last executing test programs: 6m54.13338878s ago: executing program 1 (id=426): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, &(0x7f0000000040)) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffed5, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x44002) syz_usb_connect(0x2, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000f00)={0x1, "a2"}) personality(0x8) uname(&(0x7f0000000640)=""/4096) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = syz_io_uring_setup(0x2953, &(0x7f0000000280)={0x0, 0x90e1, 0x800, 0x0, 0x91}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) r5 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89fe, &(0x7f0000000200)={'dummy0\x00', 0x0}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x5, &(0x7f0000000040)=[{0x1, 0xd8, 0x4, 0x7}, {0x0, 0x4, 0x7, 0xfac8}, {0xcb02, 0x0, 0xb, 0x10}, {0xfff7, 0x5, 0x80, 0x6}, {0xabac, 0x80, 0x6, 0x5f}]}) r6 = accept4(r3, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r7, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB=' \x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x20004844) openat$null(0xffffff9c, &(0x7f0000003dc0), 0x2, 0x0) 6m50.353932213s ago: executing program 1 (id=430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002700)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0xa6}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa", 0x80}, {&(0x7f0000000e00)="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", 0x152}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f0000001100)="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", 0x101}], 0x6}}], 0x2, 0x2000c044) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000c40)="b4207053c783", 0x6}], 0x1) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, 0x0, 0x0, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6m48.090210069s ago: executing program 1 (id=435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0xfffffec6, 0x1, 0x0, 0x0, {{0x3ddc, 0x3, 0x80}, {0x7, 0x2, 0x1, 0xd72}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 6m47.271192831s ago: executing program 1 (id=437): openat$nullb(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffff9c, &(0x7f0000000100), 0x165402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000580)={0x0, 0xffffff20, r4, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={r4, r5, 0x1, 0x0, 0x1000000000000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="99c00200204400b4a278c7c5121a1f00200012800b00010065727370616e10001000080000000000000010004e"], 0x40}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x3, 0x7ffc0002}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000) 6m42.234064487s ago: executing program 1 (id=442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x10, 0x83) io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c000900", @ANYRES32=r5], 0x4c}}, 0x40000) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x9000, 0x5}) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r4, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r7, 0x0, 0xffffffff004) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000000580)={0x3, [[0xa29, 0x0, 0x10, 0x4, 0xb72e, 0x5, 0x2, 0x8001], [0x1, 0x6, 0x8, 0xe, 0x2, 0x6, 0x6, 0x10], [0xb, 0x3, 0x2, 0x8, 0x6, 0x1, 0x40, 0x5]], '\x00', [{0x0, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x4, 0x2}, {0x3ff, 0xa2e3, 0x1}, {0x400, 0x7, 0x0, 0x1, 0x0, 0x1}, {0xce42, 0x5, 0x0, 0x1, 0x1}, {0x0, 0x101, 0x1, 0x0, 0x1}, {0x7, 0x6, 0x1, 0x1, 0x1}, {0x2, 0x6, 0x1}, {0xfffffff9, 0x10000, 0x0, 0x1, 0x0, 0x1}, {0x5, 0xc1, 0x1, 0x1}, {0x81, 0x3}, {0x34c0000, 0x7f, 0x1, 0x1, 0x1}], '\x00', 0x8}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) 6m36.870615574s ago: executing program 1 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast1, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r4 = gettid() syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000000)=""/148) 6m35.807829375s ago: executing program 32 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @mcast1, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r4 = gettid() syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x2, 0x3, &(0x7f0000000000)=""/148) 4m35.147535485s ago: executing program 4 (id=611): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x6, 0x480000) fcntl$lock(r2, 0x22, &(0x7f0000000340)={0x2, 0x4, 0x9, 0x92, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) 4m32.22282657s ago: executing program 4 (id=615): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553", 0x2d}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c1405386bab9074b6", 0x58}], 0x2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000000004fc622cbe44e171b3cdc94486fbfefffffffc020000000000001000000000000000fc020000000000000000000000000001fffc0000cee05cf17f72c21c88000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe8000000000000000000000000000bb60010102000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb00000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket(0x11, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd1, &(0x7f0000000080)=0x2, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4m29.701133121s ago: executing program 4 (id=619): socket$nl_generic(0x10, 0x3, 0x10) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e", 0x78}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c844) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) sendto$inet(r4, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e975932", 0x503, 0x6000000000000000, 0x0, 0x0) unshare(0x42040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) unshare(0x40000400) 4m21.275721234s ago: executing program 4 (id=630): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4m19.917886649s ago: executing program 4 (id=632): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553", 0x2d}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c1405386bab9074b6", 0x58}], 0x2) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000000004fc622cbe44e171b3cdc94486fbfefffffffc020000000000001000000000000000fc020000000000000000000000000001fffc0000cee05cf17f72c21c88000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe8000000000000000000000000000bb60010102000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb00000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x11, 0x2, 0x0) socket(0xa, 0x3, 0x3a) sendmmsg(r7, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can, 0x80, 0x0}}], 0x1, 0x8010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4m17.411756635s ago: executing program 4 (id=635): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x3, 0x7, 0x1}) r1 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c00000001040500000000000000000000000000060006400000004a080005400000000005000100010000950a00020000e4ff00000000000800034000000000060006400000000008000440000000000a0002000000001f420000000800044000000000080004400aaff612c7b6a41d20040f835d9f1a16082f984662f3a3"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x2004c800) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080)=0x2, 0x7f03) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r8, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000089241f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 4m2.30264158s ago: executing program 33 (id=635): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x3, 0x7, 0x1}) r1 = inotify_init1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c00000001040500000000000000000000000000060006400000004a080005400000000005000100010000950a00020000e4ff00000000000800034000000000060006400000000008000440000000000a0002000000001f420000000800044000000000080004400aaff612c7b6a41d20040f835d9f1a16082f984662f3a3"], 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x2004c800) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r7, r7, &(0x7f0000000080)=0x2, 0x7f03) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000064f) open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r8, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xffffffde, 0x3000400c, 0x0, 0xfffe, 0x2, 0xfffffffe, 0x0, 0x0, 0x100, 0x100}}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000000000000000089241f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 12.661360304s ago: executing program 5 (id=1368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000) ptrace(0x10, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x6) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f00000000c0)=ANY=[], 0x0) 10.810971787s ago: executing program 3 (id=1372): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 10.565669439s ago: executing program 3 (id=1374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000400)}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca3afcb0b9dcdf64e03e2d393b8f9ce9a5e0ad21c8e307f9e4bb018c5b22023f073f9fbe1508819dd448be8d9873aa90426f3cf4c187d10215395e8a7807e5893b0bd80f4ff745fe7f9c316d18f69265662694261c0b194ef861", 0x72}], 0x2) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002700)=[{{&(0x7f0000000380)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000f80)="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", 0x15b}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc8", 0x92}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf", 0x92}, {&(0x7f0000000e00)="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", 0x152}, {&(0x7f00000008c0)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f0000001100)="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", 0x101}], 0x6}}], 0x2, 0x2000c044) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000c40)="b4207053c783", 0x6}], 0x1) read$FUSE(r3, &(0x7f00000051c0)={0x2020}, 0x2020) pread64(r3, 0x0, 0x0, 0xadc) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0xa8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 9.088031316s ago: executing program 6 (id=1377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048094}, 0x0) 8.775469779s ago: executing program 5 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = msgget$private(0x0, 0x3ac) msgsnd(r2, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x38, 0x0) msgsnd(r2, &(0x7f0000001ac0)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x2800) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, r3, 0x10}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}]}, @IFLA_MTU={0x8}]}, 0x44}}, 0x0) 8.241717238s ago: executing program 5 (id=1379): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x6, 0x480000) fcntl$lock(r3, 0x22, &(0x7f0000000340)={0x2, 0x4, 0x9, 0x92, 0xffffffffffffffff}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r5, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r5, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/188, 0xbc}, {&(0x7f0000001d40)=""/4090, 0xffa}, {&(0x7f0000001840)=""/74, 0x4a}, {&(0x7f0000000a00)=""/73, 0x49}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001700)=@ll, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f00000019c0)=""/43, 0x2b}, {&(0x7f0000001a00)=""/131, 0x83}], 0x3, &(0x7f0000001b00)=""/249, 0xf9}, 0x4}], 0x4, 0x12040, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 7.982554545s ago: executing program 6 (id=1381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a7b000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000000)="362e0f22c30f01c4260f01cb0fd7e70fc75bbcf30fc731baf80c66b8c2816a8066efbafc0cecd84f30ba420066ed0f01df"}], 0x1, 0x16, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x9, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x2, 0x8000000000000, 0x200000000000004, 0x1, 0x9, 0x8, 0x8a02, 0x0, 0xbd9], 0xdddd1000, 0x384310}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.680073156s ago: executing program 3 (id=1382): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7.344144474s ago: executing program 6 (id=1383): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x6, 0x480000) fcntl$lock(r3, 0x22, &(0x7f0000000340)={0x2, 0x4, 0x9, 0x92, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x78, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r4, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/188, 0xbc}, {&(0x7f0000001d40)=""/4090, 0xffa}, {&(0x7f0000001840)=""/74, 0x4a}, {&(0x7f0000000a00)=""/73, 0x49}], 0x4}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001700)=@ll, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f00000019c0)=""/43, 0x2b}, {&(0x7f0000001a00)=""/131, 0x83}], 0x3, &(0x7f0000001b00)=""/249, 0xf9}, 0x4}], 0x4, 0x12040, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0xd, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}}, 0x40000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 6.489951306s ago: executing program 3 (id=1384): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 6.149022532s ago: executing program 3 (id=1385): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000) ptrace(0x10, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x6) landlock_restrict_self(r4, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f00000000c0)=ANY=[], 0x0) 5.202190888s ago: executing program 6 (id=1387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0xd, 0x5}]}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.055031605s ago: executing program 5 (id=1388): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xac2f}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c896}, 0xc0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x886c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x0) 4.728698757s ago: executing program 5 (id=1389): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xe032, 