last executing test programs: 12.305501284s ago: executing program 1 (id=3121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x64, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r1, 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x5, 0xfff, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r3, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') 11.125008432s ago: executing program 1 (id=3125): socket$packet(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.859073752s ago: executing program 1 (id=3127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x2) r5 = socket$netlink(0x10, 0x3, 0x14) dup(r5) open(0x0, 0x1850c2, 0x14c) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xff, 0xb, 0x2}}}}]}, 0x40}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x38, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000100)=0x40) 8.419171823s ago: executing program 1 (id=3131): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x226e88d4]}, 0x8) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x1248) 7.748036708s ago: executing program 3 (id=3133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}]}, 0x2c}}, 0x20004400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$isdn(0x22, 0x3, 0x2) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r6 = socket(0x18, 0x3, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r6, r5, 0x0, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x4000) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001000), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004850}, 0xc0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r11 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r11, &(0x7f0000000440)=[{&(0x7f0000000100)='i3', 0x2}], 0x1, 0xad, 0xffffffff, 0x0) write$P9_RVERSION(r11, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x4000001) 7.316218227s ago: executing program 4 (id=3134): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000183b9220b113420016580102030109021b00010000000009040000012e459e00090504", @ANYRESDEC], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40) 6.724039223s ago: executing program 3 (id=3138): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, 0x0) 6.669459858s ago: executing program 2 (id=3140): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0xa01c0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f00000000c0)={'vlan0\x00', @random='|6\b\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000000000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001"], 0x30}], 0x1, 0x0) 5.902508303s ago: executing program 2 (id=3141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x17, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x6, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120149e232fa1220d219960082e7010203010902120001fd0016000904e10000ffffff00"], 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000c947df8a61771b700000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet(0x2, 0x2, 0x1) 5.785798511s ago: executing program 0 (id=3142): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_open_dev$dri(0x0, 0x1, 0x11f1c0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000b938966c57577f76af", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='leases_conflict\x00', r2, 0x0, 0x8}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x2b435f07b54af060}, 0x1fa0d2f524eb0b62) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x9, 0x5, 0xab, 0x80, 0x8, 0x8}) 2.420131247s ago: executing program 2 (id=3143): socket$packet(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1bc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.419835055s ago: executing program 3 (id=3144): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x20000, @loopback, 0xe}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000c80)={&(0x7f0000000080)={0xa, 0x4e22, 0x6, @loopback={0xa000000}, 0x3}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000700)="30c4", 0x2}], 0x1}, 0xc20) 2.184004992s ago: executing program 4 (id=3145): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d", @ANYRES8=0x0, @ANYRES16, @ANYRESOCT=r0, @ANYRESDEC=r0], 0x14}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.170073349s ago: executing program 1 (id=3146): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x7, 0x12) 2.161759121s ago: executing program 0 (id=3147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a66e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001e9ff00850000008200000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.14198193s ago: executing program 3 (id=3148): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x3, 0x0, 0x0, @SEQ_NOTEON}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) sendmsg$unix(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x40800) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl(r4, 0x8b1b, &(0x7f0000000040)) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x7, 0x86c0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x8, 'syz0\x00', 0x5}, 0x1, [0x8, 0x6, 0x4, 0xce, 0x2, 0x3ff, 0xe91, 0x9000000000000000, 0x9a9, 0xfffffffffffffff6, 0x3ff, 0x5, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x3, 0xd2dc, 0x8000, 0x75c4, 0xff, 0x0, 0x7, 0x5, 0x8, 0x0, 0x75e9, 0xf000000, 0x0, 0x2, 0x10000, 0x7, 0x7, 0x0, 0x4636, 0x8c6, 0xffffffffffffffff, 0x3, 0xffffffff, 0x5, 0x1, 0x9, 0x4, 0x7, 0xd954, 0x3, 0x200, 0x7f, 0x7, 0x0, 0x5, 0x5, 0xdea2, 0x2, 0xffffffffffffffff, 0x49b, 0x3, 0x7, 0x7fffffffffffffff, 0x0, 0x0, 0x8001, 0x4, 0x4, 0x7, 0x6, 0xe0bd, 0xfffffffffffffff8, 0x1, 0x7, 0x648, 0xd, 0x1, 0x5, 0xffff, 0x4, 0x4, 0xf, 0x7, 0x800000000000, 0x80, 0x3, 0xb5, 0xffffffffffffea95, 0x4, 0xfffffffffffff800, 0x8, 0x3, 0x9, 0xfffffffffffffffc, 0x5, 0x1, 0x1ff, 0xffff, 0x85e7, 0xc, 0x2, 0x5, 0x6, 0x4, 0x1b0d23f8, 0xe, 0x1, 0x50d3, 0xff, 0x6, 0xfffffffeffffffff, 0x7f, 0x8, 0x0, 0x4, 0x3, 0x6, 0x329, 0x7fffffff, 0x30, 0x2, 0x3f3fe6da, 0x3bb8ef24, 0x7f, 0x2, 0xcf, 0x6, 0x3, 0x0, 0x4]}) 2.128881921s ago: executing program 2 (id=3149): socket$packet(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x24}}, @NFT_MSG_NEWSET={0x0, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x0, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x0, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x0, 0x11, 0x0, 0x1, @lookup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS]}}}, @NFTA_SET_NAME={0x0, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x0, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x0, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x0, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x114}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.980096377s ago: executing program 0 (id=3150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0x101000, 0x0) pipe2(&(0x7f0000000080), 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x5, 0x0, 0x59555956, 0x9, 0x3, [{0x5, 0x2}, {0x3}, {0x0, 0x10}, {0x7, 0x1}, {0xa}, {0xd}, {0x0, 0x2}, {0xfffffffd}]}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009000000000000002f0000000000010000801f0d6927f9da2ea7a100000000000007010000f8fffeffb702000005000000b7030000000000850009000000000085000000070000009500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r5 = eventfd2(0x0, 0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000340)={'geneve1\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x80000001, 0x3, 0x1, 0xd, 0xefe, 0x0, 0x0, 0x8}}) setsockopt$MRT6_ASSERT(r6, 0x29, 0xcf, &(0x7f0000000380), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8001400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r8, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xf5}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040080}, 0x85) io_submit(r4, 0x1, &(0x7f0000000680)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r5}]) lstat(0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1000, 0x0) ioctl$I2C_TENBIT(r9, 0x704, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1.973479684s ago: executing program 1 (id=3151): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000000)={0x1, 0x2, 0x2, 0xb7d375beb1f4ba0d}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) 1.938256258s ago: executing program 4 (id=3152): socket$packet(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, @NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1d0}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.88809331s ago: executing program 3 (id=3153): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044004) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000d00)=""/63, 0x3f}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000001840)=""/161, 0xa1}, {&(0x7f0000001900)=""/187, 0xbb}, {&(0x7f0000000600)=""/135, 0x87}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/4096, 0x1000}], 0x7}, 0x5}], 0x8, 0x0, 0x0) 1.867883863s ago: executing program 2 (id=3154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3}], 0x1, 0x40800) (async) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @rand_addr=0x64010102}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='team_slave_0\x00', 0x2, 0x6, 0x2}) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x6a) (async) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x13) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x10001}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x8000, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0x110, 0x0, 0x1, [@generic, @generic, @typed={0x8, 0x93, 0x0, 0x0, @pid}]}]}, 0x20}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2000000000000000}]) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.754072177s ago: executing program 3 (id=3155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x6, @broadcast}, 0x44, {0x2, 0x4e21, @private=0xa010102}, 'bridge_slave_1\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000001c0)="0fbc330f0d95ba000f326766c744240000801c006766c744240264ffffff6766c744240600000000670f011424b832018ee836b4273ef20f06f20fc2ccd066b92f0a00000f32", 0x46}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) 1.651964464s ago: executing program 0 (id=3156): socket$packet(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b788061", 0x24, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x64, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1ac}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.572125757s ago: executing program 4 (id=3157): bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xb, &(0x7f00000003c0)={0x4, 0x27b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x402}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) (async) dup(0xffffffffffffffff) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) (async) r4 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r4, &(0x7f0000003100)=@name={0x1e, 0x2, 0x0, {{0x2, 0x1}, 0x1}}, 0x10) (async) sendmmsg$inet(r4, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000016c0)}}, {{&(0x7f0000000240)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000280)="65938841c79aa2e7deaac41783baa98ee301ed1efa8154b34aa89d33b28ad7e0e97c0eff6b18643292b3fc57be9424def2947edbfd8be2656c42371de51e5f1d848a0069fd8da02cc7ac79210f6f05c05a91dceeb15d303795669b930b91a071bbe2b7a2ceb8d6cd27cad1312fdeb277", 0x70}, {&(0x7f000001b700)="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", 0x1000}, {&(0x7f0000000400)="1c8c5eb0882b4742c0bd520cdf661a3e910528f6cca261163f20048b4ca627bec0e3a1b69ad8e7f1b569794b4eaaeabe530f4cbecf34e599440b01d59dd4a191798b04f798146451f92e9b4738fa9d20a9d882be8593c9a60f970641d82fe1eeb3ecbdd02238259ac79a34236e3bf6ed6aab86d00e20637e8d26af3dbd1b1db975c82eead21cf362d89bea6d5e123771b324a6a2bf42ab2967e07010244278bcf4bf3b4de36ebf7502432d885e27c78abff6467162ca2e4382f3504293159216e44d93d6c64c67d950814e3019e306a47ed1de856cb8c01e95106bf531481d43fc3c572cc7c19a8bbbd57c4bc3", 0xed}, {&(0x7f0000000580)="a6007efbba31e9887f00b7a82c85155422cbac5d2bc0cc1ec91d211fe19f00ed81a7a395efb4afb8410507bcc253fb889e811b01e4dac591127cc81667fb43b228fb85409d43ceddb970c64efe91fbb0052edd8bc226b165070b2f7c73dbef8e41ef0968206a73b5d6a0c44206b552874cea9c6982746c2ffbf82f49e477d80b1c2018abbffefc986df454e9031a34ccffdabc5f305b0a28e522246f6fdbd6f9f8b59b1b0719e4562af986560a124024a09f43d7d6b21614d52d4984526b63052478c580d81c8aeda0623abfd98bbdc911ddb0eeaf25bb6b10e46c68ce9ed6f93931", 0xe2}, {&(0x7f0000000300)="89d63a0b756a96a056cab795ed270be67c58c214c9de629f1806c171ae75afe77eb55ecf3a5519d78bb47270546e", 0x2e}, {&(0x7f0000000880)="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", 0xfa}], 0x6}}], 0x2, 0x1) (async) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[], 0x3c}}, 0x0) pipe2$watch_queue(0x0, 0x80) (async) add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 1.507930403s ago: executing program 0 (id=3158): setresuid(0xee00, 0xee01, 0xee01) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r1, 0x0, 0x0, 0x0, 0x3000) msgsnd(r1, &(0x7f0000000180)={0x2}, 0x8, 0x800) msgsnd(r1, &(0x7f00000001c0)={0x0, "99c0b2e66240f89ddc3db3ed01a738dd334ccf0df58edad2e76e1c49c82cbeeb89012d93160762d384f632f918558123f2d0f482cbc02b07366331db3fbb0aa9b0dc24925607304a324f921d680f73cf3935d09288a46355a45c2cc67c2c22c7d94a1ee1235c39a831c5b2b7febf6094fc221aa2a844b9b467b86becda26a11e581ec55df299c9a80a87d706a91c74031b6bf75ea254f3f7007e743e0132fd02c7191741e8c8877741ee51f024418f9dd195229767"}, 0xbd, 0x0) msgsnd(r0, &(0x7f0000000340)={0x3}, 0x0, 0x0) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000e80)=""/4096) semctl$SEM_STAT(r2, 0x1, 0x12, &(0x7f0000000000)=""/84) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x20}) 1.347960301s ago: executing program 4 (id=3159): syz_open_dev$usbfs(0x0, 0xf, 0xc340) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="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", @ANYRESHEX=r3, @ANYBLOB=',\x00']) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0xe3, 0x7ffefff9}]}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x120) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='nr_inodes=M']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}]}) open(&(0x7f0000000140)='./file0\x00', 0xa00, 0x0) 136.476102ms ago: executing program 0 (id=3160): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0xfffffffffffffffe}, {}, {0x0, 0x0, 0x8}, 0x0, 0x3502, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) fcntl$lock(r1, 0x25, &(0x7f0000000380)={0x2, 0x1, 0x10000, 0x58, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, &(0x7f0000000280)={"86ae14b283a1f15116247649100e6fccb76af64f84c933e9856efca32732", 0x5, 0x1, 0x0, 0x1, 0x6c, 0x7f, 0x101, 0x1, [0xf4a5, 0x7, 0x1, 0x5, 0x39, 0xaf80, 0x81, 0x6, 0xac, 0x2, 0x4, 0x6, 0x8000, 0x0, 0x4, 0x9, 0xfffffffd, 0x9, 0x8]}) r5 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000440)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x3}, [@ldst={0x0, 0x3, 0x1, 0x4, 0x9, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, r6, 0x19, &(0x7f0000000000)={0x0, 0x8000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81}, 0x10}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc0100000000001000000000000000000000000000000000c8e1949d97050a00000000e5000015844cb4062ed2cb0b611dfe790782a3885f763688b238fe85212f6f42eecdf06491c25958aac7791b9b10d5132ab54a172572c2b0ad10ca76720de2f0e2083c7e55c28e8ac5fb67abd86c6cfe2051b8fb5fbef89a005fa1b128208dbb4bc04dc9d7eaf63ac860db19c6f2ccd2ddaa", @ANYRESOCT=r7, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c0000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x10) sendto$inet6(r8, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r10, r10, 0x0, 0x8) 97.609146ms ago: executing program 4 (id=3161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x8, 0x1009, &(0x7f00000014c0)=""/4105}, 0x94) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0x5) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x1d, 0x20, 0x15c}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @from_mac, @device_b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x801) unshare(0x22020400) unshare(0x18000080) socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x80}}], 0x1, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="a4000000000921040000000000000000030000050900010073797a3100000000640002000c00028005000100210000000c000280050001002f0000002c00018014000300fe80000000000000000000000000000e14000400ff010000000000000000000000000001060003400001000006000340000300000c000280050001001100000008000640000000000900010073797a30000000000c0004800800014000000003"], 