.099151][ T6015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.128885][ T6015] usb 7-1: config 0 descriptor?? [ 730.155936][ T6015] uvcvideo 7-1:0.0: Found UVC 0.00 device (10c4:ea90) [ 730.180131][ T6015] uvcvideo 7-1:0.0: No valid video chain found. [ 730.251999][ T6017] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 730.384573][ T6015] usb 7-1: USB disconnect, device number 39 [ 730.422375][ T6017] usb 10-1: Using ep0 maxpacket: 16 [ 730.451013][ T6017] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 730.459411][ T6017] usb 10-1: config 1 has no interface number 0 [ 730.482888][ T6017] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 730.514569][ T6017] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 730.532761][ T6017] usb 10-1: config 1 interface 105 has no altsetting 0 [ 730.550336][ T6017] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 730.566403][ T6017] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.574925][ T6017] usb 10-1: Product: syz [ 730.601224][ T6017] usb 10-1: Manufacturer: syz [ 730.609828][ T6017] usb 10-1: SerialNumber: syz [ 730.641551][T17389] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 730.651242][T17389] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 731.092409][T17389] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 731.106464][T17389] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 731.237855][T16390] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 731.443994][T16390] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 731.495110][T16390] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.511157][T17409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4151'. [ 731.526977][T17409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 731.553813][ T6017] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 731.583602][ T6017] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 731.594930][ T6017] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 731.732033][T16390] usb 5-1: config 0 descriptor?? [ 731.868682][ T6017] aqc111 10-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 731.902694][T17413] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4152'. [ 731.925980][T16390] gspca_main: spca508-2.14.0 probing 8086:0110 [ 732.001262][ T6017] usb 10-1: USB disconnect, device number 8 [ 732.039610][ T6017] aqc111 10-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 732.282717][T17418] netlink: 'syz.8.4154': attribute type 13 has an invalid length. [ 732.345108][ T6017] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 732.380696][T16390] gspca_spca508: reg_read err -71 [ 732.393665][T16390] gspca_spca508: reg_read err -71 [ 732.405877][ T6017] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 732.424170][T16390] gspca_spca508: reg_read err -71 [ 732.440417][ T6017] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 732.451796][T16390] gspca_spca508: reg_read err -71 [ 732.470482][T16390] gspca_spca508: reg write: error -71 [ 732.491541][T16390] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 732.538689][T17418] gretap0: refused to change device tx_queue_len [ 732.544132][T16390] usb 5-1: USB disconnect, device number 66 [ 732.572669][T17418] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 733.123019][T17434] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4159'. [ 733.583925][T16390] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 733.961372][T16390] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 733.993497][T17458] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4165' sets config #0 [ 734.002632][T16390] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.002662][T16390] usb 10-1: Product: syz [ 734.002682][T16390] usb 10-1: Manufacturer: syz [ 734.002708][T16390] usb 10-1: SerialNumber: syz [ 734.440750][T16390] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 734.502142][T16390] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 734.554201][ T1220] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 734.777231][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 734.821175][ T1220] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 734.868660][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.952933][ T1220] usb 2-1: config 0 descriptor?? [ 734.983962][T17462] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 735.076829][ T56] block nbd0: Possible stuck request ffff888024de0000: control (read@0,1024B). Runtime 390 seconds [ 735.092217][ T56] block nbd0: Possible stuck request ffff888024de0200: control (read@1024,1024B). Runtime 390 seconds [ 735.103535][ T56] block nbd0: Possible stuck request ffff888024de0400: control (read@2048,1024B). Runtime 390 seconds [ 735.117593][ T56] block nbd0: Possible stuck request ffff888024de0600: control (read@3072,1024B). Runtime 390 seconds [ 735.202042][T16338] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 735.372081][T16338] usb 7-1: Using ep0 maxpacket: 8 [ 735.410301][ T1220] usbhid 2-1:0.0: can't add hid device: -71 [ 735.452178][T16338] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 735.503450][T16338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.542082][ T1220] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 735.550078][T16338] usb 7-1: Product: syz [ 735.571479][T16338] usb 7-1: Manufacturer: syz [ 735.611070][ T1220] usb 2-1: USB disconnect, device number 66 [ 735.651304][T16338] usb 7-1: SerialNumber: syz [ 735.672950][T16338] usb 7-1: config 0 descriptor?? [ 735.686233][T16338] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 736.070282][T16390] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 736.899982][T16390] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 736.976467][T16390] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 737.038297][T16390] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 737.079352][T16390] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 737.224637][T16390] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 737.282383][ T5927] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 737.306426][T16390] usb 10-1: USB disconnect, device number 9 [ 737.513406][ T5927] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 737.521764][ T5927] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.550545][ T5927] usb 9-1: config 0 has no interfaces? [ 737.568450][ T5927] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 737.587883][ T5927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.651053][ T5927] usb 9-1: config 0 descriptor?? [ 737.966827][T16338] usb 9-1: USB disconnect, device number 11 [ 738.072435][T16390] usb 7-1: USB disconnect, device number 40 [ 739.648125][T17525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4179'. [ 739.855859][T17525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.862798][T17542] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.4182' sets config #0 [ 741.100230][T17323] Set syz1 is full, maxelem 65536 reached [ 742.112271][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 742.125322][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 742.133218][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 