0xffffffffffffffff, 0x80000000) ptrace(0x10, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000001240)={0x2020}, 0x2020) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x6) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) syz_usb_connect$cdc_ncm(0x6, 0x73, &(0x7f00000000c0)=ANY=[], 0x0) 3.118736614s ago: executing program 6 (id=1390): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001880)=""/4096, 0x1000}], 0x1) 3.069664766s ago: executing program 0 (id=1391): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f00000033c0)=""/4080, 0xff0}, {0x0}, {&(0x7f00000023c0)=""/4087, 0xff7}, {0x0}], 0x6) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 2.051794969s ago: executing program 0 (id=1393): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) removexattr(&(0x7f00000040c0)='./file0\x00', &(0x7f0000004100)=@random={'user.', '\x00'}) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) syz_open_dev$vbi(0x0, 0x3, 0x2) 1.556793089s ago: executing program 6 (id=1395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x20, 0x16, 0xe, "cc63970e5c6720e95af8d0076b38"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd, 0xc92557b0ce253e8d, 0x4, 0x0, "c439e465", "fb1ff24a"}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.495378023s ago: executing program 2 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x800}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x81, 0xffffff81}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.316794249s ago: executing program 0 (id=1397): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0xaf4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0xfffffe98, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x2000000, 0x9, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xa60, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0xa4c, 0x2, [@m_police={0x8b4, 0xe, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x40, 0x7, 0x7b, 0x6, 0x9, 0x3, 0x3, 0x60, 0xd, 0x9, 0x400, 0x0, 0xef4d, 0x80, 0x1, 0x62, 0x7ff, 0x5bc8, 0x8, 0x0, 0x148, 0x9, 0xaad9, 0x8001, 0x7, 0x4, 0x5, 0x3, 0x200, 0x2c, 0x6, 0x8, 0x8001, 0x3, 0xe19, 0x0, 0x3484, 0x2, 0x4, 0x2be, 0x6, 0x10, 0x5, 0x40, 0x1, 0x2, 0x3, 0x4, 0x9769, 0x8, 0x1, 0x0, 0x5e7, 0x2, 0x304, 0xfffffffd, 0x5, 0x5, 0x40, 0x64d, 0x8, 0x5, 0x40, 0x7, 0x7ff, 0x1, 0x9, 0xe8, 0x96c, 0x2c18c548, 0x5, 0x7, 0xb, 0xc9, 0x101, 0xf6, 0x4, 0x2, 0x1, 0x1, 0x6, 0x1, 0xbff, 0x401, 0x9, 0x800, 0x3, 0x4, 0x8, 0x2, 0x9, 0xf, 0x1, 0x4, 0xd, 0x101, 0x8, 0x2, 0x9, 0x4, 0x4, 0x40, 0x7b9f, 0xd, 0x7, 0x8001, 0x10001, 0x7c5b, 0xa, 0x2, 0x2, 0x5, 0x2, 0x81, 0x9, 0xfffffffc, 0xce3, 0x7, 0x6, 0x0, 0x10001, 0x5, 0x3, 0x4, 0xb5fe, 0x3, 0x9, 0xa25f, 0x375f, 0xac6a, 0x7, 0x2, 0xdfb, 0x807, 0x100, 0x9bb, 0xfdd7, 0x8, 0x1, 0x7, 0x3, 0x1, 0xb4d5, 0x200, 0x3, 0x4, 0xc, 0x0, 0x80000000, 0x0, 0x2, 0x32e, 0x9, 0x356, 0x2, 0x4, 0x1, 0x6, 0xfffff000, 0x6, 0x9, 0x401, 0x50, 0x0, 0x7ff, 0x7, 0x0, 0x5c1, 0xf, 0xfffffff9, 0x0, 0x5, 0x3, 0x6, 0x0, 0x2, 0x8, 0xffffffff, 0xfffffff4, 0x6, 0x4, 0x81, 0xd, 0x5839, 0x2, 0x5, 0x8, 0xff, 0x101, 0xd, 0x7, 0x0, 0x4, 0x9, 0x6, 0x7fffffff, 0x2b0a, 0x0, 0x7, 0x6, 0x3, 0x6aa1, 0xaad3, 0x6, 0x1, 0x160000, 0x1000, 0xc, 0x240, 0x8, 0x10, 0x9, 0x3ff, 0x3, 0x1, 0x7, 0x5, 0x58, 0x1ff, 0x9, 0xfffffffd, 0x3, 0x1, 0x3, 0x0, 0x8, 0x10, 0x8, 0x1, 0x1, 0x1, 0x0, 0x7, 0x7469, 0x72, 0x5, 0x14d, 0x7d5, 0xfffff001, 0x7, 0xfffffffa, 0x9, 0x80, 0x7, 0x9e8e, 0x7, 0xbf, 0x1, 0x5, 0x2, 0x1, 0xd9f, 0x1, 0x1, 0x101]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x918, 0x8, 0x2, 0x7f3, 0x0, 0x2, 0x6, 0xb761, 0x9, 0x800, 0xfffffffa, 0x3, 0x9d6, 0x5, 0x0, 0x2, 0x6, 0x9, 0x400, 0x3, 0xe, 0x81, 0xd7b, 0x80000000, 0x80000001, 0x40, 0x6, 0x1000, 0xfffffc00, 0x1, 0x8, 0x6, 0x80000001, 0x1, 0x449, 0x7fffffff, 0x88e, 0xd40, 0x3, 0x7, 0xffffffff, 0x3f9, 0x5, 0x1, 0x0, 0x4, 0x4, 0x5, 0x8, 0x6, 0xa44, 0x200, 0xffff, 0x800, 0x6, 0x80000001, 0x3, 0xa, 0xffffffff, 0x8, 0xff, 0x7f4c, 0x9, 0x2, 0x0, 0x10000, 0xb8, 0x1, 0x401, 0x4, 0x0, 0x0, 0x4, 0x8003, 0xf1, 0xa, 0x6, 0xffffffff, 0xf00, 0x53, 0x10, 0x81, 0x400, 0x8001, 0x13, 0xc, 0x5, 0x1800, 0x0, 0x7, 0x2, 0x4, 0xabbf, 0xfffffff9, 0xffffff45, 0x400, 0x400, 0x48, 0xfffffffe, 0x5, 0x4, 0x4, 0x14, 0x8, 0xfffffffe, 0x1, 0x8, 0xa, 0x3, 0x6ab9, 0xb4cea87f, 0x2, 0x524, 0x1ff, 0x1, 0x8, 0xa, 0x5, 0x3, 0x3, 0x75139ddb, 0x100, 0x1ff, 0x43, 0x9c2, 0xb, 0x66, 0x0, 0x3, 0x1cad, 0x6, 0x80000000, 0x9, 0x0, 0x4, 0x40, 0x9, 0x3ff, 0x5, 0xfffffff8, 0x9, 0xfffffffb, 0x1, 0x5, 0x0, 0x7, 0xe7f9, 0x3, 0xfff, 0x9, 0x8, 0x9, 0x7fffffff, 0x423, 0xfffff0cc, 0x1, 0x80, 0x0, 0xeb3, 0x400, 0x4, 0x1000, 0x3, 0x510, 0x8, 0x0, 0x9, 0x89, 0x623c, 0x2f, 0x80000001, 0x1705, 0x18, 0x4, 0x7fffffff, 0x16b1, 0x4, 0xead, 0x8, 0x2, 0x7f, 0xeb52590, 0x600f, 0x6, 0x7, 0x6, 0x6a, 0x1, 0x1, 0x200, 0x3, 0x0, 0x800, 0x5, 0xfffffffb, 0x1, 0x90000000, 0x5, 0xe, 0x0, 0x5, 0x6, 0x6, 0xe9, 0x4, 0x73, 0x8, 0x6, 0x7fffffff, 0x6, 0x5a02, 0x2, 0x6, 0xeb, 0x0, 0x9480, 0x6, 0xbcf2, 0x9, 0x97, 0xffff, 0xffff, 0x1, 0x8, 0x5, 0x51560000, 0x8, 0x814, 0x3, 0xee9a, 0x3, 0x10, 0x2, 0xe5, 0x3253, 0x4, 0x3, 0x9945, 0x7, 0x40, 0x3, 0x8, 0x1000, 0x10, 0x3, 0x1, 0x9, 0x7fff, 0xf, 0x3, 0x8, 0x1, 0x6, 0x7, 0x1, 0x8]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x40}]]}, {0x74, 0x6, "12aeecc86c15b53a518f1cc14a9a40294b3178951104876d69ce021a98f6bf903baa758f35c3067058447169d015b887485c07432a0e194cf6812a19e81222313b24b04a382a4055a9cc3311f933e866ec0ee3fd1bb8106ceee5d9d2533c94c199b70c39d6a28d10e5bfacdd51452ab8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x194, 0x5, 0x0, 0x0, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x9, 0x20000000, 0x8, 0x813c}, 0x2}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x10000, 0xfffffffd, 0x4, 0x3, 0xf2a0}}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_METALST={0x3c, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x4}, @IFE_META_PRIO={0x0, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x74bc}, @IFE_META_PRIO={0x8, 0x3, @val=0x1e5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x5}]}]}, {0xe2, 0x6, "3a4158191d985d459faa514df58c94785979f37b7b9cdb934213ac6bb2cdbbfd247eec10ec2c8143dc9b09dabd0ac00767923ebedef097d8198480c79ef4edbf2a9dea39abd1d8faeb4d98f2d9e6d9ec5353e66ff3935ba28226ed58219a15d8ef80f3237d6fcc3fab0fda42a94befda8676578d2b095da7e5f5e79be10b62c4776abda490925c54b6b04940a73e28f4b451b2d0477c5cfdc292e85e482b3afd6e474aa6d5f830833cf6eba905798d3871ef48c80f8213fcac2f738db8f09b6c1b7330884997e9ada9ce1419d52fb6b2ce9d82bd2d80c526578c8d26448d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0x1}}]}}]}, 0xaf4}, 0x1, 0x0, 0x0, 0x48881}, 0xc0) 1.302113881s ago: executing program 2 (id=1398): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) keyctl$set_reqkey_keyring(0xe, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.197018534s ago: executing program 2 (id=1399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0x8}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xeb, 0xd2, 0x8}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x6, 0x2}, {0x0, 0xfff1}, {0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040851}, 0x4041080) 1.102978101s ago: executing program 2 (id=1400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x1, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x7, 0xff}, {0x10000, 0x5000, 0x3, 0xfc, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x2}, {0xdddd1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7}, {0x6000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0xdddd0000, 0x1000, 0x0, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x5, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 870.406676ms ago: executing program 2 (id=1401): bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_open_dev$media(0x0, 0x100000000, 0x802) 773.362563ms ago: executing program 0 (id=1402): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000280)={0x11, 0x3, 0x0, 0x1, 0x8, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) 682.206489ms ago: executing program 3 (id=1403): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553", 0x2d}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c1405386bab9074b6", 0x58}], 0x2) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000000004fc622cbe44e171b3cdc94486fbfefffffffc020000000000001000000000000000fc020000000000000000000000000001fffc0000cee05cf17f72c21c88000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe8000000000000000000000000000bb60010102000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb00000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket(0x11, 0x2, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd1, &(0x7f0000000080)=0x2, 0x4) sendmmsg(r7, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can, 0x80, 0x0}}], 0x1, 0x8010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 457.761314ms ago: executing program 5 (id=1404): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)={0x20, 0x14, 0x4, "00bd24ba"}, 0x0, 0x0}) 284.536155ms ago: executing program 0 (id=1405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window={0x3, 0x4, 0x3}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x146, 0x9719}, @timestamp], 0x2000000000000092) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 13.95166ms ago: executing program 2 (id=1406): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r2, r0, 0x0) 0s ago: executing program 0 (id=1407): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f00000001c0)={0x87b0000, 0x400, 0x7d, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0xafb55f22487b7594, 0x7, '\x00', @value64=0x7f}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000000004fc622cbe44e171b3cdc94486fbfefffffffc020000000000001000000000000000fc020000000000000000000000000001fffc0000cee05cf17f72c21c88000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fe8000000000000000000000000000bb60010102000000000000000000000000fc000000000000000000000000000001fe8000000000000000000000000000bb00000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket(0x11, 0x2, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd1, &(0x7f0000000080)=0x2, 0x4) sendmmsg(r6, &(0x7f0000001240)=[{{&(0x7f0000000040)=@can, 0x80, 0x0}}], 0x1, 0x8010) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8885) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): 1.287774][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 421.982971][ T5882] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 422.219407][ T5882] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 422.278581][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.425841][ T5882] usb 6-1: Product: syz [ 422.442808][ T5882] usb 6-1: Manufacturer: syz [ 422.456030][ T5882] usb 6-1: SerialNumber: syz [ 422.991778][ T5882] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 423.823121][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 423.823139][ T30] audit: type=1326 audit(1777519459.129:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 423.951003][ T30] audit: type=1326 audit(1777519459.169:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 424.066535][ T30] audit: type=1326 audit(1777519459.169:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 424.145647][ T30] audit: type=1326 audit(1777519459.169:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 424.301754][ T30] audit: type=1326 audit(1777519459.179:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 424.412655][ T30] audit: type=1326 audit(1777519459.179:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 424.611236][ T30] audit: type=1326 audit(1777519459.179:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 424.766628][ T30] audit: type=1326 audit(1777519459.189:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 424.851405][ T30] audit: type=1326 audit(1777519459.189:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 425.004679][ T30] audit: type=1326 audit(1777519459.199:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.0.471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf706f01c code=0x7ffc0000 [ 425.056805][ T6489] usb 6-1: USB disconnect, device number 2 [ 425.117276][ T6489] usblp0: removed [ 425.835481][ T6491] IPVS: starting estimator thread 0... [ 425.962509][ T8555] IPVS: using max 38 ests per chain, 91200 per kthread [ 426.417642][ T8543] usb usb8: usbfs: process 8543 (syz.0.471) did not claim interface 0 before use [ 426.651239][ T8543] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 426.661774][ T8543] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 426.721569][ T8543] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 426.817722][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 426.895724][ T8564] netlink: 80 bytes leftover after parsing attributes in process `syz.2.474'. [ 426.966814][ T8564] netlink: 80 bytes leftover after parsing attributes in process `syz.2.474'. [ 429.013359][ T8581] program syz.5.477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.081887][ T8581] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 429.192005][ T8583] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 429.492567][ T6489] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 429.657777][ T6489] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 429.693719][ T6489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.729313][ T6489] usb 1-1: Product: syz [ 429.749880][ T6489] usb 1-1: Manufacturer: syz [ 429.763709][ T6489] usb 1-1: SerialNumber: syz [ 429.795421][ T6489] usb 1-1: config 0 descriptor?? [ 429.817520][ T6489] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 