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r11 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r11, 0xc054561d, &(0x7f0000000080)={0x5, "114e800bedcaba37f90c3fa5d37c337403f0f7fedc266b5b8118f373a959673f", 0x4, 0x1, 0x6, 0x3, 0x8, 0x2, 0x10, 0x6}) lseek(r10, 0x2000, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f00000003c0)={r8, r9/1000+60000}, 0x10) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) 0s ago: executing program 2 (id=3162): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c000180080001407f00011c0c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40004, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x83}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) semop(0x0, &(0x7f00000003c0)=[{0x0, 0xfffc}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x3, 0xffffffffffffffff, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10, 0x0}, 0x4000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x34, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$TCFLSH(r5, 0x400455c8, 0x2) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000340)) sendmsg$NFT_BATCH(r3, 0x0, 0x0) recvfrom$inet(r5, &(0x7f00000002c0)=""/8, 0x8, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 7.620285][T13714] netlink: 'syz.2.2389': attribute type 21 has an invalid length. [ 767.654637][T13714] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 767.662545][T13714] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2389'. [ 768.560074][T13728] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 771.253480][T13749] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2401'. [ 771.262697][T13749] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2401'. [ 771.272202][T13749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2401'. [ 772.449488][T13534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 773.586557][T13762] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2402'. [ 773.842671][T13534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 773.962690][T13534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 773.986718][T13534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 774.264991][T13534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.299401][T13534] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.481616][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 774.847554][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.854861][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.110817][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 775.126577][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 775.269528][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.276828][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.286883][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 775.347722][ T9] usb 5-1: Product: syz [ 775.357823][ T9] usb 5-1: Manufacturer: syz [ 775.367984][ T9] usb 5-1: SerialNumber: syz [ 775.403265][ T9] usb 5-1: config 0 descriptor?? [ 775.617834][ T9] usb 5-1: USB disconnect, device number 83 [ 777.219747][T13534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.236392][ T30] audit: type=1326 audit(2000000173.009:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13802 comm="syz.4.2414" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc15e98e929 code=0x0 [ 777.328317][T13534] veth0_vlan: entered promiscuous mode [ 777.340791][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 777.357579][T13534] veth1_vlan: entered promiscuous mode [ 777.407494][T13534] veth0_macvtap: entered promiscuous mode [ 777.422603][T13534] veth1_macvtap: entered promiscuous mode [ 777.459117][T13534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.496119][T13534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.508414][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 777.516207][T13534] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.525362][T13534] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.534442][T13534] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.546009][T13534] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.588276][ T9] usb 3-1: config 7 has an invalid interface number: 5 but max is 0 [ 777.601005][ T9] usb 3-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 777.609904][ T9] usb 3-1: config 7 has no interface number 0 [ 777.620278][ T9] usb 3-1: config 7 interface 5 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 777.636018][ T9] usb 3-1: config 7 interface 5 altsetting 6 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 777.665025][ T9] usb 3-1: config 7 interface 5 altsetting 6 bulk endpoint 0xE has invalid maxpacket 16 [ 777.687937][ T9] usb 3-1: config 7 interface 5 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 777.698978][ T9] usb 3-1: config 7 interface 5 altsetting 6 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 777.714387][ T9] usb 3-1: config 7 interface 5 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 777.726437][ T9] usb 3-1: config 7 interface 5 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 777.759719][ T9] usb 3-1: config 7 interface 5 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 777.777002][ T9] usb 3-1: config 7 interface 5 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 777.796324][ T9] usb 3-1: config 7 interface 5 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 777.809712][ T9] usb 3-1: config 7 interface 5 has no altsetting 0 [ 777.833004][ T9] usb 3-1: New USB device found, idVendor=05c6, idProduct=900d, bcdDevice=9a.ea [ 777.854984][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.873345][ T9] usb 3-1: Product: syz [ 777.887964][ T9] usb 3-1: Manufacturer: syz [ 777.898064][ T9] usb 3-1: SerialNumber: syz [ 777.927189][T13800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 777.999840][ T6333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.008474][ T6333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.130627][T13810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2416'. [ 778.140720][T13810] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2416'. [ 778.167374][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.169366][T13810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2416'. [ 778.220373][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.597058][ T5897] usb 3-1: USB disconnect, device number 94 [ 779.105470][T13819] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2417'. [ 779.926942][ T30] audit: type=1326 audit(2000000175.699:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 779.959978][ T30] audit: type=1326 audit(2000000175.699:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 780.237586][ T30] audit: type=1326 audit(2000000175.729:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 781.231123][ T977] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 781.256720][ T30] audit: type=1326 audit(2000000175.729:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 781.508761][ T30] audit: type=1326 audit(2000000175.729:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 781.540402][ T30] audit: type=1326 audit(2000000175.729:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 781.650297][T13841] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2425'. [ 782.100852][ T30] audit: type=1326 audit(2000000175.729:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 782.122842][ T30] audit: type=1326 audit(2000000175.729:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 782.145315][ T30] audit: type=1326 audit(2000000175.759:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 782.330294][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 782.330315][ T30] audit: type=1326 audit(2000000177.979:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 782.332119][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 782.336471][ T30] audit: type=1326 audit(2000000177.979:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13825 comm="syz.2.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c778e929 code=0x7ffc0000 [ 782.420685][ T977] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 782.430555][ T977] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 782.438806][ T977] usb 2-1: Product: syz [ 782.443379][ T977] usb 2-1: Manufacturer: syz [ 782.448090][ T977] usb 2-1: SerialNumber: syz [ 782.462658][ T977] usb 2-1: config 0 descriptor?? [ 782.519544][T13832] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.033095][ T977] usb 2-1: USB disconnect, device number 89 [ 783.346203][T13860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2432'. [ 783.357595][T13860] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2432'. [ 783.369111][T13860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2432'. [ 783.455456][T13861] misc userio: Invalid payload size [ 783.502769][T13861] misc userio: Invalid payload size [ 783.541056][T13856] misc userio: The device must be registered before sending interrupts [ 787.089554][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2438'. [ 787.630332][ T5948] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 787.682392][T13902] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2444'. [ 788.163283][ T5897] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 788.290031][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 788.489429][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 788.500815][ T5897] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 789.231871][ T5948] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 789.263355][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 789.273230][ T5948] usb 1-1: Product: syz [ 789.277466][ T5948] usb 1-1: Manufacturer: syz [ 789.277619][ T5897] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.282189][ T5948] usb 1-1: SerialNumber: syz [ 789.285527][ T5948] usb 1-1: config 0 descriptor?? [ 789.352798][ T5897] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 789.384937][ T5897] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 789.398127][ T5897] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 789.413024][ T5897] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.426548][ T5897] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 789.442523][ T5897] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 789.456538][ T5897] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 789.468529][ T5897] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 789.483956][ T5897] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 789.499010][ T5897] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 789.517753][ T5897] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 789.533284][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.541544][ T5897] usb 3-1: Product: syz [ 789.545811][ T5897] usb 3-1: Manufacturer: syz [ 789.554512][ T977] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 789.565029][ T5897] usb 3-1: SerialNumber: syz [ 789.582714][ T9] usb 1-1: USB disconnect, device number 89 [ 789.594448][T13916] misc userio: Invalid payload size [ 789.619919][ T5948] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 789.646964][T13916] misc userio: Invalid payload size [ 789.669007][T13916] misc userio: The device must be registered before sending interrupts [ 789.722021][ T977] usb 2-1: not running at top speed; connect to a high speed hub [ 789.770050][ T977] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 789.784642][T13891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.793698][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 511, setting to 64 [ 789.800872][ T5948] usb 4-1: no configurations [ 789.809341][ T5948] usb 4-1: can't read configurations, error -22 [ 789.814341][T13891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.824015][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.866819][ T977] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 789.878049][ T5897] adutux 3-1:168.0: interrupt endpoints not found [ 789.890566][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.901555][ T5897] usb 3-1: USB disconnect, device number 95 [ 789.909185][ T977] usb 2-1: Product: 霱싄痭ꠅ耝締ᰏ낖Ꝗᕈχ滧㸙圸⑲綶㬗ﰧ䣫㇜ꭙ䷝弇긋鷈꼣㶛熃羳鱈Ƀﰅ㙺页믇툜瓝縒釔粈ᄥ鯤ᴰŰ얯蕧能暰戡噵蛰첋귣褷쵪䄔蟰糳쓁қ暽問㞊皶漊휓ށ㶛Ⱗ䎪⤲䴶跀ᱍ꣢楄ἳ飹ꕞ못㾳⃀嬼끛⻋兙夯 [ 789.940099][ T977] usb 2-1: Manufacturer: 伋껲㼄㍋ꝶ㥨멂䷗됹뢐䆇ຏ촔䴲䢾䑏ⓓÚ頂뉔虌訮귛栚塞Ⓤ緇敕焾ᦁ礙ড়닕䐢┛煢ꇟᆡ될꺠푐ꄈ盄귰텶淰腼䕄薕齪䈞᧋冰祧ႎ᩽櫓ᑆ渟ﲃ蔎밧뻵秏낀쫌쐸長ᖐ䠧䷫䶭Ᏻ鬒⫕앀땭㨍茒ꅂ쎔ƥ胈∗禳⼫⣞Ц媮丝揅㦽꘼憠뚑鎘᦮㍳㖅澅㼏䎸컜踉 [ 789.982466][ T977] usb 2-1: SerialNumber: 鳕鮳ꗊܑ慍팚ʩ䑭㴻᙮繌ҩ渂꘽㏤龧퐠↟궭抶꫇糡竽ည❩㱪ּ햹㔛刍到眴輂띡떄⺼鹻䯨᪡옕隟갵⯁뒸䃒ᆂﮦ뿁㞠車⩓橗扴퍵ꅽ髶퓾엛綆䡿ү汱㼭砒癍ආ卡椾Ⴖ颟䀧ꓨ哂㺌唜궚ᖻ澎⿯ꚴ镬ﻫ [ 790.020218][ T5948] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 790.080506][ T977] usb 2-1: config 0 descriptor?? [ 790.087547][T13908] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 790.094932][T13908] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 790.108306][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2452'. [ 790.203559][ T5948] usb 4-1: no configurations [ 790.240327][ T5948] usb 4-1: can't read configurations, error -22 [ 790.283629][ T5948] usb usb4-port1: attempt power cycle [ 790.682308][ T5948] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 790.731340][ T5948] usb 4-1: no configurations [ 790.739862][ T5948] usb 4-1: can't read configurations, error -22 [ 790.828820][T13926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2455'. [ 790.867471][T13921] xt_CT: No such helper "snmp_trap" [ 790.890654][ T5948] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 790.923847][ T5948] usb 4-1: no configurations [ 790.928526][ T5948] usb 4-1: can't read configurations, error -22 [ 790.953989][ T5948] usb usb4-port1: unable to enumerate USB device [ 791.105391][T13929] kvm: pic: non byte write [ 791.219798][ T5948] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 791.381175][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 791.397701][ T5948] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 791.429253][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 791.463094][ T5948] usb 3-1: Product: syz [ 791.476975][ T977] usb 2-1: USB disconnect, device number 90 [ 791.480141][ T5948] usb 3-1: Manufacturer: syz [ 791.506812][ T5948] usb 3-1: SerialNumber: syz [ 791.517651][ T5948] usb 3-1: config 0 descriptor?? [ 791.851566][ T5948] usb 3-1: USB disconnect, device number 96 [ 791.860820][T13952] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 791.867813][T13952] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 792.191224][T13959] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2463'. [ 792.308940][T13952] vhci_hcd vhci_hcd.0: Device attached [ 792.534486][T13960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2465'. [ 792.572213][T13960] netlink: 'syz.0.2465': attribute type 10 has an invalid length. [ 792.628350][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'. [ 792.740216][ T9509] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 792.763692][T13960] team0: Device bond0 is already an upper device of the team interface [ 793.131521][T13961] bond0: (slave team0): Releasing backup interface [ 793.181261][T13961] team0 (unregistering): left promiscuous mode [ 793.187962][T13961] team_slave_0: left promiscuous mode [ 793.195151][T13961] team_slave_1: left promiscuous mode [ 793.202460][T13961] team0 (unregistering): left allmulticast mode [ 793.208951][T13961] team_slave_0: left allmulticast mode [ 793.214711][T13961] team_slave_1: left allmulticast mode [ 793.405283][T13961] team0 (unregistering): Port device team_slave_0 removed [ 793.575230][T13961] team0 (unregistering): Port device team_slave_1 removed [ 796.046962][T13954] vhci_hcd: connection reset by peer [ 796.063315][ T6330] vhci_hcd: stop threads [ 796.068908][ T6330] vhci_hcd: release socket [ 796.082576][ T6330] vhci_hcd: disconnect device [ 796.687991][ T30] audit: type=1326 audit(2000000192.030:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13984 comm="syz.1.2474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6233f8e929 code=0x0 [ 798.349418][ T977] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 798.700620][ T9509] vhci_hcd: vhci_device speed not set [ 798.935789][ T5897] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 798.972685][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 798.993754][ T977] usb 2-1: unable to get BOS descriptor or descriptor too short [ 799.010824][ T977] usb 2-1: config 