742.165111][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 742.192661][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 742.337747][ T31] audit: type=1326 audit(1767236519.480:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 742.395475][ T31] audit: type=1326 audit(1767236519.480:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 742.591800][ T31] audit: type=1326 audit(1767236519.480:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 742.715361][ T31] audit: type=1326 audit(1767236519.480:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 742.895332][ T31] audit: type=1326 audit(1767236519.480:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 743.041981][ T31] audit: type=1326 audit(1767236519.480:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 743.228404][ T31] audit: type=1326 audit(1767236519.480:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 743.362258][ T31] audit: type=1326 audit(1767236519.480:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 743.475199][ T31] audit: type=1326 audit(1767236519.480:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 743.515396][ T31] audit: type=1326 audit(1767236519.480:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17548 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 744.032589][ T6030] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.220134][T17547] chnl_net:caif_netlink_parms(): no params data found [ 744.279694][ T5839] Bluetooth: hci7: command tx timeout [ 744.459566][ T6030] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.700766][ T6030] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.925397][ T6030] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.303510][T17547] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.337001][T17547] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.372921][T17547] bridge_slave_0: entered allmulticast mode [ 745.398198][T17547] bridge_slave_0: entered promiscuous mode [ 745.461099][T17547] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.499787][T17547] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.516066][T17547] bridge_slave_1: entered allmulticast mode [ 745.535124][T17547] bridge_slave_1: entered promiscuous mode [ 745.868968][T17547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.007654][T17610] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4201' sets config #0 [ 746.205663][T17547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.352295][ T5839] Bluetooth: hci7: command tx timeout [ 746.577847][T17547] team0: Port device team_slave_0 added [ 746.681236][T17547] team0: Port device team_slave_1 added [ 746.999434][ T6030] bridge_slave_1: left allmulticast mode [ 747.009067][ T6030] bridge_slave_1: left promiscuous mode [ 747.059788][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.122840][ T6030] bridge_slave_0: left allmulticast mode [ 747.155050][ T6030] bridge_slave_0: left promiscuous mode [ 747.182407][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.542044][ T9685] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 747.715966][ T9685] usb 2-1: unable to get BOS descriptor or descriptor too short [ 747.756327][ T9685] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 747.812115][ T9685] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 747.852219][ T9685] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 747.934470][ T9685] usb 2-1: string descriptor 0 read error: -22 [ 747.954625][ T9685] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 747.984896][ T9685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.068076][ T9685] usb 2-1: low speed audio streaming not supported [ 748.307654][ T9685] usb 2-1: USB disconnect, device number 67 [ 748.432515][ T5839] Bluetooth: hci7: command tx timeout [ 748.618420][T17634] tipc: Failed to remove unknown binding: 66,1,1/0:3177575463/3177575465 [ 748.628780][T17634] tipc: Failed to remove unknown binding: 66,1,1/0:3177575463/3177575465 [ 748.647570][T17634] tipc: Failed to remove unknown binding: 66,1,1/0:3177575463/3177575465 [ 748.852557][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.872747][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.895781][ T6030] bond0 (unregistering): Released all slaves [ 749.008331][T17547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.025737][T17547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.121350][T17547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.415742][T17547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.488986][T17547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.566441][T17547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.012213][ T6030] hsr_slave_0: left promiscuous mode [ 750.020085][ T6030] hsr_slave_1: left promiscuous mode [ 750.026481][ T6017] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 750.071572][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.101367][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.136906][ T6030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.163670][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.182188][ T6017] usb 7-1: Using ep0 maxpacket: 8 [ 750.194677][ T6017] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 750.204092][ T6017] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.217804][ T6017] usb 7-1: Product: syz [ 750.230878][ T6017] usb 7-1: Manufacturer: syz [ 750.241185][ T6017] usb 7-1: SerialNumber: syz [ 750.280164][ T6017] usb 7-1: config 0 descriptor?? [ 750.305418][ T6017] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 750.345768][ T6030] veth1_macvtap: left promiscuous mode [ 750.410650][ T6030] veth0_macvtap: left promiscuous mode [ 750.420903][ T6030] veth1_vlan: left promiscuous mode [ 750.446845][ T6030] veth0_vlan: left promiscuous mode [ 750.512638][ T5839] Bluetooth: hci7: command tx timeout [ 750.832155][ T9685] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 751.055862][ T9685] usb 10-1: Using ep0 maxpacket: 32 [ 751.065346][ T9685] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 751.085537][ T9685] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.119598][ T6017] gspca_sonixj: reg_r err -32 [ 751.122001][ T9685] usb 10-1: config 0 has no interface number 0 [ 751.149329][ T6017] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 751.156757][ T9685] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 751.208887][ T6017] usb 7-1: USB disconnect, device number 41 [ 751.231462][T17677] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4225' sets config #0 [ 751.248723][ T9685] usb 10-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 751.334955][ T9685] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.365281][ T9685] usb 10-1: config 0 descriptor?? [ 751.384998][ T9685] usbhid 10-1:0.8: couldn't find an input interrupt endpoint [ 751.638599][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.645040][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.110383][T17692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.207120][T17692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.974865][T17701] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4230'. [ 753.497161][T17709] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 