429.881810][ T6489] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 430.003510][ T6489] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 430.053196][ T6489] usb 1-1: media controller created [ 430.062388][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.099363][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.161625][ T6489] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.184544][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.263322][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.517763][ T8585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.478'. [ 430.579439][ T6489] DVB: Unable to find symbol mt352_attach() [ 430.726927][ T8585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.478'. [ 430.801426][ T6489] DVB: Unable to find symbol nxt6000_attach() [ 430.809981][ T8595] sctp: [Deprecated]: syz.0.478 (pid 8595) Use of int in max_burst socket option. [ 430.809981][ T8595] Use struct sctp_assoc_value instead [ 430.825944][ T6489] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 430.848583][ T6489] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 430.904686][ T6489] dvb-usb: schedule remote query interval to 1000 msecs. [ 430.936579][ T6489] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 430.974711][ T6489] dvb-usb: bulk message failed: -22 (7/0) [ 431.000080][ T6489] dvb-usb: bulk message failed: -22 (7/0) [ 431.041484][ T6489] usb 1-1: USB disconnect, device number 17 [ 431.111550][ T8603] ptrace attach of "./syz-executor exec"[5639] was attempted by "./syz-executor exec"[8603] [ 431.418063][ T6489] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 436.821994][ T6487] IPVS: starting estimator thread 0... [ 436.942524][ T8668] IPVS: using max 26 ests per chain, 62400 per kthread [ 439.272170][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 439.272191][ T30] audit: type=1326 audit(1777519474.539:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 439.514349][ T30] audit: type=1326 audit(1777519474.539:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 439.690931][ T30] audit: type=1326 audit(1777519474.549:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 439.854694][ T30] audit: type=1326 audit(1777519474.549:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 439.932049][ T30] audit: type=1326 audit(1777519474.549:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 440.067369][ T30] audit: type=1326 audit(1777519474.549:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 440.242707][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.282293][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.308992][ T30] audit: type=1326 audit(1777519474.549:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 440.441993][ T30] audit: type=1326 audit(1777519474.549:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 440.664925][ T30] audit: type=1326 audit(1777519474.549:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 440.785061][ T30] audit: type=1326 audit(1777519475.029:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8692 comm="syz.5.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf703f01c code=0x7ffc0000 [ 441.827426][ T8722] netlink: 14 bytes leftover after parsing attributes in process `syz.0.493'. [ 442.123525][ T8722] bond1: (slave macvlan0): Removing an active aggregator [ 442.191209][ T8722] bond1: (slave macvlan0): Releasing backup interface [ 443.022395][ T5677] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 443.144052][ T8722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.214249][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 443.251957][ T8722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.345976][ T5677] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 443.383308][ T5677] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 443.406553][ T8722] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 443.484291][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.519849][ T5677] usb 3-1: Product: syz [ 443.567496][ T8722] bond0 (unregistering): Released all slaves [ 443.629128][ T8743] program syz.5.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.640403][ T5677] usb 3-1: Manufacturer: syz [ 443.713499][ T5677] usb 3-1: SerialNumber: syz [ 443.773876][ T5677] usb 3-1: config 0 descriptor?? [ 443.831149][ T5677] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 443.872840][ T5677] usb 3-1: setting power ON [ 443.929334][ T5677] dvb-usb: bulk message failed: -22 (2/0) [ 443.995826][ T5677] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 444.051127][ T8733] dvb-usb: bulk message failed: -22 (3/0) [ 444.069262][ T5677] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 444.084123][ T8733] dvb-usb: bulk message failed: -22 (14/0) [ 444.167661][ T5677] usb 3-1: media controller created [ 444.278181][ T5677] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.515812][ T5677] usb 3-1: selecting invalid altsetting 6 [ 444.570251][ T5677] usb 3-1: digital interface selection failed (-22) [ 444.607738][ T5677] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 444.624046][ T5882] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 444.654382][ T5677] usb 3-1: setting power OFF [ 444.691674][ T5677] dvb-usb: bulk message failed: -22 (2/0) [ 444.714817][ T5677] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 444.724293][ T5677] (NULL device *): no alternate interface [ 444.812230][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 444.846725][ T5677] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 444.867593][ T5882] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 444.889357][ T5677] usb 3-1: USB disconnect, device number 19 [ 444.905176][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.079904][ T5882] usb 5-1: config 0 descriptor?? [ 445.175395][ T5882] as10x_usb: device has been detected [ 445.215714][ T5882] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 445.346114][ T5882] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 445.375280][ T8746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.433008][ T8746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.663046][ T5882] as10x_usb: error during firmware upload part1 [ 445.690932][ T5882] Registered device nBox DVB-T Dongle [ 445.730622][ T5882] usb 5-1: USB disconnect, device number 24 [ 445.989994][ T5882] Unregistered device nBox DVB-T Dongle [ 446.000246][ T5882] as10x_usb: device has been disconnected [ 446.472540][ T6487] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 446.562309][ T6489] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 446.639205][ T6487] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 446.678916][ T6487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.704565][ T6487] usb 3-1: Product: syz [ 446.720363][ T6487] usb 3-1: Manufacturer: syz [ 446.732255][ T6489] usb 4-1: Using ep0 maxpacket: 16 [ 446.740857][ T6487] usb 3-1: SerialNumber: syz [ 446.755592][ T6489] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.770673][ T6487] usb 3-1: config 0 descriptor?? [ 446.794884][ T6489] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.845190][ T6489] usb 4-1: config 0 interface 0 has no altsetting 0 [ 446.872927][ T6489] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 446.922055][ T6489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.957087][ T6489] usb 4-1: config 0 descriptor?? [ 447.000305][ T6487] usb 3-1: USB disconnect, device number 20 [ 447.213701][ T8765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.234944][ T8765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.540593][ T6489] hid_parser_main: 27 callbacks suppressed [ 447.540618][ T6489] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 447.581141][ T6489] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 447.596218][ T6489] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 447.607152][ T6489] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 447.664208][ T6489] hid-corsair-void 0003:1B1C:1B25.000C: unknown main item tag 0x0 [ 447.691627][ T6489] hid-corsair-void 0003:1B1C:1B25.000C: hidraw0: USB HID v0.05 Device [HID 1b1c:1b25] on usb-dummy_hcd.3-1/input0 [ 447.784992][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.504'. [ 448.153621][ T6489] hid-corsair-void 0003:1B1C:1B25.000C: failed to request battery (reason: -71) [ 448.169003][ T6487] hid-corsair-void 0003:1B1C:1B25.000C: failed to request firmware (reason: -71) [ 448.366866][ T24] usb 4-1: USB disconnect, device number 20 [ 448.530710][ T8778] team0: Port device team_slave_1 removed [ 448.608413][ T5882] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 448.933433][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 450.436558][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 451.158812][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.258061][ T5882] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 451.290494][ T5882] usb 3-1: can't read configurations, error -71 [ 452.063463][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.509'. [ 454.454236][ T6487] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 454.612520][ T6487] usb 3-1: Using ep0 maxpacket: 8 [ 454.631010][ T6487] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 454.702336][ T6487] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 454.777838][ T6487] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.811588][ T6487] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.850391][ T6487] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.920030][ T6487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.610296][ T6487] usb 3-1: usb_control_msg returned -32 [ 455.637412][ T6487] usbtmc 3-1:16.0: can't read capabilities [ 456.146906][ T8844] ptrace attach of "./syz-executor exec"[5639] was attempted by "./syz-executor exec"[8844] [ 457.083974][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 457.162920][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 457.193386][ T8850] netlink: 'syz.3.517': attribute type 4 has an invalid length. [ 457.258513][ T6487] usb 3-1: USB disconnect, device number 23 [ 457.642234][ T6492] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 457.814339][ T6492] usb 4-1: Using ep0 maxpacket: 16 [ 457.848347][ T8856] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[8856] [ 457.877821][ T6492] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 458.007811][ T6492] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 458.045021][ T6492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.085638][ T6492] usb 4-1: Product: syz [ 458.121063][ T6492] usb 4-1: Manufacturer: syz [ 458.145614][ T6492] usb 4-1: SerialNumber: syz [ 458.182189][ T8849] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 460.866085][ T6492] usb 4-1: selecting invalid altsetting 1 [ 460.943219][ T8867] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[8867] [ 461.162692][ T6492] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 461.250655][ T6492] usb 4-1: USB disconnect, device number 21 [ 461.324576][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.381294][ T8872] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[8872] [ 461.624779][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 461.834335][ T8877] team0: Port device team_slave_1 removed [ 465.079753][ T8895] input: syz1 as /devices/virtual/input/input20 [ 465.086331][ T6492] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 465.262330][ T6492] usb 3-1: Using ep0 maxpacket: 8 [ 465.287859][ T6492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.339683][ T6492] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 465.348434][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.523'. [ 465.491559][ T6492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.771392][ T6492] usb 3-1: config 0 descriptor?? [ 466.223672][ T6492] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 466.632370][ T8902] kvm: pic: non byte read [ 466.647824][ T8902] kvm: pic: non byte read [ 466.657273][ T8902] kvm: pic: non byte read [ 466.667952][ T8902] kvm: pic: non byte read [ 466.689574][ T30] audit: type=1326 audit(1777519501.989:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8890 comm="syz.2.525" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702f01c code=0x4e000000 [ 466.690620][ T8902] kvm: pic: non byte read [ 468.079772][ T5714] usb 3-1: USB disconnect, device number 24 [ 469.088969][ T8917] hub 9-0:1.0: USB hub found [ 469.114416][ T8917] hub 9-0:1.0: 1 port detected [ 470.909544][ T8934] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 470.998673][ T8930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.006056][ T8930] team0: Device bond0 failed to register rx_handler [ 471.175796][ T8938] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[8938] [ 471.668526][ T8931] bridge0: port 3(team0) entered blocking state [ 471.703999][ T8931] bridge0: port 3(team0) entered disabled state [ 471.747364][ T8931] team0: entered allmulticast mode [ 471.772492][ T8931] team_slave_0: entered allmulticast mode [ 471.820142][ T8931] team_slave_1: entered allmulticast mode [ 471.925633][ T8931] team0: entered promiscuous mode [ 471.935525][ T8931] team_slave_0: entered promiscuous mode [ 471.945716][ T8931] team_slave_1: entered promiscuous mode [ 475.468368][ T5882] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 475.527935][ T5714] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 475.648424][ T5882] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 