4 interface 0 has no altsetting 0 [ 799.022912][ T977] usb 2-1: string descriptor 0 read error: -22 [ 799.036261][ T977] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 799.047742][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.075618][ T977] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 799.095643][ T977] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 799.121479][ T5897] usb 1-1: no configurations [ 799.126219][ T5897] usb 1-1: can't read configurations, error -22 [ 799.133247][ T977] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 799.153131][ T977] usb 2-1: media controller created [ 799.202370][ T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 799.279541][ T5897] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 799.367594][T14017] FAT-fs (nullb0): bogus number of reserved sectors [ 799.385973][T14017] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 799.436030][T14019] xt_bpf: check failed: parse error [ 799.463045][ T5897] usb 1-1: no configurations [ 799.467922][ T5897] usb 1-1: can't read configurations, error -22 [ 799.502638][ T5897] usb usb1-port1: attempt power cycle [ 799.580549][T14020] overlayfs: missing 'lowerdir' [ 799.929495][ T5897] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 800.017009][ T5897] usb 1-1: no configurations [ 800.055620][ T5897] usb 1-1: can't read configurations, error -22 [ 800.309526][ T5897] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 800.351137][T13990] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 800.357513][ T977] zl10353_read_register: readreg error (reg=127, ret==0) [ 800.604371][ T5897] usb 1-1: device descriptor read/8, error -71 [ 800.754301][ T977] usb 2-1: USB disconnect, device number 91 [ 800.760975][ T5897] usb usb1-port1: unable to enumerate USB device [ 800.972995][T14031] tmpfs: Bad value for 'mpol' [ 802.169344][ T5897] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 802.561444][ T5897] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 802.572265][ T5897] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 802.581732][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.592531][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 802.601728][ T5897] usb 4-1: config 0 has no interface number 0 [ 802.608333][ T5897] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 802.792017][ T5897] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 802.804332][ T5897] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 802.815718][ T5897] usb 4-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 802.830794][ T5897] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 803.519098][ T9509] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 803.622171][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.660406][ T5897] usb 4-1: config 0 descriptor?? [ 803.670506][ T5897] gspca_main: spca561-2.14.0 probing abcd:cdee [ 804.540270][ T5897] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 804.557695][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 804.679359][ T5897] usb 4-1: MIDIStreaming interface descriptor not found [ 804.741088][ T9509] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 804.763169][ T9509] usb 5-1: config 1 interface 0 has no altsetting 0 [ 804.784059][ T5897] usb 4-1: USB disconnect, device number 10 [ 804.787046][ T9509] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 804.812433][ T9509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.821277][T14078] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 804.829063][ T9509] usb 5-1: Product: syz [ 804.839828][ T9509] usb 5-1: Manufacturer: syz [ 804.870991][ T9509] usb 5-1: SerialNumber: syz [ 805.012659][ T44] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 805.126714][ T9509] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input100 [ 805.174159][ T9509] usb 5-1: USB disconnect, device number 84 [ 805.196897][ T44] usb 1-1: config 129 has an invalid interface number: 164 but max is 0 [ 805.213468][ T44] usb 1-1: config 129 has no interface number 0 [ 805.222056][ T44] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 805.241796][T14079] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2502'. [ 805.255840][ T44] usb 1-1: config 129 interface 164 altsetting 183 has a duplicate endpoint with address 0x1, skipping [ 805.274840][ T44] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 805.302000][T14079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.339720][ T44] usb 1-1: config 129 interface 164 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 805.413295][ T44] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 805.515547][ T44] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x5 has invalid maxpacket 104, setting to 64 [ 805.539140][ T5924] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 805.617574][ T44] usb 1-1: config 129 interface 164 altsetting 183 has a duplicate endpoint with address 0x7, skipping [ 805.693143][ T44] usb 1-1: config 129 interface 164 has no altsetting 0 [ 805.751026][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 805.816165][ T44] usb 1-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=d6.86 [ 805.826701][ T5924] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 805.906313][ T5924] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 805.926199][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.014438][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 806.014970][ T44] usb 1-1: Manufacturer: ж [ 806.034911][ T44] usb 1-1: SerialNumber: ч [ 806.187000][ T5924] usb 2-1: config 1 has no interface number 0 [ 806.297390][ T5924] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 806.476609][ T5924] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 806.623092][T14074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.725912][ T5924] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 806.792885][T14074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.868236][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.357286][ T5924] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 807.374796][ T44] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 807.545509][ T5924] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 808.543307][ T44] snd-usb-audio 1-1:129.164: probe with driver snd-usb-audio failed with error -2 [ 808.560052][T11613] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 808.667605][ T44] usb 1-1: USB disconnect, device number 94 [ 808.793020][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.799925][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.935996][T14111] xt_bpf: check failed: parse error [ 809.045186][T14112] 9pnet_fd: Insufficient options for proto=fd [ 810.168772][ T44] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 810.211673][ T9] usb 2-1: USB disconnect, device number 92 [ 810.227125][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 811.055788][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 811.065819][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 811.078648][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 811.133071][ T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 811.196387][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 811.279674][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.576261][ T44] usb 1-1: config 0 descriptor?? [ 811.828853][ T44] hdpvr 1-1:0.0: firmware version 0x0 dated [ 811.861483][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2519'. [ 811.861972][ T44] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 812.048770][ T977] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 812.204732][T14149] xt_bpf: check failed: parse error [ 812.265989][ T977] usb 2-1: config 129 has an invalid interface number: 164 but max is 0 [ 812.319296][T14151] 9pnet_fd: Insufficient options for proto=fd [ 812.334185][ T977] usb 2-1: config 129 has no interface number 0 [ 812.341249][ T977] usb 2-1: config 129 interface 164 altsetting 183 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 812.353732][ T977] usb 2-1: config 129 interface 164 altsetting 183 has a duplicate endpoint with address 0x1, skipping [ 812.365555][ T977] usb 2-1: config 129 interface 164 altsetting 183 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 812.403003][ T977] usb 2-1: config 129 interface 164 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 812.779909][ T977] usb 2-1: config 129 interface 164 altsetting 183 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 812.854596][ T977] usb 2-1: config 129 interface 164 altsetting 183 endpoint 0x5 has invalid maxpacket 104, setting to 64 [ 812.948741][ T977] usb 2-1: config 129 interface 164 altsetting 183 has a duplicate endpoint with address 0x7, skipping [ 813.115678][ T44] hdpvr 1-1:0.0: Could not setup controls [ 813.125504][ T977] usb 2-1: config 129 interface 164 has no altsetting 0 [ 813.139263][ T44] hdpvr 1-1:0.0: registering videodev failed [ 813.157181][ T44] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 813.172892][ T44] usb 1-1: USB disconnect, device number 95 [ 813.205637][ T977] usb 2-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=d6.86 [ 813.239059][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.241879][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 813.281983][ T977] usb 2-1: Manufacturer: ж [ 813.286668][ T977] usb 2-1: SerialNumber: ч [ 813.559327][T14138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.589038][T14138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.668905][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 813.802255][ T977] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 813.842620][ T9] usb 5-1: config 0 has an invalid interface number: 91 but max is 0 [ 813.863426][ T9] usb 5-1: config 0 has no interface number 0 [ 813.876208][ T977] snd-usb-audio 2-1:129.164: probe with driver snd-usb-audio failed with error -2 [ 813.886816][ T9] usb 5-1: config 0 interface 91 has no altsetting 0 [ 813.909363][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=60.41 [ 813.929457][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.940285][ T977] usb 2-1: USB disconnect, device number 93 [ 813.950893][ T9] usb 5-1: config 0 descriptor?? [ 813.968739][ T5897] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 814.219017][ T9] usb 5-1: string descriptor 0 read error: -71 [ 814.229348][ T9] usb 5-1: Found UVC 0.00 device (174f:5212) [ 814.236364][ T9] usb 5-1: No valid video chain found. [ 814.243132][ T5897] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 814.252817][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.263089][ T9] usb 5-1: USB disconnect, device number 85 [ 814.269187][ T5897] usb 1-1: Product: syz [ 814.273455][ T5897] usb 1-1: Manufacturer: syz [ 814.278151][ T5897] usb 1-1: SerialNumber: syz [ 814.290547][ T5897] usb 1-1: config 0 descriptor?? [ 814.300783][ T5897] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 814.698983][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 814.729069][ T5897] usb 1-1: USB disconnect, device number 96 [ 815.505576][ T44] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 815.536167][ T44] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 815.660805][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.688512][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 815.698210][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.717963][ T9] usb 2-1: config 0 descriptor?? [ 815.727265][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 816.019280][ T5897] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 816.166863][T14218] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2553'. [ 816.346051][ T977] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 816.369275][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 816.678637][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 816.702141][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 816.782778][ T5897] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 816.792607][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 816.815977][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.825079][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 816.853278][ T5897] usb 4-1: config 0 descriptor?? [ 816.871018][ T977] usb 1-1: config 129 has an invalid interface number: 164 but max is 0 [ 816.886130][ T977] usb 1-1: config 129 has no interface number 0 [ 816.893717][ T977] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 816.906419][ T977] usb 1-1: config 129 interface 164 altsetting 183 has a duplicate endpoint with address 0x1, skipping [ 816.917999][ T977] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 816.932152][ T977] usb 1-1: config 129 interface 164 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 816.944953][ T977] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 816.975819][ T977] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x5 has invalid maxpacket 104, setting to 64 [ 816.994536][ T977] usb 1-1: config 129 interface 164 has no altsetting 0 [ 817.036740][ T977] usb 1-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=d6.86 [ 817.060423][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 817.083254][ T5897] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 817.093322][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 817.107406][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.134361][ T977] usb 1-1: Manufacturer: ж [ 817.139820][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 817.153882][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 817.175275][ T977] usb 1-1: SerialNumber: ч [ 817.180742][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 817.419935][ T5897] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 817.427911][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 817.436159][ T5897] usb 4-1: media controller created [ 817.446250][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 817.469758][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 817.476969][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 817.495333][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.508366][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 817.517955][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 817.548488][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 817.557313][ T9] pwc: Registered as video103. [ 817.571076][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input101 [ 817.591418][ T9] usb 2-1: USB disconnect, device number 94 [ 817.661493][T14215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.694101][T14215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.024136][ T977] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 818.786201][ T977] snd-usb-audio 1-1:129.164: probe with driver snd-usb-audio failed with error -2 [ 818.817561][ T977] usb 1-1: USB disconnect, device number 97 [ 818.976511][ T5897] stb0899_attach: Driver disabled by Kconfig [ 818.986537][ T5897] az6027: no front-end attached [ 818.986537][ T5897] [ 818.994373][ T5897] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 819.016816][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input102 [ 819.035909][ T5897] dvb-usb: schedule remote query interval to 400 msecs. [ 819.057485][ T5897] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 819.068239][ T5924] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 819.223208][ T44] usb 4-1: USB disconnect, device number 11 [ 819.243696][ T5924] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 819.297322][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.343184][ T5924] usb 3-1: Product: syz [ 819.377326][ T5924] usb 3-1: Manufacturer: syz [ 819.396158][ T5924] usb 3-1: SerialNumber: syz [ 819.428484][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 819.466033][ T5924] usb 3-1: config 0 descriptor?? [ 820.211993][ T5924] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 820.631620][T14269] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2569'. [ 821.150744][ T977] usb 3-1: USB disconnect, device number 97 [ 822.298736][ T44] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 822.479834][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.507190][ T44] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 