753.805643][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 754.060797][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 755.038534][ T7755] usb 10-1: USB disconnect, device number 10 [ 755.569521][T17547] hsr_slave_0: entered promiscuous mode [ 755.589171][T17547] hsr_slave_1: entered promiscuous mode [ 755.953415][T17547] debugfs: 'hsr0' already exists in 'hsr' [ 755.963774][T17547] Cannot create hsr debugfs directory [ 756.190150][T17731] tipc: Failed to remove unknown binding: 66,1,1/0:3416859479/3416859481 [ 756.413639][T17737] tipc: Failed to remove unknown binding: 66,1,1/0:3416859479/3416859481 [ 756.501989][ T7755] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 756.532239][T17737] tipc: Failed to remove unknown binding: 66,1,1/0:3416859479/3416859481 [ 756.812010][ T7755] usb 7-1: device descriptor read/64, error -71 [ 757.072825][ T7755] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 757.242186][ T7755] usb 7-1: device descriptor read/64, error -71 [ 757.279980][T17745] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4244' sets config #0 [ 757.362477][ T7755] usb usb7-port1: attempt power cycle [ 757.550551][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4243'. [ 757.722048][ T7755] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 757.784095][ T7755] usb 7-1: device descriptor read/8, error -71 [ 758.062012][ T7755] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 758.132869][ T7755] usb 7-1: device descriptor read/8, error -71 [ 758.248778][ T7755] usb usb7-port1: unable to enumerate USB device [ 758.304460][T17759] fuse: Unknown parameter 'fo0xffffffffffffffff' [ 759.209310][T17547] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 759.402832][T17547] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 759.491173][T17547] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 759.668679][T17547] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 760.209811][T17547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.372249][T17547] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.449255][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.456462][ T8206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.549557][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.556753][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.152805][ T6022] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 761.375388][ T6022] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 761.421533][ T6022] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 761.512013][ T6022] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.578579][ T6022] usb 7-1: config 0 descriptor?? [ 761.611413][T17798] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 761.828003][T17547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.144119][T17547] veth0_vlan: entered promiscuous mode [ 762.197269][T17547] veth1_vlan: entered promiscuous mode [ 762.259779][ T6022] usbhid 7-1:0.0: can't add hid device: -71 [ 762.363653][ T6022] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 762.409465][ T6022] usb 7-1: USB disconnect, device number 46 [ 762.443470][T17547] veth0_macvtap: entered promiscuous mode [ 762.499204][T17547] veth1_macvtap: entered promiscuous mode [ 762.568767][T17547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.603307][T17838] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.4266' sets config #0 [ 762.696593][T17547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.760217][ T8206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.801578][ T8206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.844633][ T8206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.870539][ T8206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.953985][T14592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.986242][T14592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.203120][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.246368][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.417589][ T6015] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 763.592111][ T6015] usb 10-1: Using ep0 maxpacket: 32 [ 763.600669][ T6015] usb 10-1: config 0 has no interfaces? [ 763.621009][ T6015] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 763.658765][ T6015] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.693416][ T6015] usb 10-1: Product: syz [ 763.710151][ T6015] usb 10-1: Manufacturer: syz [ 763.735949][ T6015] usb 10-1: SerialNumber: syz [ 763.767378][ T6015] usb 10-1: config 0 descriptor?? [ 764.021108][ T6015] usb 10-1: USB disconnect, device number 11 [ 764.332797][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4272'. [ 765.720813][ T56] block nbd0: Possible stuck request ffff888024de0000: control (read@0,1024B). Runtime 420 seconds [ 765.734398][ T56] block nbd0: Possible stuck request ffff888024de0200: control (read@1024,1024B). Runtime 420 seconds [ 765.746086][ T56] block nbd0: Possible stuck request ffff888024de0400: control (read@2048,1024B). Runtime 420 seconds [ 765.757252][ T56] block nbd0: Possible stuck request ffff888024de0600: control (read@3072,1024B). Runtime 420 seconds [ 765.922104][ T7755] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 766.132054][ T7755] usb 7-1: Using ep0 maxpacket: 16 [ 766.142083][ T6015] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 766.180116][ T7755] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 766.199287][ T7755] usb 7-1: config 1 has no interface number 0 [ 766.231332][ T7755] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 766.367878][ T7755] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 766.384285][ T6015] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 766.413913][ T7755] usb 7-1: config 1 interface 105 has no altsetting 0 [ 766.427635][ T7755] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 766.438035][ T7755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.448230][ T7755] usb 7-1: Product: syz [ 766.452453][ T7755] usb 7-1: Manufacturer: syz [ 766.457932][ T7755] usb 7-1: SerialNumber: syz [ 766.471881][ T6015] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 766.475618][T17889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 766.500844][T17889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 766.528525][ T6015] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.568861][ T6015] usb 5-1: config 0 descriptor?? [ 766.601864][T17892] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 766.788931][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 766.788978][ T31] audit: type=1326 audit(1767236543.880:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 766.922041][ T31] audit: type=1326 audit(1767236543.880:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 767.051466][ T31] audit: type=1326 audit(1767236543.880:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 767.079314][T17889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 767.116152][T17889] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 767.205900][ T31] audit: type=1326 audit(1767236543.880:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 767.224994][ T6015] usbhid 5-1:0.0: can't add hid device: -71 [ 767.320365][ T6015] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 767.358011][ T7755] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 1 [ 767.424843][ T6015] usb 5-1: USB disconnect, device number 67 [ 767.499142][ T7755] aqc111 7-1:1.105: probe with driver aqc111 failed with error -61 [ 767.517548][ T31] audit: type=1326 audit(1767236543.880:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 767.596523][ T7755] usb 7-1: USB disconnect, device number 47 [ 767.678262][ T31] audit: type=1326 audit(1767236543.880:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 767.772028][ T7832] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 767.841084][ T31] audit: type=1326 audit(1767236543.880:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 767.957901][ T31] audit: type=1326 audit(1767236543.880:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 768.029069][ T7832] usb 4-1: Using ep0 maxpacket: 32 [ 768.085451][ T31] audit: type=1326 audit(1767236543.880:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 768.117754][ T7832] usb 4-1: config 0 has no interfaces? [ 768.158977][ T7832] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 768.225958][ T7832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.261329][ T31] audit: type=1326 audit(1767236543.880:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17906 comm="syz.8.4284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f2c1918f749 code=0x7ffc0000 [ 768.281956][ T7832] usb 4-1: Product: syz [ 768.335973][ T7832] usb 4-1: Manufacturer: syz [ 768.340595][ T7832] usb 4-1: SerialNumber: syz [ 768.374988][ T7832] usb 4-1: config 0 descriptor?? [ 769.292847][ T7755] usb 4-1: USB disconnect, device number 58 [ 772.523562][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 772.523596][ T31] audit: type=1326 audit(1767236549.670:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17994 comm="syz.8.4308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c1918f749 code=0x0 [ 772.752942][ T9685] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 772.847287][ T31] audit: type=1326 audit(1767236549.910:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 772.932018][ T5828] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 772.977336][ T31] audit: type=1326 audit(1767236549.910:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 773.021993][ T9685] usb 2-1: Using ep0 maxpacket: 32 [ 773.027207][ T31] audit: type=1326 audit(1767236549.910:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 773.062585][ T9685] usb 2-1: config 0 has no interfaces? [ 773.081996][ T5828] usb 9-1: Using ep0 maxpacket: 8 [ 773.089516][ T9685] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 773.103124][ T9685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.118822][ T5828] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 773.138984][ T5828] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.160113][ T31] audit: type=1326 audit(1767236549.910:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 773.196974][ T5828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.309168][ T9685] usb 2-1: Product: syz [ 773.325900][ T5828] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.331310][ T9685] usb 2-1: Manufacturer: syz [ 773.354761][ T9685] usb 2-1: SerialNumber: syz [ 773.369950][ T9685] usb 2-1: config 0 descriptor?? [ 773.387307][ T31] audit: type=1326 audit(1767236549.910:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 773.421983][ T5828] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.469799][ T5828] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 773.596453][ T6015] usb 2-1: USB disconnect, device number 68 [ 773.702147][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.710315][ T31] audit: type=1326 audit(1767236549.910:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 773.777691][ T31] audit: type=1326 audit(1767236549.910:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 773.842017][ T31] audit: type=1326 audit(1767236549.910:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 773.963361][ T5828] usb 9-1: usb_control_msg returned -32 [ 773.969042][ T5828] usbtmc 9-1:16.0: can't read capabilities [ 773.985201][ T31] audit: type=1326 audit(1767236549.910:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17998 comm="syz.6.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f78f749 code=0x7ffc0000 [ 774.395959][T18024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4314'. [ 774.432189][ T6015] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 774.634888][ T6015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 774.646741][ T6015] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 774.660401][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.733286][ T6015] usb 4-1: config 0 descriptor?? [ 774.760867][T18017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 775.081771][T18037] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 775.258584][ T6015] hid_parser_main: 4086 callbacks suppressed [ 775.258605][ T6015] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 775.339870][ T6015] elan 0003:04F3:0755.0017: item fetching failed at offset 3/5 [ 775.379672][ T6015] elan 0003:04F3:0755.0017: Hid Parse failed [ 775.408265][ T6015] elan 0003:04F3:0755.0017: probe with driver elan failed with error -22 [ 775.478736][ T6015] usb 4-1: USB disconnect, device number 59 [ 776.396596][ T6015] usb 9-1: USB disconnect, device number 12 [ 776.962073][ T6015] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 777.132008][ T6015] usb 9-1: Using ep0 maxpacket: 32 [ 777.139510][ T6015] usb 9-1: config 0 has no interfaces? [ 777.160854][ T6015] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 777.914803][ T6015] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.945443][ T6015] usb 9-1: Product: syz [ 777.949615][ T6015] usb 9-1: Manufacturer: syz [ 777.968522][ T6015] usb 9-1: SerialNumber: syz [ 777.996886][ T6015] usb 9-1: config 0 descriptor?? [ 778.251013][ T6015] usb 9-1: USB disconnect, device number 13 [ 778.437814][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 778.437830][ T31] audit: type=1326 audit(1767236555.580:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 778.557829][ T31] audit: type=1326 audit(1767236555.580:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 778.697031][ T31] audit: type=1326 audit(1767236555.580:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 778.857318][ T31] audit: type=1326 audit(1767236555.580:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 779.017100][ T31] audit: type=1326 audit(1767236555.580:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 779.040715][ T5828] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 779.202180][ T31] audit: type=1326 audit(1767236555.580:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 779.285671][ T31] audit: type=1326 audit(1767236555.580:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 779.324688][ T5828] usb 4-1: Using ep0 maxpacket: 8 [ 779.349208][ T5828] usb 4-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 779.379418][ T31] audit: type=1326 