475.668099][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.692277][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 475.721693][ T5714] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 475.737730][ T5882] usb 6-1: config 0 descriptor?? [ 475.765907][ T5714] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.793790][ T5714] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 475.807620][ T5714] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 475.834725][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.849033][ T5714] usb 1-1: Product: syz [ 475.855602][ T5714] usb 1-1: Manufacturer: syz [ 475.860297][ T5714] usb 1-1: SerialNumber: syz [ 475.970178][ T5714] usb 1-1: 0:2 : does not exist [ 475.992583][ T5882] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 476.263556][ T8976] input: syz0 as /devices/virtual/input/input22 [ 476.430435][ T5882] [drm:udl_init] *ERROR* Selecting channel failed [ 476.748251][ T5882] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 476.770146][ T5882] [drm] Initialized udl on minor 2 [ 476.800522][ T5714] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 476.901563][ T5882] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 477.053086][ T5882] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 477.098348][ T5714] usb 1-1: USB disconnect, device number 18 [ 477.195426][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 477.233833][ T5882] usb 6-1: USB disconnect, device number 3 [ 477.280471][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 478.492210][ T5714] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 478.662844][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 478.786391][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.821072][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 478.868928][ T5714] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.878912][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.911613][ T5714] usb 1-1: config 0 descriptor?? [ 478.937927][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 478.939295][ T5714] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 478.958275][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.544'. [ 479.444185][ T9006] ptrace attach of "./syz-executor exec"[5639] was attempted by "./syz-executor exec"[9006] [ 480.327086][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.548'. [ 480.371887][ T9012] netlink: 80 bytes leftover after parsing attributes in process `syz.5.548'. [ 480.381259][ T9012] netlink: 80 bytes leftover after parsing attributes in process `syz.5.548'. [ 481.022464][ T5714] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 481.231687][ T5714] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 481.269220][ T5714] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 481.352749][ T5714] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 481.493437][ T5714] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 481.555987][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 481.607861][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 481.639228][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 481.685754][ T5714] usb 4-1: string descriptor 0 read error: -22 [ 481.692780][ T5714] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 481.730467][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.774830][ T5714] usb 4-1: config 0 descriptor?? [ 481.792603][ T5714] hub 4-1:0.0: bad descriptor, ignoring hub [ 481.805064][ T5714] hub 4-1:0.0: probe with driver hub failed with error -5 [ 481.860867][ T5714] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input23 [ 482.390290][ T9025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.435755][ T9025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.622201][ T6489] usb 1-1: USB disconnect, device number 19 [ 482.735395][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 482.806923][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.549'. [ 483.502636][ T5882] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 483.694808][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 485.000524][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 485.235540][ T9042] netlink: 27 bytes leftover after parsing attributes in process `syz.4.554'. [ 485.534178][ T6487] usb 4-1: USB disconnect, device number 22 [ 485.729021][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 485.760630][ T5882] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 485.817348][ T5882] usb 1-1: can't read configurations, error -71 [ 486.082969][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 486.107733][ T9052] fuse: Unknown parameter '' [ 486.117106][ T9051] netlink: 80 bytes leftover after parsing attributes in process `syz.2.555'. [ 486.142445][ T9051] netlink: 80 bytes leftover after parsing attributes in process `syz.2.555'. [ 486.321586][ T9058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 486.407906][ T9061] ptrace attach of "./syz-executor exec"[8334] was attempted by "./syz-executor exec"[9061] [ 486.705906][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 491.069729][ T9093] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 491.364279][ T9093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.639301][ T9119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 494.766517][ T9120] netlink: 27 bytes leftover after parsing attributes in process `syz.3.570'. [ 495.712192][ T5714] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 495.782649][ T5882] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 495.932947][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 495.951220][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.979541][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.991530][ T5714] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 496.003194][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.020647][ T5714] usb 6-1: config 0 descriptor?? [ 496.025833][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 496.037881][ T5714] hub 6-1:0.0: USB hub found [ 496.061197][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 496.100228][ T5882] usb 1-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 496.116502][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.125431][ T5882] usb 1-1: Product: syz [ 496.129653][ T5882] usb 1-1: Manufacturer: syz [ 496.134701][ T5882] usb 1-1: SerialNumber: syz [ 496.146659][ T5882] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 496.376484][ T5714] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 496.443781][ T9130] UHID_CREATE from different security context by process 590 (syz.2.574), this is not allowed. [ 496.576262][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.599512][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.654243][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.679833][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.712252][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.739102][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.796241][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.861661][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.875405][ T5714] hid-generic 0003:046D:C31C.000E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 496.928072][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 496.958566][ T5677] hid-generic 0000:0000:0004.000D: unknown main item tag 0x0 [ 497.135279][ T5677] hid-generic 0000:0000:0004.000D: hidraw1: HID v0.03 Device [syz1] on syz0 [ 497.499373][ T6489] usb 6-1: USB disconnect, device number 4 [ 497.698619][ T9139] fido_id[9139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 498.022387][ T6489] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 498.144146][ T9131] bond0: (slave bond_slave_1): Device is not bonding slave [ 498.184858][ T6489] usb 6-1: Using ep0 maxpacket: 32 [ 498.206320][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.235986][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.261684][ T6489] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 498.308730][ T6489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.346407][ T9131] bond0: option active_slave: invalid value (bond_slave_1) [ 498.369605][ T6489] usb 6-1: config 0 descriptor?? [ 498.424262][ T6489] hub 6-1:0.0: USB hub found [ 498.872043][ T6489] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 498.971840][ T6489] usbhid 6-1:0.0: can't add hid device: -71 [ 499.008793][ T6489] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 499.094831][ T6489] usb 6-1: USB disconnect, device number 5 [ 499.447790][ T9156] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[9156] [ 499.484258][ T9131] bond0 (unregistering): Released all slaves [ 499.728353][ T9158] fuse: Unknown parameter '' [ 500.018040][ T9160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.575'. [ 500.169104][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 501.204662][ T5882] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 501.235287][ T5882] usb 1-1: unable to issue vendor read request (ret = -32) [ 501.327102][ T5882] usb 1-1: unable to issue vendor read request (ret = -32) [ 501.351165][ T5882] usb 1-1: unable to issue vendor read request (ret = -32) [ 501.365706][ T5882] usb 1-1: unable to issue vendor read request (ret = -32) [ 501.492411][ T5882] usb 1-1: USB disconnect, device number 22 [ 501.665969][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.678211][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.749406][ T9180] openvswitch: netlink: Message has 1 unknown bytes. [ 502.771446][ T9180] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.335158][ T9187] netlink: 'syz.3.581': attribute type 4 has an invalid length. [ 503.863688][ T6487] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 504.068774][ T6487] usb 4-1: Using ep0 maxpacket: 16 [ 504.118028][ T6487] usb 4-1: config 0 has no interfaces? [ 504.203365][ T6487] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 504.288457][ T6487] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 504.379171][ T6487] usb 4-1: Manufacturer: syz [ 504.434979][ T6487] usb 4-1: config 0 descriptor?? [ 508.667081][ T5677] usb 4-1: USB disconnect, device number 23 [ 510.332178][ T5714] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 510.538356][ T5714] usb 6-1: Using ep0 maxpacket: 32 [ 510.565386][ T5714] usb 6-1: unable to get BOS descriptor or descriptor too short [ 510.618775][ T5714] usb 6-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 510.684078][ T9244] tipc: Started in network mode [ 510.690075][ T9244] tipc: Node identity ac14140f, cluster identity 4711 [ 510.699350][ T5714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.728232][ T5714] usb 6-1: Product: syz [ 510.747528][ T5714] usb 6-1: Manufacturer: syz [ 510.762664][ T5714] usb 6-1: SerialNumber: syz [ 510.769554][ T9244] tipc: New replicast peer: 255.255.255.255 [ 510.784881][ T9244] tipc: Enabled bearer , priority 10 [ 510.828303][ T5714] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 511.528330][ T9246] bond1: (slave bond_slave_1): Device is not our slave [ 511.572764][ T9246] bond1: option active_slave: invalid value (bond_slave_1) [ 511.607670][ T9246] bond1 (unregistering): Released all slaves [ 511.824171][ T5882] tipc: Node number set to 2886997007 [ 512.156650][ T5714] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 512.183284][ T5714] usb 6-1: unable to issue vendor read request (ret = -71) [ 512.206519][ T5714] usb 6-1: unable to issue vendor read request (ret = -71) [ 512.233071][ T5714] usb 6-1: unable to issue vendor read request (ret = -71) [ 512.252911][ T5714] usb 6-1: unable to issue vendor read request (ret = -71) [ 512.427798][ T5714] usb 6-1: USB disconnect, device number 6 [ 512.625412][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.115084][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.598'. [ 515.153117][ T9277] erspan1: entered allmulticast mode [ 519.540940][ T9313] netlink: 40 bytes leftover after parsing attributes in process `syz.3.607'. [ 522.655101][ T9347] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[9347] [ 524.212234][ T9341] Bluetooth: hci2: command 0x0406 tx timeout [ 524.495050][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 524.521235][ T9357] netlink: 80 bytes leftover after parsing attributes in process `syz.4.615'. [ 524.531402][ T9357] netlink: 80 bytes leftover after parsing attributes in process `syz.4.615'. [ 524.939222][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 524.984527][ T9360] netlink: 80 bytes leftover after parsing attributes in process `syz.2.614'. [ 524.993613][ T9360] netlink: 80 bytes leftover after parsing attributes in process `syz.2.614'. [ 526.796917][ T9370] netlink: 'syz.4.619': attribute type 4 has an invalid length. [ 527.222293][ T5677] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 527.271209][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 527.452221][ T5677] usb 5-1: Using ep0 maxpacket: 16 [ 527.490932][ T5677] usb 5-1: config 0 has no interfaces? [ 527.510803][ T5677] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 527.562303][ T5677] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 527.612718][ T5677] usb 5-1: Manufacturer: syz [ 527.684437][ T5677] usb 5-1: config 0 descriptor?? [ 531.718064][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 531.942773][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.623'. [ 534.787400][ T6492] usb 5-1: USB disconnect, device number 25 [ 