822.526074][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.562055][ T44] usb 2-1: config 0 descriptor?? [ 822.582483][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 822.753241][T14296] comedi comedi0: comedi_config --init_data is deprecated [ 823.148886][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 823.156898][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 823.198035][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 823.219448][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 823.949887][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 824.058706][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 824.068265][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 824.076501][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 824.083521][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 824.090525][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 824.107982][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 824.120252][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 824.134542][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 824.146984][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 824.171693][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 824.207654][ T44] pwc: Registered as video103. [ 824.225487][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 824.430670][ T44] usb 2-1: USB disconnect, device number 95 [ 825.630232][T14327] _Z`Ԁ@: entered promiscuous mode [ 825.737903][ T44] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 825.767884][T10674] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 825.797248][T14329] No control pipe specified [ 825.917856][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 825.945390][T14332] misc userio: Invalid payload size [ 825.954065][T14332] misc userio: Invalid payload size [ 825.961798][T14332] misc userio: The device must be registered before sending interrupts [ 826.043505][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 826.104570][ T44] usb 4-1: can't read configurations, error -61 [ 826.359641][ T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 826.558267][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 826.613478][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 826.620862][T10674] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 826.703920][ T44] usb 4-1: can't read configurations, error -61 [ 826.778401][ T44] usb usb4-port1: attempt power cycle [ 826.883773][T10674] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.897741][T10674] usb 2-1: Product: syz [ 826.902018][T10674] usb 2-1: Manufacturer: syz [ 826.916984][T10674] usb 2-1: SerialNumber: syz [ 826.948956][T10674] usb 2-1: config 0 descriptor?? [ 826.970431][T10674] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 827.070622][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2593'. [ 827.120419][T14339] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2594'. [ 827.154512][T14339] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2594'. [ 827.160745][T10674] sonixb 2-1:0.0: Error reading register 00: -71 [ 827.174633][T10674] usb 2-1: USB disconnect, device number 96 [ 827.187900][ T44] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 827.188691][T14339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'. [ 827.214016][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 827.224432][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 827.281147][ T44] usb 4-1: can't read configurations, error -61 [ 827.431995][T14346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2592'. [ 827.626979][ T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 827.677876][ T1210] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 827.838185][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 827.845963][ T44] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 827.854242][ T44] usb 4-1: can't read configurations, error -61 [ 827.870888][ T44] usb usb4-port1: unable to enumerate USB device [ 827.973047][T14351] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2597'. [ 828.647682][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 828.655057][ T1210] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 828.667911][ T1210] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 828.676863][ T1210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 828.688688][ T1210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 828.706587][ T1210] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 828.717495][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.731363][ T1210] hub 3-1:1.0: bad descriptor, ignoring hub [ 828.737339][ T1210] hub 3-1:1.0: probe with driver hub failed with error -5 [ 828.745659][ T1210] cdc_wdm 3-1:1.0: skipping garbage [ 828.761488][ T1210] cdc_wdm 3-1:1.0: skipping garbage [ 828.774054][ T1210] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 828.787889][ T9] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 828.795455][ T1210] cdc_wdm 3-1:1.0: Unknown control protocol [ 828.910125][T14363] binder: 14361:14363 ioctl c00c620f 200000000000 returned -22 [ 828.921498][T14364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2603'. [ 828.970094][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.007431][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 829.009553][ T44] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 829.027929][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.053828][ T9] usb 2-1: config 0 descriptor?? [ 829.063123][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2605'. [ 829.076722][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 829.331305][ T44] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 829.372553][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.402591][ T44] usb 5-1: config 0 has no interface number 0 [ 829.421380][ T44] usb 5-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 829.446820][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.476887][ T44] usb 5-1: config 0 descriptor?? [ 829.482120][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 829.501012][ T44] rndis_host 5-1:0.9: More than one union descriptor, skipping ... [ 829.504849][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 829.532821][ T44] usb 5-1: bad CDC descriptors [ 829.547216][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 829.555496][ T44] cdc_acm 5-1:0.9: More than one union descriptor, skipping ... [ 829.571237][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 829.814589][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 829.835352][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 829.854055][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 829.879883][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 829.898054][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 829.913583][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 829.924173][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 829.933298][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 829.943095][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 830.082249][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 830.089428][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 830.143011][ T9] pwc: Registered as video103. [ 830.165309][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input104 [ 830.188063][T10674] usb 3-1: USB disconnect, device number 98 [ 830.259644][ T9] usb 2-1: USB disconnect, device number 97 [ 831.548928][ T44] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 831.708588][ T44] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 831.718628][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.734183][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.750404][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 831.764803][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.774341][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.790290][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 831.799955][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.809352][ T5924] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 831.821494][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.843445][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 831.852450][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 831.865122][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 831.876364][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 831.884593][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 832.737895][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 832.779564][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 832.779705][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 832.835274][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 832.854710][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 832.873508][ T5924] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 832.901056][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.913486][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 832.933850][ T5924] usb 4-1: config 0 descriptor?? [ 832.944057][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 832.958933][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 832.982449][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.017824][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 833.039174][ T5948] usb 5-1: USB disconnect, device number 86 [ 833.076400][ T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 833.122148][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 833.172505][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 833.205776][ T44] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 833.230109][ T44] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 833.390790][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 833.439300][ T44] usb 2-1: Product: syz [ 833.439346][ T5924] pwc: recv_control_msg error -32 req 02 val 2700 [ 833.480611][ T5924] pwc: recv_control_msg error -32 req 02 val 2c00 [ 833.575603][ T5924] pwc: recv_control_msg error -32 req 04 val 1000 [ 833.623087][ T44] usb 2-1: Manufacturer: syz [ 833.701403][ T44] usb 2-1: SerialNumber: syz [ 833.811025][ T44] usb 2-1: config 0 descriptor?? [ 833.842534][ T44] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 833.877518][ T5924] pwc: recv_control_msg error -32 req 04 val 1400 [ 833.899182][ T5924] pwc: recv_control_msg error -71 req 02 val 2000 [ 833.942564][ T5924] pwc: recv_control_msg error -71 req 02 val 2100 [ 833.977736][ T5924] pwc: recv_control_msg error -71 req 04 val 1500 [ 833.994987][ T5924] pwc: recv_control_msg error -71 req 02 val 2500 [ 834.019769][ T5924] pwc: recv_control_msg error -71 req 02 val 2400 [ 834.067541][ T5924] pwc: recv_control_msg error -71 req 02 val 2600 [ 834.076898][ T44] usb 2-1: USB disconnect, device number 98 [ 834.096698][ T5924] pwc: recv_control_msg error -71 req 02 val 2900 [ 834.108598][ T44] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 834.127126][ T5924] pwc: recv_control_msg error -71 req 02 val 2800 [ 834.162040][ T5924] pwc: recv_control_msg error -71 req 04 val 1100 [ 834.184627][ T5924] pwc: recv_control_msg error -71 req 04 val 1200 [ 834.202062][ T5924] pwc: Registered as video103. [ 834.209922][ T5924] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input105 [ 834.231148][ T5924] usb 4-1: USB disconnect, device number 16 [ 834.408137][ T5948] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 834.430119][T11613] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 834.828325][ T5948] usb 5-1: device descriptor read/64, error -71 [ 834.865298][T11613] usb 1-1: config 129 has an invalid interface number: 164 but max is 0 [ 834.874599][T11613] usb 1-1: config 129 has no interface number 0 [ 834.897470][T11613] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 834.927290][T11613] usb 1-1: config 129 interface 164 altsetting 183 has a duplicate endpoint with address 0x1, skipping [ 834.962621][T11613] usb 1-1: config 129 interface 164 altsetting 183 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 834.987289][T11613] usb 1-1: config 129 interface 164 altsetting 183 has an invalid descriptor for endpoint zero, skipping [ 835.037278][T11613] usb 1-1: config 129 interface 164 has no altsetting 0 [ 835.047417][T11613] usb 1-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=d6.86 [ 835.056513][T11613] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.097352][ T5948] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 835.105143][T11613] usb 1-1: Manufacturer: ж [ 835.117922][T11613] usb 1-1: SerialNumber: ч [ 835.249886][ T5948] usb 5-1: device descriptor read/64, error -71 [ 835.354585][T14434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.363727][ T5948] usb usb5-port1: attempt power cycle [ 835.371838][T14434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.556180][T14450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.601980][T11613] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 835.630481][T11613] snd-usb-audio 1-1:129.164: probe with driver snd-usb-audio failed with error -2 [ 835.633956][T14451] sctp: [Deprecated]: syz.2.2635 (pid 14451) Use of int in maxseg socket option. [ 835.633956][T14451] Use struct sctp_assoc_value instead [ 835.663653][T11613] usb 1-1: USB disconnect, device number 98 [ 835.717505][ T5948] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 835.758256][ T5948] usb 5-1: device descriptor read/8, error -71 [ 836.017478][ T5948] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 836.049569][ T5948] usb 5-1: device descriptor read/8, error -71 [ 836.182018][ T5948] usb usb5-port1: unable to enumerate USB device [ 839.231585][T14500] overlayfs: empty lowerdir [ 839.783577][ T9] usb 5-1: new full-speed USB device number 91 using dummy_hcd [ 839.856895][T10674] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 840.020451][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 840.030134][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 840.050705][ T9] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 840.077250][ T9] usb 5-1: config 0 has no interface number 0 [ 840.097180][T10674] usb 4-1: Using ep0 maxpacket: 32 [ 840.102523][ T9] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 840.147875][T10674] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 41993, setting to 1024 [ 840.166735][ T9] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 840.187312][T10674] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 840.228015][ T9] usb 5-1: config 0 interface 88 has no altsetting 0 [ 840.268475][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 840.278317][T10674] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 840.297080][T10674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.305409][ T9] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 840.327154][T10674] usb 4-1: Product: syz [ 840.332413][ T9] usb 5-1: Product: syz [ 840.342134][T10674] usb 4-1: Manufacturer: syz [ 840.347299][ T9] usb 5-1: SerialNumber: syz [ 840.361618][T10674] usb 4-1: SerialNumber: syz [ 840.379468][ T9] usb 5-1: config 0 descriptor?? [ 840.385511][T10674] usb 4-1: config 0 descriptor?? [ 840.402327][T14486] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 840.443084][T10674] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input106 [ 840.660068][ T30] audit: type=1326 audit(2000000236.443:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15e98e929 code=0x7ffc0000 [ 840.713919][T11613] usb 4-1: USB disconnect, device number 17 [ 840.713984][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 840.748444][ T30] audit: type=1326 audit(2000000236.463:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fc15e98e929 code=0x7ffc0000 [ 840.797821][ T30] audit: type=1326 audit(2000000236.463:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc15e98e929 code=0x7ffc0000 [ 840.843634][ T30] audit: type=1326 audit(2000000236.463:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15e98e52b code=0x7ffc0000 [ 840.900350][ T30] audit: type=1326 audit(2000000236.483:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15e98e52b code=0x7ffc0000 [ 840.962981][ T30] audit: type=1326 audit(2000000236.493:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15e98e52b code=0x7ffc0000 [ 841.011230][ T9] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input107 [ 841.020693][ T30] audit: type=1326 audit(2000000236.513:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15e98e52b code=0x7ffc0000 [ 841.060340][ T9] usb 5-1: USB disconnect, device number 91 [ 841.079097][ T30] audit: type=1326 audit(2000000236.553:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15e98e52b code=0x7ffc0000 [ 841.102632][T14518] x_tables: duplicate underflow at hook 3 [ 841.121575][ T30] audit: type=1326 audit(2000000236.553:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15e98e52b code=0x7ffc0000 [ 841.206497][ T30] audit: type=1326 audit(2000000236.553:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14487 comm="syz.4.