audit(1767236555.580:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 779.410460][ T5828] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 779.511373][ T5828] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.586723][ T31] audit: type=1326 audit(1767236555.580:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 779.611575][ T5828] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 779.678828][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 779.733658][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 779.745500][ T31] audit: type=1326 audit(1767236555.580:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18093 comm="syz.9.4333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae0b38f749 code=0x7ffc0000 [ 779.785380][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.827341][ T5828] usb 4-1: config 0 descriptor?? [ 779.952642][ T6064] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 780.132304][ T6064] usb 9-1: Using ep0 maxpacket: 8 [ 780.159547][ T6064] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 780.191805][ T6064] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 780.239238][ T6064] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 780.283439][ T6064] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 780.285173][ T5828] usbhid 4-1:0.0: can't add hid device: -71 [ 780.330725][ T6064] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.381969][ T5828] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 780.420360][ T5828] usb 4-1: USB disconnect, device number 60 [ 780.436056][ T6064] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 780.485812][ T6064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.562044][ T6015] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 780.742014][ T6015] usb 5-1: Using ep0 maxpacket: 8 [ 780.756971][ T6015] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 780.793488][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.841597][ T6015] usb 5-1: Product: syz [ 780.856424][ T6015] usb 5-1: Manufacturer: syz [ 780.915080][ T6015] usb 5-1: SerialNumber: syz [ 780.954908][ T6015] usb 5-1: config 0 descriptor?? [ 780.997264][ T6015] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 781.107496][T18141] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4344'. [ 781.381513][ T6015] pwc: send_video_command error -71 [ 781.405618][ T6015] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 781.428664][ T6015] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 781.459299][ T6015] usb 5-1: USB disconnect, device number 68 [ 782.067337][T18165] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 782.483167][ T6064] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 782.686487][ T6064] usb 4-1: unable to get BOS descriptor or descriptor too short [ 782.752867][ T5828] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 782.785565][ T6064] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 782.804871][ T6064] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 782.833082][ T6064] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.861870][ T6064] usb 4-1: string descriptor 0 read error: -22 [ 782.871004][ T6064] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.914160][ T6064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.920513][ T5828] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 782.934900][ T7755] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 782.947321][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.956102][ T5828] usb 5-1: Product: syz [ 783.006408][ T6064] usb 4-1: 0:2 : does not exist [ 783.027631][ T5828] usb 5-1: Manufacturer: syz [ 783.052721][ T5828] usb 5-1: SerialNumber: syz [ 783.102006][ T7755] usb 10-1: Using ep0 maxpacket: 8 [ 783.114774][ T7755] usb 10-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 783.149647][ T5828] usb 5-1: config 0 descriptor?? [ 783.157005][ T7755] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 783.157382][ T6015] usb 9-1: USB disconnect, device number 14 [ 783.225474][ T6064] usb 4-1: USB disconnect, device number 61 [ 783.256482][ T7755] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.330742][ T7755] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 783.391487][ T5828] hso 5-1:0.0: Failed to find BULK IN ep [ 783.417708][ T7755] usb 10-1: config 0 interface 0 has no altsetting 0 [ 783.480541][ T7755] usb 10-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 783.506386][ T5828] usb-storage 5-1:0.0: USB Mass Storage device detected [ 783.523559][ T7755] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.570110][ T7755] usb 10-1: config 0 descriptor?? [ 783.637737][ T5828] usb 5-1: USB disconnect, device number 69 [ 783.652479][T18199] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4359'. [ 783.834927][ T7755] usbhid 10-1:0.0: can't add hid device: -71 [ 783.861771][ T7755] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 783.932337][ T7755] usb 10-1: USB disconnect, device number 12 [ 783.992290][T18203] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.4360'. [ 784.017863][T18203] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.4360'. [ 784.078113][T18203] netlink: 584 bytes leftover after parsing attributes in process `syz.8.4360'. [ 784.342208][ T7755] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 784.432286][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 784.519787][ T7755] usb 9-1: config 1 has an invalid interface number: 5 but max is 2 [ 784.537399][ T7755] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.563996][ T7755] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 784.583918][ T7755] usb 9-1: config 1 has no interface number 1 [ 784.609727][ T7755] usb 9-1: config 1 interface 5 has no altsetting 0 [ 784.631677][ T7755] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 784.656007][ T7755] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 784.680697][ T7755] usb 9-1: SerialNumber: syz [ 784.937663][ T7755] usb 9-1: 0:2 : does not exist [ 784.953562][ T7755] usb 9-1: unit 5 not found! [ 785.022524][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4364'. [ 785.105531][ T7755] usb 9-1: USB disconnect, device number 15 [ 785.235092][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.344255][ T5828] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 785.518579][T18236] tipc: Enabling not permitted [ 785.543986][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 785.546151][T18236] tipc: Enabling of bearer rejected, failed to enable media [ 785.592470][ T5828] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 785.602613][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.673906][ T5828] usb 4-1: config 0 descriptor?? [ 785.679640][T18227] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 786.685011][ T5828] elan 0003:04F3:0755.0018: item fetching failed at offset 3/5 [ 786.722090][ T7755] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 786.730531][ T5828] elan 0003:04F3:0755.0018: Hid Parse failed [ 786.777336][ T5828] elan 0003:04F3:0755.0018: probe with driver elan failed with error -22 [ 786.806806][T18256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4373'. [ 786.896455][ T6015] usb 