536.459198][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.631'. [ 536.593355][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.632'. [ 536.697753][ T9445] netlink: 80 bytes leftover after parsing attributes in process `syz.4.632'. [ 536.708501][ T9445] netlink: 80 bytes leftover after parsing attributes in process `syz.4.632'. [ 537.284005][ T9443] team_slave_1 (unregistering): left promiscuous mode [ 537.291164][ T9443] team_slave_1 (unregistering): left allmulticast mode [ 537.369738][ T9455] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[9455] [ 537.395071][ T5677] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 537.657497][ T5677] usb 6-1: Using ep0 maxpacket: 8 [ 537.679319][ T5677] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 537.695939][ T5677] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 537.751196][ T5677] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 537.779021][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.804975][ T5677] usb 6-1: Product: syz [ 537.827707][ T5677] usb 6-1: Manufacturer: syz [ 537.841891][ T5677] usb 6-1: SerialNumber: syz [ 537.863538][ T5677] usb 6-1: config 0 descriptor?? [ 537.880546][ T5677] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 537.948776][ T9443] team0: Port device team_slave_1 removed [ 538.164388][ T5882] usb 6-1: USB disconnect, device number 7 [ 539.492216][ T6489] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 539.715418][ T6489] usb 3-1: Using ep0 maxpacket: 16 [ 539.751410][ T6489] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 539.765300][ T6489] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 539.787389][ T6489] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 539.819466][ T6489] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 539.849209][ T6489] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 539.867339][ T6489] usb 3-1: config 0 has no interface number 0 [ 539.887059][ T6489] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 539.961009][ T6489] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 539.976381][ T6489] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 540.020507][ T6489] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 540.125733][ T6489] usb 3-1: config 0 interface 125 has no altsetting 0 [ 540.191190][ T6489] usb 3-1: config 0 interface 125 has no altsetting 2 [ 540.225623][ T6489] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 540.278352][ T6489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.347389][ T6489] usb 3-1: Product: syz [ 540.378905][ T6489] usb 3-1: Manufacturer: syz [ 540.401584][ T6489] usb 3-1: SerialNumber: syz [ 540.437751][ T6489] usb 3-1: config 0 descriptor?? [ 540.487661][ T6489] usb 3-1: selecting invalid altsetting 2 [ 540.635617][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.638'. [ 540.716499][ T9472] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 541.346224][ T9477] openvswitch: netlink: Message has 1 unknown bytes. [ 541.407024][ T9477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.581810][ T6489] get_1284_register timeout [ 541.774348][ C0] usb 3-1: async_complete: urb error -104 [ 541.780424][ C0] usb 3-1: async_complete: urb error -104 [ 541.786289][ C0] usb 3-1: async_complete: urb error -104 [ 542.024619][ T6489] usb 3-1: USB disconnect, device number 25 [ 544.091010][ T9502] tipc: Failed to obtain node identity [ 544.102347][ T9502] tipc: Enabling of bearer rejected, failed to enable media [ 545.705087][ T9516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.649'. [ 545.743747][ T9516] netlink: 80 bytes leftover after parsing attributes in process `syz.5.649'. [ 545.764478][ T9516] netlink: 80 bytes leftover after parsing attributes in process `syz.5.649'. [ 545.930532][ T9520] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[9520] [ 548.445301][ T9531] Set syz1 is full, maxelem 237 reached [ 549.422546][ T6489] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 549.607616][ T6489] usb 3-1: Using ep0 maxpacket: 16 [ 549.636010][ T6489] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.655766][ T6489] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.671962][ T6489] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.682470][ T6489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.695801][ T6489] usb 3-1: Product: syz [ 549.703309][ T6489] usb 3-1: Manufacturer: syz [ 549.719161][ T6489] usb 3-1: SerialNumber: syz [ 549.771425][ T6489] usb 3-1: 0:2 : does not exist [ 549.791441][ T6489] usb 3-1: unit 9 not found! [ 550.037363][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.060882][ T6489] usb 3-1: USB disconnect, device number 26 [ 550.266558][ T9545] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[9545] [ 550.452417][ T5882] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 550.603264][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 550.614448][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 550.643670][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 550.667078][ T5882] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 550.679466][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.704395][ T5882] usb 6-1: Product: syz [ 550.716184][ T5882] usb 6-1: Manufacturer: syz [ 550.728478][ T5882] usb 6-1: SerialNumber: syz [ 550.757641][ T5882] usb 6-1: config 0 descriptor?? [ 550.773160][ T5882] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 551.012875][ T5882] usb 6-1: USB disconnect, device number 8 [ 552.267550][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.663'. [ 553.241948][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.664'. [ 553.258596][ T9575] netlink: 80 bytes leftover after parsing attributes in process `syz.5.664'. [ 553.279386][ T9575] netlink: 80 bytes leftover after parsing attributes in process `syz.5.664'. [ 554.979915][ T9341] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.993696][ T9341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.003079][ T9341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 555.028591][ T9341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 555.058108][ T9341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 555.562782][ T5882] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 555.754232][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 555.785164][ T5882] usb 1-1: config 6 has an invalid interface number: 182 but max is 0 [ 555.808045][ T5882] usb 1-1: config 6 has no interface number 0 [ 555.816528][ T5882] usb 1-1: config 6 interface 182 has no altsetting 0 [ 555.843787][ T5882] usb 1-1: string descriptor 0 read error: -22 [ 555.856888][ T5882] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2821, bcdDevice= d.e1 [ 555.922357][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.922821][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.938014][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.945890][ T9578] bridge_slave_0: entered allmulticast mode [ 555.953839][ T9578] bridge_slave_0: entered promiscuous mode [ 555.964461][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.979923][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.987306][ T9578] bridge_slave_1: entered allmulticast mode [ 555.995655][ T9578] bridge_slave_1: entered promiscuous mode [ 556.078420][ T5882] em28xx 1-1:6.182: audio device (eb1a:2821): interface 182, class 1 [ 556.106900][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.156126][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.198624][ T9578] team0: Port device team_slave_0 added [ 556.206592][ T9578] team0: Port device team_slave_1 added [ 556.267494][ T5882] usb 1-1: USB disconnect, device number 23 [ 556.274968][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.282001][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.309028][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.323454][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.331156][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.359759][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.656906][ T9578] hsr_slave_0: entered promiscuous mode [ 556.692220][ T9578] hsr_slave_1: entered promiscuous mode [ 556.716178][ T9578] debugfs: 'hsr0' already exists in 'hsr' [ 556.753719][ T9578] Cannot create hsr debugfs directory [ 556.864854][ T9601] Set syz1 is full, maxelem 237 reached [ 556.898750][ T9604] syz_tun: entered allmulticast mode [ 557.098124][ T5625] Bluetooth: hci5: command tx timeout [ 557.152158][ T6487] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 557.318869][ T6487] usb 6-1: Using ep0 maxpacket: 16 [ 557.334553][ T6487] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.348451][ T6487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 557.366896][ T6487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 557.397652][ T6487] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 557.435549][ T6487] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.480664][ T6487] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 557.506428][ T6487] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 557.537653][ T6487] usb 6-1: Manufacturer: syz [ 557.549482][ T6487] usb 6-1: config 0 descriptor?? [ 557.970614][ T9578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 558.152492][ T6487] rc_core: IR keymap rc-hauppauge not found [ 558.179876][ T6487] Registered IR keymap rc-empty [ 558.209117][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.263103][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.314473][ T6487] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 558.391301][ T6487] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 558.494184][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.546980][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.598021][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.642570][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.701403][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.766724][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.823232][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.852857][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.922253][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 558.947386][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 558.984508][ T6487] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 559.015536][ T9578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 559.063092][ T6487] mceusb 6-1:0.0: Registered  with mce emulator interface version 1 [ 559.082306][ T6487] mceusb 6-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 559.173711][ T5625] Bluetooth: hci5: command tx timeout [ 560.997220][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.029395][ T9578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 561.252212][ T5625] Bluetooth: hci5: command tx timeout [ 561.775922][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.991007][ T5882] usb 6-1: USB disconnect, device number 9 [ 562.077832][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 562.369915][ T9578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 562.457836][ T9578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.471710][ T9604] syz_tun: left allmulticast mode [ 562.760305][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.851097][ T9578] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.918726][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.926013][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.967279][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.974577][ T7111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.099559][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.106113][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.270542][ T9578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.302830][ T6489] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 563.332506][ T5625] Bluetooth: hci5: command tx timeout [ 563.338211][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 563.440313][ T9578] veth0_vlan: entered promiscuous mode [ 563.472536][ T6489] usb 6-1: Using ep0 maxpacket: 32 [ 563.485517][ T6489] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 563.505353][ T9578] veth1_vlan: entered promiscuous mode [ 563.516596][ T6489] usb 6-1: config 0 has no interface number 0 [ 563.529650][ T6489] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.560811][ T6489] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 563.611854][ T6489] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 563.640837][ T6489] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.721274][ T9578] veth0_macvtap: entered promiscuous mode [ 563.740158][ T6489] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 563.784216][ T9578] veth1_macvtap: entered promiscuous mode [ 563.804463][ T6489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.832890][ T6489] usb 6-1: Product: syz [ 563.865323][ T6489] usb 6-1: Manufacturer: syz [ 563.890155][ T6489] usb 6-1: SerialNumber: syz [ 563.911266][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.930204][ T9660] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[9660] [ 563.953754][ T6489] usb 6-1: config 0 descriptor?? [ 564.063351][ T9578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.089198][ T6489] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input26 [ 564.223960][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.256584][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.299812][ T6489] usb 6-1: USB disconnect, device