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc15e98e52b code=0x7ffc0000 [ 842.124142][T14527] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2660'. [ 842.567080][ T5897] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 842.770087][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 842.786832][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 842.991495][T14535] xt_hashlimit: size too large, truncated to 1048576 [ 843.368122][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 843.383934][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 843.398947][ T5897] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 843.412523][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.428612][ T5897] usb 2-1: config 0 descriptor?? [ 843.495386][ T5897] usb 2-1: can't set config #0, error -71 [ 843.641235][ T5897] usb 2-1: USB disconnect, device number 99 [ 844.841298][T14553] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2667'. [ 846.064330][T14563] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2671'. [ 847.042014][T14567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2674'. [ 847.180135][T14572] misc userio: Invalid payload size [ 847.187732][T14572] misc userio: Invalid payload size [ 847.194659][T14572] misc userio: The device must be registered before sending interrupts [ 849.104323][T14591] vlan2: entered promiscuous mode [ 849.114557][T14591] vlan2: entered allmulticast mode [ 849.160479][T14591] hsr_slave_1: entered allmulticast mode [ 849.288970][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2680'. [ 850.384268][T14608] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2684'. [ 852.529462][T14637] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2693'. [ 853.442270][T14648] xt_bpf: check failed: parse error [ 853.544571][T14655] overlayfs: missing 'lowerdir' [ 853.580018][T14655] 9pnet_fd: Insufficient options for proto=fd [ 854.343485][T14662] netlink: 'syz.0.2702': attribute type 11 has an invalid length. [ 854.351623][T14662] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2702'. [ 854.523281][T14665] misc userio: Invalid payload size [ 854.530937][T14665] misc userio: Invalid payload size [ 854.538294][T14665] misc userio: The device must be registered before sending interrupts [ 855.975548][T11613] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 856.019833][T14679] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2706'. [ 856.595217][T11613] usb 3-1: Using ep0 maxpacket: 16 [ 856.625946][T11613] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 856.647175][T11613] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 856.681655][T11613] usb 3-1: Product: syz [ 856.695470][T11613] usb 3-1: Manufacturer: syz [ 856.725325][T11613] usb 3-1: SerialNumber: syz [ 856.745832][T11613] usb 3-1: config 0 descriptor?? [ 856.876365][ T9] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 856.960739][T11613] usb 3-1: USB disconnect, device number 99 [ 857.025767][T14697] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2716'. [ 857.038826][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 857.053948][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 857.263985][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 857.281250][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.289543][ T9] usb 2-1: Product: syz [ 857.293754][ T9] usb 2-1: Manufacturer: syz [ 857.309523][ T9] usb 2-1: SerialNumber: syz [ 857.343530][ T9] usb 2-1: config 0 descriptor?? [ 857.426158][T14702] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.490319][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 858.055755][ T44] usb 2-1: USB disconnect, device number 100 [ 858.062442][ T6333] usb 2-1: Failed to submit usb control message: -71 [ 858.096603][ T6333] usb 2-1: unable to send the bmi data to the device: -71 [ 858.135079][ T6333] usb 2-1: unable to get target info from device [ 858.141525][ T6333] usb 2-1: could not get target info (-71) [ 858.177900][ T6333] usb 2-1: could not probe fw (-71) [ 858.183775][T14716] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 858.190352][T14716] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 858.251229][T14716] vhci_hcd vhci_hcd.0: Device attached [ 858.439217][T14716] netlink: 'syz.3.2720': attribute type 10 has an invalid length. [ 858.495523][ T9] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 858.530455][T14724] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2722'. [ 859.036217][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2720'. [ 859.106300][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.124079][T14716] team0: Port device bond0 added [ 859.313047][T14725] team0 (unregistering): Port device team_slave_0 removed [ 859.342840][T14725] team0 (unregistering): Port device team_slave_1 removed [ 859.362941][T14725] team0 (unregistering): Port device bond0 removed [ 859.563248][ T5897] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 859.574767][T14717] vhci_hcd: connection reset by peer [ 859.583053][ T37] vhci_hcd: stop threads [ 859.588748][ T37] vhci_hcd: release socket [ 859.593849][ T37] vhci_hcd: disconnect device [ 859.725011][ T5897] usb 2-1: device descriptor read/64, error -71 [ 859.905939][ T977] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 859.964936][T10674] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 859.972906][ T5897] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 860.054804][ T977] usb 1-1: device descriptor read/64, error -71 [ 860.128922][ T5897] usb 2-1: device descriptor read/64, error -71 [ 860.155685][T10674] usb 3-1: Using ep0 maxpacket: 16 [ 860.174233][T10674] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 860.185208][T10674] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 860.193994][T10674] usb 3-1: Product: syz [ 860.198649][T10674] usb 3-1: Manufacturer: syz [ 860.203348][T10674] usb 3-1: SerialNumber: syz [ 860.212409][T10674] usb 3-1: config 0 descriptor?? [ 860.425122][ T5897] usb usb2-port1: attempt power cycle [ 860.446875][T10674] usb 3-1: USB disconnect, device number 100 [ 860.474739][ T977] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 860.625182][ T977] usb 1-1: device descriptor read/64, error -71 [ 860.768391][ T977] usb usb1-port1: attempt power cycle [ 860.785377][ T5897] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 860.902282][ T5897] usb 2-1: device descriptor read/8, error -71 [ 861.256285][ T977] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 861.285516][ T977] usb 1-1: device descriptor read/8, error -71 [ 861.334812][ T5897] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 862.230116][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 862.284476][ T977] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 862.310008][T14774] misc userio: Invalid payload size [ 862.318183][T14774] misc userio: Invalid payload size [ 862.325002][T14774] misc userio: The device must be registered before sending interrupts [ 862.452883][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.535059][ T44] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 862.600059][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.722601][ T44] usb 4-1: config 0 descriptor?? [ 862.724878][ T977] usb 1-1: device descriptor read/8, error -71 [ 862.733950][ T5897] usb 2-1: device descriptor read/8, error -71 [ 862.756143][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 862.854768][ T5897] usb usb2-port1: unable to enumerate USB device [ 862.864141][ T977] usb usb1-port1: unable to enumerate USB device [ 863.173038][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2742'. [ 863.194603][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 863.223959][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 863.263119][ T44] pwc: recv_control_msg error -32 req 02 val 2c00 [ 863.312524][ T44] pwc: recv_control_msg error -32 req 04 val 1000 [ 863.665638][ T9] vhci_hcd: vhci_device speed not set [ 863.669361][ T44] pwc: recv_control_msg error -32 req 04 val 1400 [ 863.686658][ T977] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 863.687787][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 863.714765][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 863.735701][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 863.743982][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 863.765490][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 863.772446][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 863.787262][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 863.801035][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 863.815499][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 863.830385][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 863.854514][ T44] pwc: Registered as video103. [ 863.854675][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 863.869771][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input109 [ 863.876974][ T977] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 863.888807][ T44] usb 4-1: USB disconnect, device number 18 [ 863.906268][ T977] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 863.916643][ T977] usb 1-1: Product: syz [ 863.921036][ T977] usb 1-1: Manufacturer: syz [ 863.928511][ T977] usb 1-1: SerialNumber: syz [ 864.005553][ T977] usb 1-1: config 0 descriptor?? [ 864.438281][ T5948] usb 1-1: USB disconnect, device number 103 [ 864.534870][ T5897] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 864.974376][ T5948] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 865.047456][ T5897] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.060859][ T5897] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 865.091481][ T5897] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 865.131864][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.184153][ T5897] usb 5-1: Product: syz [ 865.202049][ T5897] usb 5-1: Manufacturer: syz [ 865.216977][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 865.227023][ T5897] usb 5-1: SerialNumber: syz [ 865.244364][ T5948] usb 4-1: no configurations [ 865.249017][ T5948] usb 4-1: can't read configurations, error -22 [ 865.608317][T14829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2754'. [ 866.302035][ T5948] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 866.684785][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 866.720995][ T5948] usb 4-1: no configurations [ 866.739313][ T5948] usb 4-1: can't read configurations, error -22 [ 866.765780][ T5948] usb usb4-port1: attempt power cycle [ 866.994830][ T5897] usb 5-1: 0:2 : does not exist [ 867.013194][ T5897] usb 5-1: USB disconnect, device number 92 [ 867.134366][ T5948] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 867.154615][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 867.167772][ T5948] usb 4-1: no configurations [ 867.183224][ T5948] usb 4-1: can't read configurations, error -22 [ 867.349492][ T5948] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 867.461091][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 868.092614][ T5948] usb 4-1: device descriptor read/all, error -71 [ 868.143909][ T5948] usb usb4-port1: unable to enumerate USB device [ 868.316707][T14862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2765'. [ 868.565363][T14869] misc userio: Invalid payload size [ 868.576178][T14869] misc userio: Invalid payload size [ 868.584228][T14869] misc userio: The device must be registered before sending interrupts [ 870.239797][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.246906][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.911327][T14896] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2775'. [ 871.447366][T14902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2780'. [ 871.473368][ T5948] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 871.746852][T14906] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2778'. [ 871.793556][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 872.315182][ T5948] usb 2-1: no configurations [ 872.319945][ T5948] usb 2-1: can't read configurations, error -22 [ 872.553239][ T5948] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 872.726650][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 872.739584][ T5948] usb 2-1: no configurations [ 872.756398][ T5948] usb 2-1: can't read configurations, error -22 [ 872.775403][ T5948] usb usb2-port1: attempt power cycle [ 872.827165][T14924] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 872.966089][T14933] xt_bpf: check failed: parse error [ 873.037611][T14934] overlayfs: missing 'lowerdir' [ 873.094092][T14935] 9pnet_fd: Insufficient options for proto=fd [ 873.103562][ T5897] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 873.533347][ T5948] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 873.957405][ T5948] usb 2-1: device descriptor read/8, error -71 [ 873.999957][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.011365][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.027010][T14943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2792'. [ 874.062551][ T5897] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 874.184396][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.213916][ T5897] usb 1-1: config 0 descriptor?? [ 874.677132][ T5897] hid_mf 0003:0079:1846.000C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 874.740056][ T5897] hid_mf 0003:0079:1846.000C: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 874.858531][T14761] usb 1-1: USB disconnect, device number 104 [ 874.973613][T11613] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 875.153006][T11613] usb 5-1: Using ep0 maxpacket: 16 [ 875.159070][T11613] usb 5-1: no configurations [ 875.166440][T11613] usb 5-1: can't read configurations, error -22 [ 875.312942][T11613] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 875.473291][T11613] usb 5-1: Using ep0 maxpacket: 16 [ 875.516486][T11613] usb 5-1: no configurations [ 875.544813][T11613] usb 5-1: can't read configurations, error -22 [ 875.634434][T11613] usb usb5-port1: attempt power cycle [ 876.052867][T11613] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 876.115712][T11613] usb 5-1: Using ep0 maxpacket: 16 [ 876.148204][T11613] usb 5-1: no configurations [ 876.173085][T11613] usb 5-1: can't read configurations, error -22 [ 876.322898][T11613] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 876.396797][T11613] usb 5-1: Using ep0 maxpacket: 16 [ 876.408796][T11613] usb 5-1: no configurations [ 876.813185][T11613] usb 5-1: can't read configurations, error -22 [ 876.861379][T11613] usb usb5-port1: unable to enumerate USB device [ 877.565582][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 877.713193][T11613] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 877.955177][T11613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.966578][T11613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.986056][T11613] usb 4-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 877.999348][T11613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.017641][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2822'. [ 878.063885][T11613] usb 4-1: config 0 descriptor?? [ 878.293739][ T5948] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 878.357821][T15039] xt_bpf: check failed: parse error [ 879.139670][T11613] wacom 0003:056A:0094.000D: Using device in hidraw-only mode [ 879.168724][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.202654][T15041] overlayfs: missing 'lowerdir' [ 879.250947][T15041] 9pnet_fd: Insufficient options for proto=fd [ 879.533208][T11613] wacom 0003:056A:0094.000D: hidraw0: USB HID v4.00 Device [HID 