4-1: USB disconnect, device number 62 [ 786.932708][ T7755] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 787.042240][ T7755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.069271][ T7755] usb 2-1: Product: syz [ 787.089977][ T7755] usb 2-1: Manufacturer: syz [ 787.099811][ T7755] usb 2-1: SerialNumber: syz [ 787.112175][ T6064] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 787.237636][ T7755] usb 2-1: config 0 descriptor?? [ 787.265381][ T7755] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 787.345190][ T6064] usb 7-1: Using ep0 maxpacket: 16 [ 787.357077][ T6064] usb 7-1: config 1 has an invalid interface number: 161 but max is 0 [ 787.387342][ T6064] usb 7-1: config 1 has no interface number 0 [ 787.401353][ T6064] usb 7-1: config 1 interface 161 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 787.482248][ T6064] usb 7-1: config 1 interface 161 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 787.540161][ T6064] usb 7-1: config 1 interface 161 has no altsetting 0 [ 787.693995][ T7755] gspca_sunplus: reg_r err -71 [ 787.698864][ T7755] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 787.722688][ T6064] usb 7-1: New USB device found, idVendor=0499, idProduct=500d, bcdDevice=80.a3 [ 787.735298][ T7755] usb 2-1: USB disconnect, device number 69 [ 787.759856][ T6064] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.789520][ T6064] usb 7-1: Product: syz [ 787.924670][ T6064] usb 7-1: Manufacturer: syz [ 787.929289][ T6064] usb 7-1: SerialNumber: syz [ 788.093174][T18258] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 788.130966][T18258] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 788.691071][ T6064] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 788.856049][ T6064] snd-usb-audio 7-1:1.161: probe with driver snd-usb-audio failed with error -2 [ 788.953294][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.161/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.983659][ T6064] usb 7-1: USB disconnect, device number 48 [ 789.011056][ T6015] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 789.511993][ T6015] usb 4-1: Using ep0 maxpacket: 16 [ 789.525934][ T6015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 789.566217][ T6015] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 789.590545][ T6015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.619719][ T6015] usb 4-1: Product: syz [ 789.632121][ T6015] usb 4-1: Manufacturer: syz [ 789.638179][ T6015] usb 4-1: SerialNumber: syz [ 789.715927][ T6015] usb 4-1: config 0 descriptor?? [ 789.841347][ T6015] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 790.665663][T18305] syzkaller0: entered promiscuous mode [ 790.776999][T18305] syzkaller0: entered allmulticast mode [ 790.922256][ T8208] usb 4-1: Failed to submit usb control message: -110 [ 790.942289][T16338] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 790.949657][ T8208] usb 4-1: unable to send the bmi data to the device: -110 [ 790.987181][ T8208] usb 4-1: unable to get target info from device [ 791.027183][ T8208] usb 4-1: could not get target info (-110) [ 791.051461][ T8208] usb 4-1: could not probe fw (-110) [ 791.890748][T16338] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 791.933628][T16338] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 791.964259][T16338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.091988][T16338] usb 5-1: Product: syz [ 792.113725][T16338] usb 5-1: Manufacturer: syz [ 792.119611][T16338] usb 5-1: SerialNumber: syz [ 792.169426][T16338] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 792.647014][T16338] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 792.782429][T16338] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 792.790746][T16338] usb 5-1: media controller created [ 792.913314][T18337] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4387' sets config #0 [ 792.997864][T16338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 794.409394][ T7832] usb 4-1: USB disconnect, device number 63 [ 794.460036][T18365] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4394'. [ 794.497205][T18365] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.4394'. [ 794.597817][T18365] netlink: 584 bytes leftover after parsing attributes in process `syz.1.4394'. [ 794.715104][ T6015] usb 5-1: USB disconnect, device number 70 [ 794.872328][ T5927] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 795.096730][ T5927] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 795.304628][ T5927] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 795.344765][ T5927] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 795.383596][ T5927] usb 2-1: config 1 has no interface number 1 [ 795.389739][ T5927] usb 2-1: config 1 interface 5 has no altsetting 0 [ 795.463218][ T5927] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 795.485872][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 796.183373][ T5927] usb 2-1: SerialNumber: syz [ 796.184930][ T56] block nbd0: Possible stuck request ffff888024de0000: control (read@0,1024B). Runtime 450 seconds [ 796.198970][ T56] block nbd0: Possible stuck request ffff888024de0200: control (read@1024,1024B). Runtime 450 seconds [ 796.209960][ T56] block nbd0: Possible stuck request ffff888024de0400: control (read@2048,1024B). Runtime 450 seconds [ 796.220981][ T56] block nbd0: Possible stuck request ffff888024de0600: control (read@3072,1024B). Runtime 450 seconds [ 796.387745][T18388] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4399'. [ 796.476125][ T5927] usb 2-1: 0:2 : does not exist [ 796.481024][ T5927] usb 2-1: unit 5 not found! [ 796.591994][ T5927] usb 2-1: USB disconnect, device number 70 [ 796.737682][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.102753][T18397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 797.292278][ T5927] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 797.453867][ T5927] usb 4-1: config 2 has an invalid interface number: 190 but max is 0 [ 797.462599][ T5927] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 797.516723][ T5927] usb 4-1: config 2 has no interface number 0 [ 797.536773][ T5927] usb 4-1: config 2 interface 190 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.597259][ T5927] usb 4-1: string descriptor 0 read error: -22 [ 797.605141][ T5927] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5 [ 797.656892][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.940408][ T5927] (null): keene_cmd_main failed (-71) [ 797.986111][ T5927] video4linux radio48: keene_cmd_main failed (-71) [ 798.040162][ T5927] radio-keene 4-1:2.190: V4L2 device registered as radio48 [ 798.098796][ T5927] usb 4-1: USB disconnect, device number 64 [ 798.997878][ T7755] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 799.174190][ T7755] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 799.232960][ T7755] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 799.272159][ T7755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.302021][ T7755] usb 4-1: Product: syz [ 799.306204][ T7755] usb 4-1: Manufacturer: syz [ 799.342350][ T7755] usb 4-1: SerialNumber: syz [ 799.348082][T18442] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4413'. [ 