number 10 [ 564.324332][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.371447][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.049508][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.090642][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.326335][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.375499][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.939385][ T9687] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[9687] [ 567.118749][ T9689] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[9689] [ 569.072156][ T6489] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 569.246200][ T6489] usb 6-1: Using ep0 maxpacket: 32 [ 569.269467][ T6489] usb 6-1: config 123 interface 0 has no altsetting 0 [ 569.314543][ T6489] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 569.360567][ T6489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.425109][ T6489] usb 6-1: Product: syz [ 569.457472][ T6489] usb 6-1: Manufacturer: syz [ 569.487470][ T6489] usb 6-1: SerialNumber: syz [ 569.779907][ T6489] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 569.841938][ T6489] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 569.890102][ T6489] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 569.933120][ T6489] usb 6-1: media controller created [ 569.977989][ T6489] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.060851][ T6489] set interface failed [ 570.061274][ T6489] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 570.152510][ T6489] error writing reg: 0xff, val: 0x00 [ 570.271497][ T6489] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 570.338064][ T6489] usb 6-1: USB disconnect, device number 11 [ 573.124973][ T9729] netlink: 'syz.5.705': attribute type 1 has an invalid length. [ 573.228032][ T9732] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 573.262987][ T9732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.553353][ T9736] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 574.363547][ T9763] openvswitch: netlink: IPv6 tunnel dst address is zero [ 575.629549][ T9783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.722'. [ 577.436917][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 577.647303][ T9804] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[9804] [ 577.709739][ T9802] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[9802] [ 577.761844][ T9808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 581.484737][ T9823] netlink: zone id is out of range [ 581.491614][ T9823] netlink: zone id is out of range [ 581.511638][ T9823] netlink: set zone limit has 4 unknown bytes [ 582.619986][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.741'. [ 582.676827][ T9840] netlink: 80 bytes leftover after parsing attributes in process `syz.6.741'. [ 582.710281][ T9840] netlink: 80 bytes leftover after parsing attributes in process `syz.6.741'. [ 585.256119][ T9874] Set syz1 is full, maxelem 237 reached [ 585.455544][ T9877] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[9877] [ 587.125250][ T9891] ptrace attach of "./syz-executor exec"[8334] was attempted by "./syz-executor exec"[9891] [ 590.994642][ T9927] netlink: 'syz.6.770': attribute type 13 has an invalid length. [ 591.868436][ T9927] gretap0: refused to change device tx_queue_len [ 591.879258][ T9927] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 592.251450][ T9933] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 592.643182][ T9941] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[9941] [ 592.663473][ T9939] bond1 (unregistering): Released all slaves [ 593.427985][ T9949] netlink: 'syz.6.777': attribute type 21 has an invalid length. [ 593.477889][ T9949] netlink: 'syz.6.777': attribute type 6 has an invalid length. [ 593.542975][ T9949] netlink: 64 bytes leftover after parsing attributes in process `syz.6.777'. [ 593.594563][ T9951] netlink: 56 bytes leftover after parsing attributes in process `syz.5.778'. [ 594.894811][ T9974] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[9974] [ 597.004404][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 598.795735][T10008] sctp: [Deprecated]: syz.6.799 (pid 10008) Use of int in maxseg socket option. [ 598.795735][T10008] Use struct sctp_assoc_value instead [ 602.257471][T10035] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 602.257471][T10035] Please contact the netfilter-devel mailing list or update your nftables rules. [ 604.864464][T10064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 605.532434][T10078] binder: 10077:10078 ioctl 400c620e 80000240 returned -22 [ 613.586070][T10167] program syz.2.854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.105847][ T6486] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 615.252668][ T6486] usb 4-1: device descriptor read/64, error -71 [ 615.524280][ T6486] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 615.682406][ T6486] usb 4-1: device descriptor read/64, error -71 [ 615.823628][ T6486] usb usb4-port1: attempt power cycle [ 616.182185][ T6486] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 616.218521][ T6486] usb 4-1: device descriptor read/8, error -71 [ 616.502506][ T6486] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 616.557602][ T6486] usb 4-1: device descriptor read/8, error -71 [ 616.585331][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.863'. [ 616.675375][ T6486] usb usb4-port1: unable to enumerate USB device [ 617.232989][ T6492] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 617.422482][ T6492] usb 1-1: Using ep0 maxpacket: 8 [ 617.439810][ T6492] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 617.468423][ T6492] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 617.502223][ T6492] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 617.514154][ T6492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.522866][ T6492] usb 1-1: Product: syz [ 617.527098][ T6492] usb 1-1: Manufacturer: syz [ 617.536611][ T6492] usb 1-1: SerialNumber: syz [ 617.574467][ T6492] usb 1-1: config 0 descriptor?? [ 617.723408][ T6492] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 618.026768][ T6492] usb 1-1: USB disconnect, device number 24 [ 618.661925][T10220] netlink: 80 bytes leftover after parsing attributes in process `syz.5.871'. [ 618.683977][T10220] netlink: 80 bytes leftover after parsing attributes in process `syz.5.871'. [ 618.742221][ T5714] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 618.902742][ T5714] usb 4-1: Using ep0 maxpacket: 32 [ 618.910181][ T5714] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 618.919711][ T5714] usb 4-1: config 0 has no interface number 0 [ 618.927200][ T5714] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 618.941365][ T5714] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 618.970321][ T5714] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 619.004653][ T5714] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 42757, setting to 1024 [ 619.036139][ T5714] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.053566][ T5714] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 619.063031][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.071165][ T5714] usb 4-1: Product: syz [ 619.076678][ T5714] usb 4-1: Manufacturer: syz [ 619.081331][ T5714] usb 4-1: SerialNumber: syz [ 619.096008][ T5714] usb 4-1: config 0 descriptor?? [ 619.120461][ T5714] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input28 [ 619.234794][ T6492] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 619.432423][ T6492] usb 3-1: Using ep0 maxpacket: 8 [ 619.469167][ T6486] usb 4-1: USB disconnect, device number 28 [ 619.483098][ T6492] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.528084][ T6492] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 619.588110][ T6492] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.653582][ T6492] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 619.689961][ T6492] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 619.710121][ T6492] usb 3-1: Product: syz [ 619.745800][ T6492] usb 3-1: Manufacturer: syz [ 619.765840][ T6492] usb 3-1: SerialNumber: syz [ 619.802447][ T6492] usb 3-1: config 0 descriptor?? [ 619.964765][T10228] netlink: 60 bytes leftover after parsing attributes in process `syz.0.877'. [ 620.087655][ T6492] rc_core: IR keymap rc-imon-rsc not found [ 620.125508][ T6492] Registered IR keymap rc-empty [ 620.191634][T10231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.877'. [ 620.265312][ T6492] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 620.332242][ T6492] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 620.420017][ T6492] usb 3-1: USB disconnect, device number 27 [ 621.012321][ T5714] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 621.214824][ T5714] usb 6-1: Using ep0 maxpacket: 16 [ 621.382123][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.426490][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.436601][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.450491][ T5714] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.507290][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.517400][ T6486] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 621.670618][ T5714] usb 6-1: config 0 descriptor?? [ 621.756450][ T6486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.807877][ T6486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.845885][ T6486] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 621.887441][ T6486] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 621.939155][ T6486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.010923][ T6486] usb 3-1: config 0 descriptor?? [ 622.357217][ T5714] microsoft 0003:045E:07DA.000F: ignoring exceeding usage max [ 622.480095][ T6486] steelseries 0003:1038:1410.0010: item fetching failed at offset 4/7 [ 622.510690][ T6486] steelseries 0003:1038:1410.0010: parse failed [ 622.531915][ T5714] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 622.575343][ T5714] microsoft 0003:045E:07DA.000F: no inputs found [ 622.597495][ T5714] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 622.600326][ T6486] steelseries 0003:1038:1410.0010: probe with driver steelseries failed with error -22 [ 622.707424][ T6486] usb 3-1: USB disconnect, device number 28 [ 622.719178][ T5714] usb 6-1: USB disconnect, device number 12 [ 622.847751][T10257] fido_id[10257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000F/report_descriptor': No such file or directory [ 624.072513][ T6486] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 624.299728][ T6486] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 624.338433][ T6486] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 624.359084][ T6486] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.401952][ T6486] usb 3-1: config 0 descriptor?? [ 624.423183][T10271] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 624.536363][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.542918][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.977789][ T6486] hid_parser_main: 91 callbacks suppressed [ 624.977809][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.064040][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.118313][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.165873][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.212622][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.336279][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.458104][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.458144][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.458193][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.458223][ T6486] hid-picolcd 0003:04D8:C002.0011: unknown main item tag 0x0 [ 625.612448][ T6486] hid-picolcd 0003:04D8:C002.0011: No report with id 0x11 found [ 625.624348][ T6486] usb 3-1: USB disconnect, device number 29 [ 626.579883][ T6489] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 626.774251][ T6489] usb 3-1: Using ep0 maxpacket: 8 [ 626.803539][ T6489] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 626.852394][ T6489] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 626.908989][ T6489] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 626.930045][ T6489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.951946][ T6489] usb 3-1: Product: syz [ 626.968255][ T6489] usb 3-1: Manufacturer: syz [ 627.002428][ T6489] usb 3-1: SerialNumber: syz [ 627.026281][ T6489] usb 3-1: config 0 descriptor?? [ 627.044658][ T6489] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 627.300650][ T6486] usb 3-1: USB disconnect, device number 30 [ 627.502161][ T6489] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 627.672140][ T6489] usb 4-1: Using ep0 maxpacket: 8 [ 627.686926][ T6489] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 627.708907][ T6489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 627.745640][ T6489] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 627.762480][ T6489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.773343][ T6489] usb 4-1: Product: syz [ 627.777602][ T6489] usb 4-1: Manufacturer: syz [ 627.790270][ T6489] usb 4-1: SerialNumber: syz [ 627.806417][ T6489] usb 4-1: config 0 descriptor?? [ 627.865817][ T6489] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 628.702183][ T5714] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 628.837565][ T6486] usb 4-1: USB disconnect, device number 29 [ 628.885002][ T5714] usb 3-1: config 0 interface 0 has no altsetting 0 [ 628.911307][ T5714] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 628.956679][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.038435][ T5714] usb 3-1: config 0 descriptor?? [ 629.542627][ T5714] ryos 0003:1E7D:31CE.