056a:0094] on usb-dummy_hcd.3-1/input0 [ 879.544356][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.566101][ T5948] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 879.579093][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.590325][T15019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.595493][ T5948] usb 5-1: config 0 descriptor?? [ 879.661741][T15019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 880.481441][ T5948] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 880.565975][ T5948] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input110 [ 880.720796][ T5948] keytouch 0003:0926:3333.000E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 880.749487][ T5948] usb 5-1: USB disconnect, device number 97 [ 880.973365][ T44] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 881.132329][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 881.149762][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 881.160940][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 881.173084][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 881.184970][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 881.202710][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 881.212732][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 881.225395][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 881.235515][ T44] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAC, changing to 0x8C [ 881.247925][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 881.271496][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 881.282418][ T5948] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 881.306025][ T44] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 881.316563][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.324816][ T44] usb 2-1: Product: syz [ 881.333791][ T44] usb 2-1: Manufacturer: syz [ 881.341875][ T44] usb 2-1: SerialNumber: syz [ 881.358676][ T44] usb 2-1: config 0 descriptor?? [ 881.368361][T15060] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 881.381329][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 881.452152][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 881.462973][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 881.482998][ T5948] usb 1-1: config 0 has no interfaces? [ 881.642510][ T44] usb 2-1: USB disconnect, device number 109 [ 881.650882][ T5948] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 881.685912][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 882.402243][ T5948] usb 1-1: Product: syz [ 882.407137][ T5948] usb 1-1: Manufacturer: syz [ 882.416797][ T5948] usb 1-1: SerialNumber: syz [ 882.440096][ T5948] usb 1-1: config 0 descriptor?? [ 882.811762][ T44] usb 1-1: USB disconnect, device number 105 [ 882.857171][ T5948] usb 4-1: USB disconnect, device number 23 [ 884.153010][T15105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 885.393168][T15132] misc userio: Invalid payload size [ 885.400523][T15132] misc userio: Invalid payload size [ 885.407071][T15132] misc userio: The device must be registered before sending interrupts [ 886.877071][ T5948] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 887.135439][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 887.152755][ T5948] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.247234][T15155] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2860'. [ 887.841941][ T5948] usb 1-1: config 0 has no interfaces? [ 887.871424][ T5948] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 887.956140][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 887.997975][ T5948] usb 1-1: Product: syz [ 888.014338][ T5948] usb 1-1: Manufacturer: syz [ 888.030005][ T5948] usb 1-1: SerialNumber: syz [ 888.054971][ T5948] usb 1-1: config 0 descriptor?? [ 888.287876][ T5948] usb 1-1: USB disconnect, device number 106 [ 888.871649][ T1210] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 889.391328][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.479779][ T1210] usb 4-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.84 [ 889.531987][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.556580][ T1210] usb 4-1: Product: syz [ 889.574786][ T1210] usb 4-1: Manufacturer: syz [ 889.579455][ T1210] usb 4-1: SerialNumber: syz [ 889.615726][ T1210] usb 4-1: config 0 descriptor?? [ 889.648105][ T1210] rndis_host 4-1:0.0: skipping garbage [ 889.670539][ T1210] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22 [ 889.700145][ T1210] cdc_acm 4-1:0.0: skipping garbage [ 889.726445][ T1210] cdc_acm 4-1:0.0: Control and data interfaces are not separated! [ 889.762949][ T1210] cdc_acm 4-1:0.0: This needs exactly 3 endpoints [ 889.783087][ T1210] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22 [ 889.864504][ T1210] usb 4-1: USB disconnect, device number 24 [ 890.714998][ T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 891.091057][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 891.114563][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.891043][ T9] usb 2-1: config 0 has no interfaces? [ 892.170574][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 892.179993][ T9] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 892.220821][ T9] usb 2-1: Product: syz [ 892.225110][ T9] usb 2-1: Manufacturer: syz [ 892.229888][ T9] usb 2-1: SerialNumber: syz [ 892.486227][ T9] usb 2-1: config 0 descriptor?? [ 893.099292][ T9] usb 2-1: USB disconnect, device number 110 [ 893.300329][T15245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2888'. [ 893.330293][T15245] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2888'. [ 893.362603][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2888'. [ 893.948384][T15254] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2890'. [ 895.605187][T11613] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 896.132742][T11613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 896.143895][T11613] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 896.190588][T11613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 896.237507][T11613] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 896.255234][T11613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.286121][T11613] usb 5-1: Product: syz [ 896.298479][T11613] usb 5-1: Manufacturer: syz [ 896.325243][T11613] usb 5-1: SerialNumber: syz [ 896.479861][T11613] usb 5-1: config 0 descriptor?? [ 896.487817][T15257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 896.500594][T15257] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 896.524162][T11613] usb 5-1: ucan: probing device on interface #0 [ 896.960859][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 897.699206][T11613] ucan 5-1:0.0 can0: registered device [ 897.887266][T11613] ucan 5-1:0.0 can0: firmware string: unknown [ 897.914982][T11613] usb 5-1: USB disconnect, device number 98 [ 897.990221][ T5948] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 898.220341][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 898.236350][ T5948] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 898.309452][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.465125][ T5948] usb 1-1: config 0 descriptor?? [ 898.719501][ T5948] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 898.767642][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.836081][ T5948] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 898.865038][ T5948] usb 1-1: media controller created [ 898.928619][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.981524][T15309] misc userio: Invalid payload size [ 898.994564][T15309] misc userio: Invalid payload size [ 899.002579][T15309] misc userio: The device must be registered before sending interrupts [ 899.160169][ T9] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 899.350133][ T9] usb 5-1: device descriptor read/64, error -71 [ 899.633391][ T9] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 899.878895][ T9] usb 5-1: device descriptor read/64, error -71 [ 900.031400][ T9] usb usb5-port1: attempt power cycle [ 900.380087][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 900.402086][ T9] usb 5-1: device descriptor read/8, error -71 [ 900.560585][ T5948] stb0899_attach: Driver disabled by Kconfig [ 900.567109][ T5948] az6027: no front-end attached [ 900.567109][ T5948] [ 900.569851][ T5897] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 900.580643][ T5948] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 900.601911][T15343] misc userio: Invalid payload size [ 900.608358][T15343] misc userio: Invalid payload size [ 900.614988][T15343] misc userio: The device must be registered before sending interrupts [ 900.649140][ T5948] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input111 [ 900.728778][ T5948] dvb-usb: schedule remote query interval to 400 msecs. [ 900.757470][ T5948] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 900.819875][ T9] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 900.843972][ T5948] usb 1-1: USB disconnect, device number 107 [ 901.430400][ T9] usb 5-1: device descriptor read/8, error -71 [ 901.438469][ T5948] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 901.560025][ T9] usb usb5-port1: unable to enumerate USB device [ 901.566793][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 901.583122][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 901.619744][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 901.657887][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 901.713297][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 901.752144][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 902.399858][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.511813][ T5897] usbtmc 2-1:16.0: bulk endpoints not found [ 903.049800][ T5897] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 903.167367][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 903.253220][T15373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2934'. [ 903.270141][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 903.281509][ T5897] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 903.293169][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 903.307786][ T5897] usb 1-1: Product: syz [ 903.317492][ T5897] usb 1-1: Manufacturer: syz [ 903.334931][ T5897] usb 1-1: SerialNumber: syz [ 903.352042][ T5897] usb 1-1: config 0 descriptor?? [ 903.631951][T15378] misc userio: Invalid payload size [ 903.638046][T15378] misc userio: Invalid payload size [ 903.644372][T15378] misc userio: The device must be registered before sending interrupts [ 903.904450][T11613] usb 1-1: USB disconnect, device number 108 [ 904.324508][ T5948] usb 2-1: USB disconnect, device number 111 [ 904.419437][ T5897] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 904.486935][T11613] hid-generic 0002:20000:10000.000F: unexpected long global item [ 904.500396][T15383] 9pnet_virtio: no channels available for device /dev/loop1 [ 904.514519][T11613] hid-generic 0002:20000:10000.000F: probe with driver hid-generic failed with error -22 [ 904.584645][ T5897] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 904.607046][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.637998][ T5897] usb 3-1: Product: syz [ 904.660705][ T5897] usb 3-1: Manufacturer: syz [ 904.669385][ T5897] usb 3-1: SerialNumber: syz [ 904.692389][ T5897] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 904.786506][ T977] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 904.959530][T11613] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 905.140094][T11613] usb 4-1: config 129 has an invalid interface number: 164 but max is 0 [ 905.148755][T11613] usb 4-1: config 129 has no interface number 0 [ 905.165424][T11613] usb 4-1: config 129 interface 164 has no altsetting 0 [ 905.186628][T11613] usb 4-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=d6.86 [ 905.198661][T11613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.215383][T11613] usb 4-1: Manufacturer: ж [ 905.220293][T11613] usb 4-1: SerialNumber: ч [ 905.447723][T15391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.500201][T15391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.514686][ T5948] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 905.633126][T15411] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2948'. [ 905.890116][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.921683][ T5948] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 905.934907][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.077705][T11613] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 906.091319][ T5948] usb 5-1: Product: syz [ 906.097973][ T5948] usb 5-1: Manufacturer: syz [ 906.113904][ T5948] usb 5-1: SerialNumber: syz [ 906.138706][ T5948] usb 5-1: config 0 descriptor?? [ 906.151771][T11613] snd-usb-audio 4-1:129.164: probe with driver snd-usb-audio failed with error -2 [ 906.173077][ T5948] s2255 5-1:0.0: Could not find bulk-in endpoint [ 906.180250][ T5948] Sensoray 2255 driver load failed: 0xfffffff4 [ 906.194241][T11613] usb 4-1: USB disconnect, device number 25 [ 906.202731][ T5948] s2255 5-1:0.0: probe with driver s2255 failed with error -12 [ 906.334084][ T977] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 906.346118][ T977] ath9k_htc: Failed to initialize the device [ 906.382859][ T977] usb 3-1: ath9k_htc: USB layer deinitialized [ 906.418341][T11613] usb 3-1: USB disconnect, device number 101 [ 906.477732][T15415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 907.026571][T11613] usb 5-1: USB disconnect, device number 103 [ 907.679762][T15438] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2956'. [ 908.057334][T15449] sch_fq: defrate 0 ignored. [ 908.109457][T11613] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 908.270437][T11613] usb 3-1: device descriptor read/64, error -71 [ 908.629491][T11613] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 908.888979][T11613] usb 3-1: device descriptor read/64, error -71 [ 909.171698][T11613] usb usb3-port1: attempt power cycle [ 909.580000][T11613] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 909.749218][T11613] usb 3-1: device descriptor read/8, error -71 [ 909.998952][T11613] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 910.037444][T11613] usb 3-1: device descriptor read/8, error -71 [ 910.351941][T11613] usb usb3-port1: unable to enumerate USB device [ 910.531819][T15490] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2971'. [ 912.682473][T15516] netlink: 788 bytes leftover after parsing attributes in process `syz.3.2979'. [ 915.668175][ T5897] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 915.856175][ T5897] usb 4-1: config 129 has an invalid interface number: 164 but max is 0 [ 915.881062][ T5897] usb 4-1: config 129 has no interface number 0 [ 915.895221][ T5897] usb 4-1: config 129 interface 164 has no altsetting 0 [ 915.916342][ T5897] usb 4-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=d6.86 [ 915.936242][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.986816][ T5897] usb 4-1: Manufacturer: ж [ 915.996944][ T5897] usb 4-1: SerialNumber: ч [ 916.231780][T15553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.255579][T15553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.503930][ T5897] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 916.611073][ T5897] snd-usb-audio 4-1:129.164: probe with driver snd-usb-audio failed with error -2 [ 917.252649][ T44] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 917.299311][ T5897] usb 4-1: USB disconnect, device number 26 [ 917.360326][T15584] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3006'. [ 917.574159][ T44] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 10713, setting to 1024 [ 917.611034][ T44] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x81 has invalid maxpacket 1024 [ 917.621486][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 917.628300][ T44] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 917.637477][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.648502][ T44] usb 2-1: config 0 descriptor?? [ 917.668832][T15573] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 917.892450][ T44] usb 2-1: string descriptor 0 read error: -71 [ 917.901683][ T44] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 917.916277][ T44] usb 2-1: USB disconnect, device