800.094963][ T7755] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 800.385219][ T6064] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 800.506532][ T5927] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 800.534916][ T7755] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 800.577339][ T7755] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 800.582588][ T6064] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.612173][ T7755] usb 4-1: media controller created [ 800.670993][ T6064] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.679408][ T7755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 800.702049][ T5927] usb 10-1: Using ep0 maxpacket: 8 [ 800.754405][ T5927] usb 10-1: too many endpoints for config 0 interface 0 altsetting 8: 255, using maximum allowed: 30 [ 800.772013][ T6064] usb 9-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 800.781174][ T5927] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 800.927133][ T6064] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.951470][ T5927] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.972943][ T6064] usb 9-1: config 0 descriptor?? [ 801.013847][ T5927] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 801.191695][ T5927] usb 10-1: config 0 interface 0 has no altsetting 0 [ 801.381067][T18479] netlink: set zone limit has 4 unknown bytes [ 801.417708][ T5927] usb 10-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 801.466683][ T5927] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.496928][ T6064] hid-led 0003:1294:1320.0019: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.8-1/input0 [ 801.510538][ T5927] usb 10-1: config 0 descriptor?? [ 801.582390][ T6064] hid-led 0003:1294:1320.0019: Riso Kagaku Webmail Notifier initialized [ 801.721732][ T6064] usb 9-1: USB disconnect, device number 16 [ 801.749797][ T13] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 801.780718][ T5927] usbhid 10-1:0.0: can't add hid device: -71 [ 801.790719][ T5927] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 801.827059][ T13] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 801.841002][ T5927] usb 10-1: USB disconnect, device number 13 [ 801.976834][ T6146] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 802.033861][T18483] fido_id[18483]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 802.310522][ T6064] usb 4-1: USB disconnect, device number 65 [ 802.530275][T18493] netlink: 'syz.8.4423': attribute type 1 has an invalid length. [ 802.565549][T18493] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4423'. [ 802.619141][T18493] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.626665][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.396906][T18512] TCP: TCP_TX_DELAY enabled [ 804.760612][ T32] INFO: task syz.0.3752:15887 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 804.802084][ T32] Tainted: G L syzkaller #0 [ 804.811257][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 804.848641][ T32] task:syz.0.3752 state:D stack:28184 pid:15887 tgid:15882 ppid:14637 task_flags:0x400040 flags:0x00080002 [ 804.889522][ T32] Call Trace: [ 804.933348][ T32] [ 804.993245][ T32] __schedule+0x149b/0x4fd0 [ 804.997806][ T32] ? __pfx___schedule+0x10/0x10 [ 805.083676][ T32] ? schedule+0x91/0x360 [ 805.092059][ T5927] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 805.113405][ T32] schedule+0x165/0x360 [ 805.134507][ T32] schedule_preempt_disabled+0x13/0x30 [ 805.167750][ T32] __mutex_lock+0x7e6/0x1350 [ 805.203871][ T6064] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 805.212481][ T32] ? __mutex_lock+0x5bb/0x1350 [ 805.232581][ T32] ? bdev_open+0xe0/0xd30 [ 805.236944][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 805.291981][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.322145][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.327800][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.373880][ T32] ? disk_block_events+0xab/0x120 [ 805.378919][ T32] ? bdev_open+0xaf/0xd30 [ 805.392257][ T6064] usb 9-1: Using ep0 maxpacket: 8 [ 805.413677][ T32] bdev_open+0xe0/0xd30 [ 805.417871][ T32] blkdev_open+0x457/0x600 [ 805.432250][ T32] ? __pfx_blkdev_open+0x10/0x10 [ 805.437212][ T32] do_dentry_open+0x7ce/0x1420 [ 805.458252][ T32] vfs_open+0x3b/0x340 [ 805.491999][ T32] ? path_openat+0x33f3/0x3dd0 [ 805.496785][ T32] path_openat+0x340e/0x3dd0 [ 805.501389][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 805.522057][ T32] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 805.541955][ T32] ? getname_flags+0xb8/0x540 [ 805.546663][ T32] ? __pfx_path_openat+0x10/0x10 [ 805.551605][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.588961][ T32] ? __lock_acquire+0x6b6/0x2cf0 [ 805.622223][ T32] do_filp_open+0x1fa/0x410 [ 805.626744][ T32] ? __pfx_do_filp_open+0x10/0x10 [ 805.631796][ T32] ? _raw_spin_unlock+0x28/0x50 [ 805.652929][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.658574][ T32] ? alloc_fd+0x64c/0x6c0 [ 805.671969][ T32] do_sys_openat2+0x121/0x200 [ 805.676672][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.692311][ T32] ? __se_sys_futex+0x36f/0x400 [ 805.699087][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 805.706157][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.711807][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 805.721985][ T32] ? rcu_is_watching+0x15/0xb0 [ 805.726781][ T32] __x64_sys_openat+0x138/0x170 [ 805.731650][ T32] do_syscall_64+0xec/0xf80 [ 805.742408][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.748483][ T32] ? trace_irq_disable+0x37/0x100 [ 805.765143][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.771052][ T32] RIP: 0033:0x7f22bc98df90 [ 805.792020][ T32] RSP: 002b:00007f22bd8a4b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 805.800757][ T32] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f22bc98df90 [ 805.822060][ T32] RDX: 0000000000000000 RSI: 00007f22bd8a4c10 RDI: 00000000ffffff9c [ 805.830049][ T32] RBP: 00007f22bd8a4c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 805.862017][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 805.880452][ T32] R13: 00007f22bcbe6128 R14: 00007f22bcbe6090 R15: 00007ffd3f504e18 [ 805.902078][ T32] [ 805.911843][ T32] [ 805.911843][ T32] Showing all locks held in the system: [ 805.931946][ T32] 1 lock held by khungtaskd/32: [ 805.936807][ T32] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 805.956105][ T32] 5 locks held by kworker/u8:7/1133: [ 805.961418][ T32] 2 locks held by getty/5582: [ 806.022223][ T32] #0: ffff88814e2900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 806.062185][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 806.104423][ T32] 5 locks held by kworker/0:5/5927: [ 806.109628][ T32] #0: ffff88801ceded48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 806.183121][ T32] #1: ffffc90005277bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 806.242368][ T32] #2: ffff888028528198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 806.251362][ T32] #3: ffff88802852b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 806.333110][ T32] #4: ffff888143734e68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 