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.2-1/input0 [ 629.793913][ T6486] usb 3-1: USB disconnect, device number 31 [ 629.960626][T10328] fido_id[10328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 631.402485][ T6489] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 631.675102][ T6489] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 631.732474][ T6489] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.780337][ T6489] usb 3-1: Product: syz [ 631.807071][ T6489] usb 3-1: Manufacturer: syz [ 631.820612][ T6489] usb 3-1: SerialNumber: syz [ 632.741181][ T6489] rtl8150 3-1:1.0: couldn't reset the device [ 632.775903][ T6489] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 633.030544][ T6489] usb 3-1: USB disconnect, device number 32 [ 634.942171][ T6489] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 635.106694][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.137308][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.150408][ T6489] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 635.160028][ T6489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.174373][ T6489] usb 6-1: config 0 descriptor?? [ 635.611712][ T6489] hid (null): global environment stack underflow [ 635.681681][ T6489] hid_parser_main: 508 callbacks suppressed [ 635.681701][ T6489] razer 0003:1532:010E.0013: unknown main item tag 0x1 [ 635.868201][ T6489] razer 0003:1532:010E.0013: global environment stack underflow [ 636.102744][ T6489] razer 0003:1532:010E.0013: item 0 0 1 11 parsing failed [ 636.171227][ T6489] razer 0003:1532:010E.0013: probe with driver razer failed with error -22 [ 636.306594][ T6489] usb 6-1: USB disconnect, device number 13 [ 636.818741][T10408] netlink: 'syz.5.935': attribute type 10 has an invalid length. [ 636.914216][T10408] team0: Device vxcan0 is of different type [ 638.242298][ T5677] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 638.392419][ T5677] usb 6-1: Using ep0 maxpacket: 16 [ 638.427132][ T5677] usb 6-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 638.480591][ T5677] usb 6-1: config 0 interface 0 has no altsetting 0 [ 638.498384][ T5677] usb 6-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 638.527007][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.592445][ T5677] usb 6-1: config 0 descriptor?? [ 639.108342][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.131789][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.149708][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.169511][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.220754][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.249679][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.275751][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.311217][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.337499][ T5677] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 639.396931][ T5677] microsoft 0003:045E:00F9.0014: hidraw0: USB HID v0.08 Device [HID 045e:00f9] on usb-dummy_hcd.5-1/input0 [ 639.448103][ T5677] microsoft 0003:045E:00F9.0014: no inputs found [ 639.470914][ T5677] microsoft 0003:045E:00F9.0014: could not initialize ff, continuing anyway [ 639.535159][ T5677] usb 6-1: USB disconnect, device number 14 [ 639.921806][T10424] fido_id[10424]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 645.552544][ T6489] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 645.632168][ T6492] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 645.765362][ T6489] usb 1-1: Using ep0 maxpacket: 8 [ 645.782438][ T6489] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 645.792897][ T6489] usb 1-1: config 0 has no interface number 0 [ 645.812575][ T6492] usb 4-1: Using ep0 maxpacket: 16 [ 645.819905][ T6492] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.834804][ T6489] usb 1-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 645.849081][ T6492] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 645.866642][ T6492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.881128][ T6489] usb 1-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.901236][ T6492] usb 4-1: config 0 descriptor?? [ 645.931594][ T6489] usb 1-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.963883][ T6489] usb 1-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 645.982673][ T6489] usb 1-1: config 0 interface 30 has no altsetting 0 [ 645.989475][ T6489] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 645.998827][ T6489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.021523][ T6489] usb 1-1: config 0 descriptor?? [ 646.415180][ T6492] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 646.513602][ T6489] uclogic 0003:256C:006E.0016: interface is invalid, ignoring [ 646.894597][ T5714] usb 4-1: USB disconnect, device number 30 [ 647.157217][ T5882] usb 1-1: USB disconnect, device number 25 [ 650.784613][ T6492] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 651.017138][ T6492] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 651.108841][ T6492] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 651.191211][ T6492] usb 3-1: config 1 has no interface number 0 [ 651.211906][ T6492] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.241254][ T6492] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 651.292444][ T5714] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 651.337161][ T6492] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.371021][ T6492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.389535][ T6492] usb 3-1: Product: syz [ 651.401365][ T6492] usb 3-1: Manufacturer: syz [ 651.432622][ T6492] usb 3-1: SerialNumber: syz [ 651.513456][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 651.912145][ T6489] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 652.082113][ T6489] usb 4-1: Using ep0 maxpacket: 32 [ 652.119973][ T6489] usb 4-1: config 0 has no interfaces? [ 652.159435][ T6489] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 652.223516][ T6489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.279244][ T6489] usb 4-1: Product: syz [ 652.306152][ T6489] usb 4-1: Manufacturer: syz [ 652.336121][ T6489] usb 4-1: SerialNumber: syz [ 652.389076][ T6492] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 652.405421][ T6489] usb 4-1: config 0 descriptor?? [ 652.434815][ T6492] cdc_ncm 3-1:1.1: bind() failure [ 652.583490][ T6492] usb 3-1: USB disconnect, device number 33 [ 653.684862][T10552] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[10552] [ 653.942410][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 653.962572][ T5714] usb 1-1: no configurations [ 653.998831][ T5714] usb 1-1: can't read configurations, error -22 [ 654.328873][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 654.361706][T10557] netlink: 80 bytes leftover after parsing attributes in process `syz.2.978'. [ 654.371668][T10557] netlink: 80 bytes leftover after parsing attributes in process `syz.2.978'. [ 654.960283][ T6492] usb 4-1: USB disconnect, device number 31 [ 656.116999][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.562055][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.991'. [ 658.579310][T10594] ipvlan0: entered allmulticast mode [ 658.584843][T10594] syz_tun: entered allmulticast mode [ 663.312561][ T6489] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 663.497761][ T6489] usb 1-1: config 2 has an invalid interface number: 97 but max is 0 [ 663.526929][ T6489] usb 1-1: config 2 has no interface number 0 [ 663.541036][ T6489] usb 1-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 663.571313][ T6489] usb 1-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64 [ 663.606392][ T6489] usb 1-1: config 2 interface 97 has no altsetting 0 [ 663.635924][ T6489] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 663.660135][ T6489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.683620][ T6489] usb 1-1: Product: syz [ 663.693762][ T6489] usb 1-1: Manufacturer: syz [ 663.709176][ T6489] usb 1-1: SerialNumber: syz [ 663.722831][T10648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 663.742249][T10648] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 664.188798][ T6489] usb-storage 1-1:2.97: USB Mass Storage device detected [ 664.267090][ T6489] usb-storage 1-1:2.97: Quirks match for vid 04e6 pid 000b: 4 [ 664.372439][ T6486] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 664.391764][ T6489] scsi host1: usb-storage 1-1:2.97 [ 664.542099][ T6486] usb 4-1: Using ep0 maxpacket: 16 [ 664.558822][ T6486] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.577337][ T6486] usb 4-1: config 0 has no interfaces? [ 664.587324][ T6486] usb 4-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 664.598835][ T6486] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 664.619107][ T6486] usb 4-1: Product: syz [ 664.634755][ T6486] usb 4-1: SerialNumber: syz [ 664.657315][ T6486] usb 4-1: config 0 descriptor?? [ 664.692372][ T6486] usb 1-1: USB disconnect, device number 28 [ 664.887945][ T5677] usb 4-1: USB disconnect, device number 32 [ 666.578499][T10695] loop5: detected capacity change from 0 to 7 [ 666.644604][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 666.706086][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.725827][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.735300][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 666.753677][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.762869][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 666.776697][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.785917][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 666.807820][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.817141][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 666.855418][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 666.864758][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 668.089568][T10711] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[10711] [ 669.382178][ T6489] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 669.542330][ T6489] usb 6-1: Using ep0 maxpacket: 32 [ 669.570711][ T6489] usb 6-1: config 0 has no interfaces? [ 669.619810][ T6489] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 669.649837][ T6489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.719250][ T6489] usb 6-1: Product: syz [ 669.753095][ T6489] usb 6-1: Manufacturer: syz [ 669.783267][ T6489] usb 6-1: SerialNumber: syz [ 669.839498][ T6489] usb 6-1: config 0 descriptor?? [ 670.583458][T10725] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[10725] [ 672.339509][ T5677] usb 6-1: USB disconnect, device number 15 [ 672.852704][ T5677] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 673.044260][ T5677] usb 6-1: Using ep0 maxpacket: 8 [ 673.110858][ T5677] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.140733][ T5677] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 673.150568][ T5677] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 673.185963][ T5677] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 673.205328][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.223850][ T5677] usb 6-1: Product: syz [ 673.228627][ T5677] usb 6-1: Manufacturer: syz [ 673.250572][ T5677] usb 6-1: SerialNumber: syz [ 674.168554][ T5677] usb 6-1: USB disconnect, device number 16 [ 674.472407][ T5714] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 674.632809][ T5714] usb 3-1: Using ep0 maxpacket: 8 [ 674.648984][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.698482][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 674.742380][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 674.815629][ T5714] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 674.854482][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 674.899882][ T5714] usb 3-1: Product: syz [ 674.924525][ T5714] usb 3-1: Manufacturer: syz [ 674.943148][ T5714] usb 3-1: SerialNumber: syz [ 674.975895][ T5714] usb 3-1: config 0 descriptor?? [ 675.198067][ T5714] rc_core: IR keymap rc-imon-rsc not found [ 675.218555][ T5714] Registered IR keymap rc-empty [ 675.239699][ T5714] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 675.289801][ T5714] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33 [ 675.640414][ T5714] usb 3-1: USB disconnect, device number 34 [ 676.496571][T10785] loop4: detected capacity change from 0 to 7 [ 676.514049][T10786] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[10786] [ 676.593425][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.602699][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.635258][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.644536][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.698802][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.708080][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.716897][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.726134][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.734505][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.743753][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.756525][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.765765][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.776017][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.785242][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.793696][T10785] ldm_validate_partition_table(): Disk