number 112 [ 918.018912][T11613] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 918.177960][T11613] usb 1-1: Using ep0 maxpacket: 32 [ 918.369845][T11613] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 918.439644][T15604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3015'. [ 918.987907][T11613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.098508][T11613] usb 1-1: config 0 descriptor?? [ 919.388900][T11613] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 919.445513][T11613] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 919.472168][T11613] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 919.492611][T11613] usb 1-1: media controller created [ 919.498053][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'. [ 919.610025][T11613] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 919.903060][ T6333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.996120][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 920.003609][ T5948] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 920.015594][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 920.031901][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 920.045485][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 920.054568][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 920.084768][ T6333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.116867][T15627] FAULT_INJECTION: forcing a failure. [ 920.116867][T15627] name failslab, interval 1, probability 0, space 0, times 0 [ 920.134165][T15627] CPU: 0 UID: 0 PID: 15627 Comm: syz.4.3021 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 920.134195][T15627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 920.134208][T15627] Call Trace: [ 920.134217][T15627] [ 920.134227][T15627] dump_stack_lvl+0x189/0x250 [ 920.134256][T15627] ? __pfx____ratelimit+0x10/0x10 [ 920.134287][T15627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.134311][T15627] ? __pfx__printk+0x10/0x10 [ 920.134344][T15627] ? ref_tracker_alloc+0x318/0x460 [ 920.134378][T15627] should_fail_ex+0x414/0x560 [ 920.134411][T15627] should_failslab+0xa8/0x100 [ 920.134444][T15627] kmem_cache_alloc_noprof+0x73/0x3c0 [ 920.134470][T15627] ? skb_clone+0x212/0x3a0 [ 920.134503][T15627] skb_clone+0x212/0x3a0 [ 920.134533][T15627] __netlink_deliver_tap+0x404/0x850 [ 920.134568][T15627] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.134593][T15627] netlink_deliver_tap+0x19c/0x1b0 [ 920.134617][T15627] netlink_unicast+0x72f/0x8d0 [ 920.134648][T15627] netlink_sendmsg+0x805/0xb30 [ 920.134700][T15627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.134734][T15627] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.134764][T15627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.134789][T15627] __sock_sendmsg+0x21c/0x270 [ 920.134823][T15627] ____sys_sendmsg+0x505/0x830 [ 920.134854][T15627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.134890][T15627] ? import_iovec+0x74/0xa0 [ 920.134919][T15627] ___sys_sendmsg+0x21f/0x2a0 [ 920.134948][T15627] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.135021][T15627] ? __fget_files+0x2a/0x420 [ 920.135039][T15627] ? __fget_files+0x3a0/0x420 [ 920.135070][T15627] __x64_sys_sendmsg+0x19b/0x260 [ 920.135100][T15627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.135138][T15627] ? __pfx_ksys_write+0x10/0x10 [ 920.135163][T15627] ? rcu_is_watching+0x15/0xb0 [ 920.135192][T15627] ? do_syscall_64+0xbe/0x3b0 [ 920.135217][T15627] do_syscall_64+0xfa/0x3b0 [ 920.135235][T15627] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.135264][T15627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.135285][T15627] ? clear_bhb_loop+0x60/0xb0 [ 920.135311][T15627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.135330][T15627] RIP: 0033:0x7fc15e98e929 [ 920.135349][T15627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.135367][T15627] RSP: 002b:00007fc15f8de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.135390][T15627] RAX: ffffffffffffffda RBX: 00007fc15ebb5fa0 RCX: 00007fc15e98e929 [ 920.135405][T15627] RDX: 00000000000008c0 RSI: 0000200000000000 RDI: 0000000000000004 [ 920.135419][T15627] RBP: 00007fc15f8de090 R08: 0000000000000000 R09: 0000000000000000 [ 920.135433][T15627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.135446][T15627] R13: 0000000000000000 R14: 00007fc15ebb5fa0 R15: 00007ffe24ff3118 [ 920.135479][T15627] [ 920.137338][T15624] lo speed is unknown, defaulting to 1000 [ 920.432296][T15624] dummy0 speed is unknown, defaulting to 1000 [ 920.449049][ T5948] usb 4-1: config 129 has an invalid interface number: 164 but max is 0 [ 920.457739][ T5948] usb 4-1: config 129 has no interface number 0 [ 920.464041][ T5948] usb 4-1: config 129 interface 164 has no altsetting 0 [ 920.474042][ T5948] usb 4-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice=d6.86 [ 920.483257][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.509273][ T5948] usb 4-1: Product: syz [ 920.520572][ T5948] usb 4-1: Manufacturer: syz [ 920.534617][ T5948] usb 4-1: SerialNumber: syz [ 920.637633][T11613] stb0899_attach: Driver disabled by Kconfig [ 920.643824][T11613] az6027: no front-end attached [ 920.643824][T11613] [ 920.668684][T11613] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 920.821061][T11613] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input112 [ 920.855541][T15621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.876708][ T6333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.972128][T15621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.036386][T11613] dvb-usb: schedule remote query interval to 400 msecs. [ 921.105712][T11613] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 921.215333][T11613] usb 1-1: USB disconnect, device number 109 [ 921.362383][ T5948] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 921.382013][ T6333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.442310][ T5948] snd-usb-audio 4-1:129.164: probe with driver snd-usb-audio failed with error -2 [ 921.460108][T11613] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 921.478659][ T977] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 921.491273][ T5948] usb 4-1: USB disconnect, device number 27 [ 921.617355][ T977] usb 5-1: device descriptor read/64, error -71 [ 921.883089][ T977] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 922.031174][T15648] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3026'. [ 922.072800][ T977] usb 5-1: device descriptor read/64, error -71 [ 922.137925][ T5832] Bluetooth: hci1: command tx timeout [ 922.213350][T14761] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 922.284959][ T977] usb usb5-port1: attempt power cycle [ 922.381378][ T6333] erspan0 (unregistering): left promiscuous mode [ 922.619194][T14761] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 922.627969][T14761] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 922.636879][T14761] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 922.650265][T14761] usb 1-1: config 220 has no interface number 2 [ 922.656570][T14761] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 922.666708][T15652] program syz.3.3028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 922.670240][T14761] usb 1-1: config 220 interface 0 has no altsetting 0 [ 922.686026][T14761] usb 1-1: config 220 interface 76 has no altsetting 0 [ 922.693071][T14761] usb 1-1: config 220 interface 1 has no altsetting 0 [ 922.702761][T14761] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 922.713405][T14761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.723751][T14761] usb 1-1: Product: syz [ 922.728999][T14761] usb 1-1: Manufacturer: syz [ 922.733640][T14761] usb 1-1: SerialNumber: syz [ 922.807263][ T977] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 922.836746][ T6333] bond0 (unregistering): left allmulticast mode [ 922.838404][ T977] usb 5-1: device descriptor read/8, error -71 [ 922.866909][ T6333] bond0 (unregistering): Released all slaves [ 922.889647][T15624] chnl_net:caif_netlink_parms(): no params data found [ 922.993839][ T6333] tipc: Left network mode [ 923.187845][ T977] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 923.228319][ T977] usb 5-1: device descriptor read/8, error -71 [ 923.337723][ T977] usb usb5-port1: unable to enumerate USB device [ 923.652616][T15624] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.667174][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.674490][T15624] bridge_slave_0: entered allmulticast mode [ 923.690675][T15624] bridge_slave_0: entered promiscuous mode [ 923.724953][T15624] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.745808][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.759105][T15624] bridge_slave_1: entered allmulticast mode [ 923.769209][T15624] bridge_slave_1: entered promiscuous mode [ 923.914977][T15624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 923.952150][T15624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.061220][T15624] team0: Port device team_slave_0 added [ 924.113791][T15624] team0: Port device team_slave_1 added [ 924.184655][T15624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 924.196644][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.227830][ T5832] Bluetooth: hci1: command tx timeout [ 924.236598][T15624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 924.272993][ T6333] batadv0: left promiscuous mode [ 924.304776][ T6333] hsr_slave_0: left promiscuous mode [ 924.321208][ T6333] hsr_slave_1: left promiscuous mode [ 924.384841][ T6333] veth1_macvtap: left promiscuous mode [ 924.402940][ T6333] veth0_macvtap: left promiscuous mode [ 924.414446][ T6333] veth1_vlan: left promiscuous mode [ 924.430520][ T6333] veth0_vlan: left promiscuous mode [ 924.654110][T14761] usb 1-1: selecting invalid altsetting 0 [ 924.660707][T14761] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 924.712132][T14761] usb 1-1: No valid video chain found. [ 924.739996][T14761] usb 1-1: selecting invalid altsetting 0 [ 924.745812][T14761] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 924.793775][T14761] usb 1-1: USB disconnect, device number 110 [ 924.882473][ T6333] pim6reg (unregistering): left allmulticast mode [ 925.978297][T15624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.985513][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.011882][T15624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.039476][ T5897] dummy0 speed is unknown, defaulting to 1000 [ 926.051600][ T5897] infiniband syz2: ib_query_port failed (-19) [ 926.123954][T15624] hsr_slave_0: entered promiscuous mode [ 926.135670][T15624] hsr_slave_1: entered promiscuous mode [ 926.297216][ T5832] Bluetooth: hci1: command tx timeout [ 926.387314][T11613] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 926.546273][T15713] input: syz1 as /devices/virtual/input/input113 [ 926.586883][ T5897] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 926.702001][T11613] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 926.925152][T11613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.933848][T11613] usb 2-1: Product: syz [ 926.938486][T11613] usb 2-1: Manufacturer: syz [ 926.943375][T11613] usb 2-1: SerialNumber: syz [ 926.972019][T11613] usb 2-1: config 0 descriptor?? [ 926.981368][T11613] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 927.162743][T14761] IPVS: starting estimator thread 0... [ 927.202508][T15711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.286732][ T5897] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 927.308452][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.472278][T15716] IPVS: using max 23 ests per chain, 55200 per kthread [ 927.483493][ T5897] usb 1-1: Product: syz [ 927.498453][ T5897] usb 1-1: Manufacturer: syz [ 927.505215][ T5897] usb 1-1: SerialNumber: syz [ 927.540806][ T5897] usb 1-1: config 0 descriptor?? [ 927.568632][ T5897] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 927.602418][ T6333] IPVS: stop unused estimator thread 0... [ 927.965906][ T5897] gspca_sunplus: reg_r err -32 [ 927.972547][ T5897] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 927.983431][ T5897] usb 1-1: USB disconnect, device number 111 [ 927.995956][T15624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 928.008081][T15624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 928.020383][T15624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 928.032244][T15624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 928.116239][T15624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.154418][T15624] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.185626][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.192825][ T6234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.215795][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.223016][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.256197][T15730] sctp: [Deprecated]: syz.3.3052 (pid 15730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 928.256197][T15730] Use struct sctp_sack_info instead [ 928.376881][ T5832] Bluetooth: hci1: command tx timeout [ 928.673009][T15624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.439397][T15624] veth0_vlan: entered promiscuous mode [ 929.482465][T14761] usb 2-1: USB disconnect, device number 113 [ 929.492365][T15624] veth1_vlan: entered promiscuous mode [ 929.620352][T15624] veth0_macvtap: entered promiscuous mode [ 929.649746][T15624] veth1_macvtap: entered promiscuous mode [ 929.737337][T15624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.776108][T15624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.931675][T15756] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3057'. [ 930.749343][T15624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.774640][T15624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.946785][T15624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.955856][T15624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.467966][T15771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3063'. [ 931.580850][T15771] 9pnet_fd: Insufficient options for proto=fd [ 931.664240][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.670929][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.865607][T15776] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3065'. [ 931.911228][T15774] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 931.911228][T15774] program syz.3.3066 not setting count and/or reply_len properly [ 932.062741][ T6337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.119529][ T6337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.184345][ T6234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 932.223642][ T6234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.171283][T15793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.201242][T15793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.760163][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3073'. [ 934.395544][T15816] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3077'. [ 934.745761][ T44] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 934.905763][ T5948] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 934.913481][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 934.915755][T14761] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 934.928765][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 934.953566][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 934.977618][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 934.996267][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.011380][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 935.031663][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.085870][T14761] usb 3-1: Using ep0 maxpacket: 8 [ 935.098394][ T5948] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 935.099964][T14761] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 935.134117][T14761] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 935.155867][ T5948] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 935.158145][T14761] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 935.185804][T14761] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.195779][ T5948] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 935.199479][T14761] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 