806.372007][ T32] 2 locks held by kworker/1:9/6020: [ 806.377238][ T32] 3 locks held by kworker/0:8/6022: [ 806.422021][ T32] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 806.507069][ T32] #1: ffffc9000b5cfbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 806.552009][ T32] #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0 [ 806.602029][ T32] 1 lock held by udevd/6046: [ 806.606667][ T32] #0: ffff888024ce6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 806.673948][ T32] 5 locks held by kworker/0:11/6064: [ 806.679273][ T32] #0: ffff88801ceded48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 806.732042][ T32] #1: ffffc9000b7ffbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 806.782065][ T32] #2: ffff888143b00198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 806.810939][ T32] #3: ffff888143b03518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x215a/0x4ef0 [ 806.821378][ T32] #4: ffff88814373f268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2182/0x4ef0 [ 806.848912][ T32] 3 locks held by kworker/u8:27/14592: [ 806.854684][ T32] #0: ffff88802f44e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 806.866754][ T32] #1: ffffc900047b7bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 806.912321][ T32] #2: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 806.922226][ T32] 2 locks held by syz-executor/15533: [ 806.927635][ T32] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 806.972067][ T32] #1: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x36e/0x6e0 [ 806.988422][ T32] 1 lock held by syz-executor/15562: [ 806.994859][ T32] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 807.007885][ T32] 1 lock held by syz.0.3752/15887: [ 807.013085][ T32] #0: ffff888024ce6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 807.022718][ T32] 4 locks held by syz-executor/17547: [ 807.028117][ T32] #0: ffff8880a6070ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 807.038121][ T32] #1: ffff8880a60700c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 807.047928][ T32] #2: ffffffff8f483948 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 807.058033][ T32] #3: ffff88805d053338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 807.072372][ T32] 1 lock held by syz.8.4436/18532: [ 807.077495][ T32] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 807.086563][ T32] 1 lock held by syz.6.4437/18535: [ 807.091693][ T32] #0: ffffffff8f311d88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 807.101780][ T32] [ 807.109404][ T32] ============================================= [ 807.109404][ T32] [ 807.149699][ T32] NMI backtrace for cpu 0 [ 807.149732][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 807.149768][ T32] Tainted: [L]=SOFTLOCKUP [ 807.149779][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.149794][ T32] Call Trace: [ 807.149804][ T32] [ 807.149815][ T32] dump_stack_lvl+0xe8/0x150 [ 807.149852][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 807.149887][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.149917][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 807.149959][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 807.149998][ T32] sys_info+0x135/0x170 [ 807.150027][ T32] watchdog+0xf95/0xfe0 [ 807.150067][ T32] ? watchdog+0x20a/0xfe0 [ 807.150109][ T32] kthread+0x711/0x8a0 [ 807.150145][ T32] ? __pfx_watchdog+0x10/0x10 [ 807.150179][ T32] ? __pfx_kthread+0x10/0x10 [ 807.150209][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.150243][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 807.150280][ T32] ? __pfx_kthread+0x10/0x10 [ 807.150314][ T32] ret_from_fork+0x510/0xa50 [ 807.150341][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 807.150363][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.150391][ T32] ? __switch_to+0xc9e/0x1480 [ 807.150431][ T32] ? __pfx_kthread+0x10/0x10 [ 807.150465][ T32] ret_from_fork_asm+0x1a/0x30 [ 807.150517][ T32] [ 807.150555][ T32] Sending NMI from CPU 0 to CPUs 1: [ 807.296269][ C1] NMI backtrace for cpu 1 [ 807.296291][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 807.296321][ C1] Tainted: [L]=SOFTLOCKUP [ 807.296330][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.296344][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 807.296376][ C1] Code: 3e b4 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 13 b4 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 807.296396][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 807.296416][ C1] RAX: 0000000000b26837 RBX: ffffffff819713ee RCX: 0000000080000001 [ 807.296433][ C1] RDX: 0000000000000001 RSI: ffffffff8d79207b RDI: ffffffff8bc083e0 [ 807.296450][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 807.296467][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 807.296485][ C1] R13: 1ffff110038d5b70 R14: 0000000000000001 R15: 0000000000000001 [ 807.296504][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 807.296525][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 807.296541][ C1] CR2: 0000200000404030 CR3: 00000000568d0000 CR4: 0000000000350ef0 [ 807.296559][ C1] Call Trace: [ 807.296569][ C1] [ 807.296577][ C1] default_idle+0x13/0x20 [ 807.296603][ C1] default_idle_call+0x73/0xb0 [ 807.296632][ C1] do_idle+0x1be/0x4d0 [ 807.296658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.296685][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 807.296711][ C1] ? __pfx_do_idle+0x10/0x10 [ 807.296743][ C1] cpu_startup_entry+0x44/0x60 [ 807.296768][ C1] start_secondary+0x101/0x110 [ 807.296805][ C1] common_startup_64+0x13e/0x147 [ 807.296846][ C1] [ 807.690883][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 807.697778][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 807.708443][ T32] Tainted: [L]=SOFTLOCKUP [ 807.712752][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 807.722968][ T32] Call Trace: [ 807.726228][ T32] [ 807.729140][ T32] vpanic+0x1e0/0x670 [ 807.733123][ T32] panic+0xb9/0xc0 [ 807.736853][ T32] ? __pfx_panic+0x10/0x10 [ 807.741263][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.746885][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.752506][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 807.757865][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.763483][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 807.769631][ T32] watchdog+0xfdf/0xfe0 [ 807.773784][ T32] ? watchdog+0x20a/0xfe0 [ 807.778111][ T32] kthread+0x711/0x8a0 [ 807.782181][ T32] ? __pfx_watchdog+0x10/0x10 [ 807.786866][ T32] ? __pfx_kthread+0x10/0x10 [ 807.791445][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.797067][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 807.802259][ T32] ? __pfx_kthread+0x10/0x10 [ 807.806840][ T32] ret_from_fork+0x510/0xa50 [ 807.811422][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 807.816559][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 807.822180][ T32] ? __switch_to+0xc9e/0x1480 [ 807.826854][ T32] ? __pfx_kthread+0x10/0x10 [ 807.831432][ T32] ret_from_fork_asm+0x1a/0x30 [ 807.836202][ T32] [ 807.839504][ T32] Kernel Offset: disabled [ 807.843819][ T32] Rebooting in 86400 seconds..