935.219749][T14761] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.246018][ T5948] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 935.255182][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.272946][ T44] usb 5-1: GET_CAPABILITIES returned 0 [ 935.316347][T15822] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 935.325754][ T44] usbtmc 5-1:16.0: can't read capabilities [ 935.459442][T14761] usb 3-1: GET_CAPABILITIES returned 0 [ 935.466237][T14761] usbtmc 3-1:16.0: can't read capabilities [ 935.490609][ T44] usb 5-1: USB disconnect, device number 108 [ 935.496572][ T9] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 935.659797][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.691258][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 935.715433][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 935.725783][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.736431][ T9] usb 4-1: Product: syz [ 935.745637][ T9] usb 4-1: Manufacturer: syz [ 935.768395][ T9] usb 4-1: SerialNumber: syz [ 936.170944][ T5948] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 936.180295][ T5948] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input114 [ 937.240356][T15842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.257804][T15842] batadv_slave_0: entered promiscuous mode [ 937.263796][T15842] batadv_slave_0: entered allmulticast mode [ 937.399599][T15843] kAFS: unable to lookup cell '' [ 937.684022][ T5897] usb 3-1: USB disconnect, device number 106 [ 937.902251][ T9] usb 4-1: 0:2 : does not exist [ 937.918032][ T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 938.031086][ T9] usb 4-1: USB disconnect, device number 28 [ 938.080707][T15846] lo speed is unknown, defaulting to 1000 [ 938.441753][T15853] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3090'. [ 938.483914][T15853] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3090'. [ 938.578153][ T44] usb 2-1: USB disconnect, device number 114 [ 938.584247][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 938.662345][T15857] netlink: 788 bytes leftover after parsing attributes in process `syz.4.3089'. [ 939.852720][ T44] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 940.873827][ T44] usb 2-1: config 1 has an invalid interface number: 239 but max is 0 [ 941.285293][ T44] usb 2-1: config 1 has no interface number 0 [ 941.316901][ T44] usb 2-1: config 1 interface 239 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 941.348349][ T44] usb 2-1: config 1 interface 239 altsetting 9 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 941.381392][ T44] usb 2-1: config 1 interface 239 altsetting 9 endpoint 0x86 has an invalid bInterval 230, changing to 11 [ 941.438215][ T44] usb 2-1: config 1 interface 239 altsetting 9 endpoint 0x86 has invalid maxpacket 59105, setting to 1024 [ 941.495226][ T44] usb 2-1: config 1 interface 239 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 941.556424][ T44] usb 2-1: config 1 interface 239 has no altsetting 0 [ 941.581317][ T44] usb 2-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=b3.a7 [ 941.598842][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.617203][ T44] usb 2-1: Product: syz [ 941.621425][ T44] usb 2-1: Manufacturer: syz [ 941.635387][ T44] usb 2-1: SerialNumber: syz [ 941.652241][T15859] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 941.753945][T15892] FAULT_INJECTION: forcing a failure. [ 941.753945][T15892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 941.767339][T15892] CPU: 0 UID: 0 PID: 15892 Comm: syz.2.3097 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 941.767369][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 941.767383][T15892] Call Trace: [ 941.767393][T15892] [ 941.767402][T15892] dump_stack_lvl+0x189/0x250 [ 941.767433][T15892] ? __pfx____ratelimit+0x10/0x10 [ 941.767465][T15892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 941.767488][T15892] ? __pfx__printk+0x10/0x10 [ 941.767521][T15892] should_fail_ex+0x414/0x560 [ 941.767550][T15892] _copy_to_user+0x31/0xb0 [ 941.767577][T15892] simple_read_from_buffer+0xe1/0x170 [ 941.767606][T15892] proc_fail_nth_read+0x1df/0x250 [ 941.767626][T15892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 941.767645][T15892] ? rw_verify_area+0x258/0x650 [ 941.767666][T15892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 941.767684][T15892] vfs_read+0x1fd/0x980 [ 941.767716][T15892] ? __pfx___mutex_lock+0x10/0x10 [ 941.767733][T15892] ? __pfx_vfs_read+0x10/0x10 [ 941.767756][T15892] ? __fget_files+0x2a/0x420 [ 941.767775][T15892] ? __fget_files+0x3a0/0x420 [ 941.767789][T15892] ? __fget_files+0x2a/0x420 [ 941.767832][T15892] ksys_read+0x145/0x250 [ 941.767861][T15892] ? __pfx_ksys_read+0x10/0x10 [ 941.767888][T15892] ? do_syscall_64+0xbe/0x3b0 [ 941.767907][T15892] do_syscall_64+0xfa/0x3b0 [ 941.767923][T15892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.767939][T15892] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 941.767955][T15892] ? clear_bhb_loop+0x60/0xb0 [ 941.767976][T15892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.767996][T15892] RIP: 0033:0x7fe79d18d33c [ 941.768011][T15892] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 941.768026][T15892] RSP: 002b:00007fe79df19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 941.768044][T15892] RAX: ffffffffffffffda RBX: 00007fe79d3b6160 RCX: 00007fe79d18d33c [ 941.768057][T15892] RDX: 000000000000000f RSI: 00007fe79df190a0 RDI: 0000000000000007 [ 941.768068][T15892] RBP: 00007fe79df19090 R08: 0000000000000000 R09: 0000000000000000 [ 941.768078][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.768088][T15892] R13: 0000000000000000 R14: 00007fe79d3b6160 R15: 00007ffecad5b228 [ 941.768114][T15892] [ 942.000950][ C0] vkms_vblank_simulate: vblank timer overrun [ 942.153562][T14761] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 942.237228][ T44] cypress_m8 2-1:1.239: DeLorme Earthmate USB converter detected [ 942.248677][ T44] earthmate ttyUSB0: required endpoint is missing [ 942.287924][ T44] usb 2-1: USB disconnect, device number 115 [ 942.334860][T14761] usb 1-1: Using ep0 maxpacket: 16 [ 942.344224][T14761] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 942.353511][T14761] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 942.361480][ T44] cypress_m8 2-1:1.239: device disconnected [ 942.361816][T14761] usb 1-1: Product: syz [ 942.374471][T14761] usb 1-1: Manufacturer: syz [ 942.414728][T14761] usb 1-1: SerialNumber: syz [ 942.430298][T14761] usb 1-1: config 0 descriptor?? [ 942.438359][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3103'. [ 942.678188][T14761] libceph: connect (1)[c::]:6789 error -101 [ 942.693506][T15906] ceph: No mds server is up or the cluster is laggy [ 942.819802][T14761] libceph: mon0 (1)[c::]:6789 connect error [ 943.011727][T14761] usb 1-1: USB disconnect, device number 112 [ 946.858387][T15942] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 948.345419][T14761] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 948.354997][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 948.904098][T14761] usb 1-1: Using ep0 maxpacket: 16 [ 948.912405][T14761] usb 1-1: config 4 has an invalid interface number: 51 but max is 0 [ 948.934804][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 948.941728][T14761] usb 1-1: config 4 has no interface number 0 [ 948.943853][T15960] tmpfs: Unknown parameter 'usrquotap1' [ 948.957963][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 948.970175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 948.981876][T14761] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 949.029573][ T9] usb 4-1: Product: syz [ 949.041561][ T9] usb 4-1: Manufacturer: syz [ 949.048356][T14761] usb 1-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 949.067834][ T9] usb 4-1: SerialNumber: syz [ 949.089224][ T9] usb 4-1: config 0 descriptor?? [ 949.094454][T14761] usb 1-1: config 4 interface 51 has no altsetting 0 [ 949.121681][T14761] usb 1-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 949.151650][T14761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.171608][T14761] usb 1-1: Product: syz [ 949.184063][T14761] usb 1-1: Manufacturer: syz [ 949.197627][T14761] usb 1-1: SerialNumber: syz [ 949.216242][T15958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 949.234074][T15958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 949.324480][ T5897] usb 4-1: USB disconnect, device number 29 [ 949.404037][ T44] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 949.472182][T15980] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 949.478867][T15980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 949.519505][T15980] vhci_hcd vhci_hcd.0: Device attached [ 949.576653][T15981] vhci_hcd: connection closed [ 949.604602][ T37] vhci_hcd: stop threads [ 949.649017][T14761] cdc_eem 1-1:4.51: probe with driver cdc_eem failed with error -71 [ 949.693801][ T37] vhci_hcd: release socket [ 949.924426][ T37] vhci_hcd: disconnect device [ 950.070703][ T5897] vhci_hcd: vhci_device speed not set [ 950.103389][T14761] usb 1-1: USB disconnect, device number 113 [ 950.874521][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.893840][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.913748][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 950.929510][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.947397][ T44] usb 3-1: config 0 descriptor?? [ 951.031767][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3128'. [ 951.041163][T15990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.090369][T15990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.029584][T16003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3130'. [ 952.039084][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3130'. [ 952.108986][T16002] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 952.324401][T16002] evm: overlay not supported [ 953.273563][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 953.291296][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 953.339952][ T44] usb 3-1: USB disconnect, device number 107 [ 953.363537][T14761] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 953.492899][T16025] nbd: must specify an index to disconnect [ 953.528388][T14761] usb 5-1: Using ep0 maxpacket: 32 [ 953.535625][T14761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 953.548524][T14761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 954.109121][T14761] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 954.141235][T14761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.179516][T14761] usb 5-1: Product: syz [ 954.198576][T14761] usb 5-1: Manufacturer: syz [ 954.222448][T14761] usb 5-1: SerialNumber: syz [ 954.245805][T14761] usb 5-1: config 0 descriptor?? [ 954.277994][T14761] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 954.413559][ T5948] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 954.633357][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 954.674372][ T5948] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 954.781927][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 955.421382][ T6330] usb 5-1: Failed to submit usb control message: -110 [ 955.468886][ T6330] usb 5-1: unable to send the bmi data to the device: -110 [ 955.476575][ T6330] usb 5-1: unable to get target info from device [ 955.483336][ T6330] usb 5-1: could not get target info (-110) [ 955.489529][ T6330] usb 5-1: could not probe fw (-110) [ 957.783271][ T5948] usb 4-1: Product: syz [ 957.788232][ T5948] usb 4-1: Manufacturer: syz [ 957.793134][ T5948] usb 4-1: SerialNumber: syz [ 957.807895][ T5948] usb 4-1: config 0 descriptor?? [ 957.846942][ T5948] usb 4-1: can't set config #0, error -71 [ 957.863411][ T5948] usb 4-1: USB disconnect, device number 30 [ 957.882709][T16043] No such timeout policy "syz0" [ 957.995395][ T5895] usb 5-1: USB disconnect, device number 109 [ 958.889840][T16098] 9pnet_fd: Insufficient options for proto=fd [ 959.697653][T16103] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 959.712676][T16103] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 960.462938][T16111] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3160'. [ 961.010864][T16118] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005f: 0000 [#1] SMP KASAN PTI [ 961.022823][T16118] KASAN: null-ptr-deref in range [0x00000000000002f8-0x00000000000002ff] [ 961.031255][T16118] CPU: 1 UID: 0 PID: 16118 Comm: syz.2.3162 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 961.041595][T16118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 961.051667][T16118] RIP: 0010:h5_recv+0x146/0x8d0 [ 961.056542][T16118] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 1c b3 c9 f9 4d 8b 65 00 31 ff 4c 89 [ 961.076170][T16118] RSP: 0018:ffffc90002fb7c40 EFLAGS: 00010202 [ 961.082263][T16118] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 961.090244][T16118] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 961.098231][T16118] RBP: ffffc90002fb7d60 R08: ffff8880576e041f R09: 1ffff1100aedc083 [ 961.106216][T16118] R10: dffffc0000000000 R11: ffffffff8857c860 R12: 0000000000000001 [ 961.114204][T16118] R13: 00000000000002f8 R14: ffff8880576e0410 R15: ffffc90002fb7e00 [ 961.122541][T16118] FS: 00007fe79df196c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 961.131491][T16118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.138090][T16118] CR2: 00007fe79df18f98 CR3: 0000000033ada000 CR4: 00000000003526f0 [ 961.146075][T16118] Call Trace: [ 961.149363][T16118] [ 961.152306][T16118] ? __pfx_h5_recv+0x10/0x10 [ 961.156921][T16118] ? __pfx_h5_recv+0x10/0x10 [ 961.161538][T16118] hci_uart_tty_receive+0x194/0x220 [ 961.166750][T16118] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 961.172489][T16118] tiocsti+0x23c/0x2c0 [ 961.176586][T16118] ? __pfx_tiocsti+0x10/0x10 [ 961.181533][T16118] ? __pfx_tty_ioctl+0x10/0x10 [ 961.186313][T16118] ? tty_ioctl+0xfd/0xde0 [ 961.190662][T16118] tty_ioctl+0x626/0xde0 [ 961.194916][T16118] ? __pfx_tty_ioctl+0x10/0x10 [ 961.199693][T16118] __se_sys_ioctl+0xf9/0x170 [ 961.204305][T16118] do_syscall_64+0xfa/0x3b0 [ 961.208824][T16118] ? lockdep_hardirqs_on+0x9c/0x150 [ 961.214048][T16118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.220129][T16118] ? clear_bhb_loop+0x60/0xb0 [ 961.224829][T16118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.230732][T16118] RIP: 0033:0x7fe79d18e929 [ 961.235163][T16118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.254868][T16118] RSP: 002b:00007fe79df19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 961.263299][T16118] RAX: ffffffffffffffda RBX: 00007fe79d3b6160 RCX: 00007fe79d18e929 [ 961.271286][T16118] RDX: 0000200000000340 RSI: 0000000000005412 RDI: 0000000000000009 [ 961.279795][T16118] RBP: 00007fe79d210b39 R08: 0000000000000000 R09: 0000000000000000 [ 961.287791][T16118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.295802][T16118] R13: 0000000000000001 R14: 00007fe79d3b6160 R15: 00007ffecad5b228 [ 961.303797][T16118] [ 961.306846][T16118] Modules linked in: [ 961.311599][T16118] ---[ end trace 0000000000000000 ]--- [ 961.440494][T16118] RIP: 0010:h5_recv+0x146/0x8d0 [ 961.494491][T16118] Code: 18 48 c1 ea 03 48 89 54 24 28 48 89 d8 48 c1 e8 03 48 89 44 24 50 44 89 64 24 14 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 30 <80> 3c 01 00 74 08 4c 89 ef e8 1c b3 c9 f9 4d 8b 65 00 31 ff 4c 89 [ 961.522592][T16118] RSP: 0018:ffffc90002fb7c40 EFLAGS: 00010202 [ 961.528811][T16118] RAX: dffffc0000000000 RBX: 00000000000002e8 RCX: 000000000000005f [ 961.542901][T16118] RDX: 000000000000005e RSI: 0000000000000001 RDI: 0000000000000000 [ 961.551051][T16118] RBP: ffffc90002fb7d60 R08: ffff8880576e041f R09: 1ffff1100aedc083 [ 961.565596][T16118] R10: dffffc0000000000 R11: ffffffff8857c860 R12: 0000000000000001 [ 961.586805][T16118] R13: 00000000000002f8 R14: ffff8880576e0410 R15: ffffc90002fb7e00 [ 961.605859][T16118] FS: 00007fe79df196c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 961.619079][T16118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 961.626639][T16118] CR2: 0000001b3030fff8 CR3: 0000000033ada000 CR4: 00000000003526f0 [ 961.634766][T16118] Kernel panic - not syncing: Fatal exception [ 961.641192][T16118] Kernel Offset: disabled [ 961.645532][T16118] Rebooting in 86400 seconds..