read failed. [ 676.804669][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.813905][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.833091][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.842410][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.856040][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 676.865282][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 676.876482][T10785] Dev loop4: unable to read RDB block 0 [ 676.884238][T10785] loop4: unable to read partition table [ 676.903757][T10785] loop4: partition table beyond EOD, truncated [ 676.920831][T10785] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 677.382838][T10790] batman_adv: batadv0: Adding interface: dummy0 [ 677.448236][T10790] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.639165][T10790] batman_adv: batadv0: Interface activated: dummy0 [ 677.812183][ T5625] Bluetooth: hci5: command 0x0406 tx timeout [ 678.305459][T10799] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1058'. [ 678.352477][T10799] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1058'. [ 678.593179][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 685.632534][ T6486] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 685.798637][ T6486] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.820203][ T6486] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.830906][ T6486] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 685.857622][ T6486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.977338][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.983832][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.082506][ T6487] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 686.252932][ T6487] usb 4-1: Using ep0 maxpacket: 8 [ 686.265294][ T6487] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 686.304195][ T6487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 686.359170][ T6487] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 686.374122][ T6487] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.382850][ T6487] usb 4-1: Product: syz [ 686.387118][ T6487] usb 4-1: Manufacturer: syz [ 686.391785][ T6487] usb 4-1: SerialNumber: syz [ 686.404521][ T6487] usb 4-1: config 0 descriptor?? [ 686.420759][ T6487] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 686.717862][ T6486] hid-led 0003:27B8:01ED.0017: probe with driver hid-led failed with error -71 [ 686.757032][ T6486] usb 6-1: USB disconnect, device number 17 [ 687.379946][T10885] ptrace attach of "./syz-executor exec"[5637] was attempted by "./syz-executor exec"[10885] [ 688.484062][ T6489] usb 4-1: USB disconnect, device number 33 [ 689.657461][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1089'. [ 689.675260][T10901] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1089'. [ 689.708972][T10901] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1089'. [ 691.411097][T10922] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[10922] [ 691.496856][T10924] raw_sendmsg: syz.6.1096 forgot to set AF_INET. Fix it! [ 692.088970][T10912] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1092'. [ 692.129489][T10912] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1092'. [ 694.278763][T10956] ptrace attach of "./syz-executor exec"[8334] was attempted by "./syz-executor exec"[10956] [ 694.356927][T10954] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[10954] [ 695.242138][ T6487] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 695.393710][ T6487] usb 3-1: Using ep0 maxpacket: 32 [ 695.411915][ T6487] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 695.428210][ T6487] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 695.452131][ T6486] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 695.461242][ T6487] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 695.506909][ T6487] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 695.559135][ T6487] usb 3-1: config 0 interface 0 has no altsetting 0 [ 695.588148][ T6487] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 695.618495][ T6487] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 695.634138][ T6486] usb 1-1: Using ep0 maxpacket: 8 [ 695.647663][ T6486] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 695.661467][ T6487] usb 3-1: Product: syz [ 695.671574][ T6487] usb 3-1: Manufacturer: syz [ 695.685931][ T6487] usb 3-1: SerialNumber: syz [ 695.693245][ T6486] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 695.722608][ T6487] usb 3-1: config 0 descriptor?? [ 695.758797][ T6487] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 695.769799][ T6486] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 695.791206][ T6487] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 695.800642][ T6486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.824261][ T6486] usb 1-1: Product: syz [ 695.841821][ T6486] usb 1-1: Manufacturer: syz [ 695.860898][ T6486] usb 1-1: SerialNumber: syz [ 695.904422][ T6486] usb 1-1: config 0 descriptor?? [ 695.946229][ T6486] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 696.093058][ T6486] usb 3-1: USB disconnect, device number 35 [ 696.099047][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 696.149161][ T6486] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 696.189955][ T6487] usb 1-1: USB disconnect, device number 29 [ 697.283726][T10967] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[10967] [ 698.147755][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1113'. [ 698.311406][T10981] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1113'. [ 698.331869][T10981] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1113'. [ 707.302105][ T6487] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 707.494302][ T6487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.556457][ T6487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.612140][ T6487] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 707.624617][ T6487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.663746][ T6487] usb 3-1: config 0 descriptor?? [ 708.123532][ T6487] waltop 0003:172F:0501.0018: hidraw0: USB HID v10.00 Device [HID 172f:0501] on usb-dummy_hcd.2-1/input0 [ 708.338075][ T5677] usb 3-1: USB disconnect, device number 36 [ 708.427877][T11081] fido_id[11081]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:172F:0501.0018/report_descriptor': No such device [ 708.688509][T11089] loop5: detected capacity change from 0 to 4095 [ 708.766325][T11091] blk_print_req_error: 10 callbacks suppressed [ 708.766344][T11091] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 708.829407][T11091] I/O error, dev loop5, sector 1048 op 0x0:(READ) flags 0x84700 phys_seg 128 prio class 2 [ 708.842552][T11091] I/O error, dev loop5, sector 2096 op 0x0:(READ) flags 0x80700 phys_seg 58 prio class 2 [ 709.412410][ T5677] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 709.582278][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 709.615256][ T5677] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 709.644459][ T5677] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 709.678065][ T5677] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 709.699675][ T5677] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 709.714943][ T5677] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 709.760556][ T5677] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.835707][ T5677] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 709.874150][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.172976][ T5677] usb 3-1: usb_control_msg returned -32 [ 710.189666][ T5677] usbtmc 3-1:16.0: can't read capabilities [ 710.592594][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 710.678053][T11107] usbtmc 3-1:16.0: Unable to send data, error -71 [ 712.217024][ T5714] usb 3-1: USB disconnect, device number 37 [ 712.399976][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'. [ 712.444033][T11119] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1152'. [ 712.521809][T11119] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1152'. [ 713.576886][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 713.605452][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 714.752130][ T5714] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 714.952120][ T5714] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 714.975206][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.987620][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.997642][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 715.027588][ T5714] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 715.039111][ T5714] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 715.049782][ T5714] usb 1-1: Manufacturer: syz [ 715.103696][ T5714] usb 1-1: config 0 descriptor?? [ 715.624218][ T5714] hid_parser_main: 25 callbacks suppressed [ 715.624246][ T5714] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 715.675743][ T5714] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 716.007320][ T6489] usb 1-1: USB disconnect, device number 30 [ 716.296431][T11152] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[11152] [ 716.582939][T11159] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[11159] [ 717.634402][T11172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1169'. [ 719.641877][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1177'. [ 719.968665][T11200] loop5: detected capacity change from 0 to 7 [ 720.040025][T11200] Dev loop5: unable to read RDB block 7 [ 720.085977][T11200] loop5: unable to read partition table [ 720.127802][T11200] loop5: partition table beyond EOD, truncated [ 720.167632][T11200] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 721.806633][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1185'. [ 722.339713][T11222] ip6gre1: entered promiscuous mode [ 722.357432][T11222] ip6gre1: entered allmulticast mode [ 723.355970][ T5677] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 723.374718][T11234] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1190'. [ 723.419394][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1190'. [ 723.564175][ T6489] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 723.582817][ T5677] usb 3-1: Using ep0 maxpacket: 8 [ 723.602521][ T5677] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 723.668521][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 723.759544][ T5677] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 723.776192][ T5677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.789414][ T5677] usb 3-1: Product: syz [ 723.796400][ T5677] usb 3-1: Manufacturer: syz [ 723.799872][ T6489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.804689][ T5677] usb 3-1: SerialNumber: syz [ 723.861733][ T6489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.870150][ T5677] usb 3-1: config 0 descriptor?? [ 723.920093][ T5677] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 723.928649][ T6489] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 723.979262][ T6489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.026652][ T6489] usb 4-1: config 0 descriptor?? [ 724.142781][ T5677] usb 3-1: USB disconnect, device number 38 [ 724.385100][T11238] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1192'. [ 724.549897][ T6489] hid-steam 0003:28DE:1142.001A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 724.652588][ T6489] hid-steam 0003:28DE:1142.001A: Steam wireless receiver connected [ 724.855293][ T6489] hid-steam 0003:28DE:1142.001B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 724.914469][ T6489] usb 4-1: USB disconnect, device number 34 [ 725.048558][ T6489] hid-steam 0003:28DE:1142.001A: Steam wireless receiver disconnected [ 725.200004][T11248] fido_id[11248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 725.478121][T11263] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[11263] [ 727.647140][T11282] loop6: detected capacity change from 0 to 8 [ 727.719180][T11282] loop6: detected capacity change from 8 to 7 [ 727.785296][T11283] loop6: detected capacity change from 7 to 0 [ 727.800145][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 727.809395][ C1] buffer_io_error: 10 callbacks suppressed [ 727.809414][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.840657][T11282] ldm_validate_partition_table(): Disk read failed. [ 727.844525][ T9901] Buffer I/O error on dev loop6, logical block 0, async page read [ 727.853350][T11282] Dev loop6: unable to read RDB block 0 [ 727.949747][T11282] loop6: unable to read partition table [ 728.008693][T11282] loop6: partition table beyond EOD, truncated [ 728.070297][T11282] loop_reread_partitions: partition scan of loop6 (uG ܱ.:0 [ 728.070297][T11282] 咁 HID v0.00 Device [syz1] on syz0 [ 740.759008][ T6487] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.815674][ T6487] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.853923][ T6487] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 740.882922][ T6487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 740.895853][ T6487] usb 4-1: SerialNumber: syz [ 741.141485][ T6487] usb 4-1: 0:2 : does not exist [ 741.157326][T11413] ptrace attach of "./syz-executor exec"[8334] was attempted by "./syz-executor exec"[11413] [ 741.262180][ T6487] usb 4-1: USB disconnect, device number 36 [ 741.375674][ T9901] udevd[9901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.899843][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 743.392360][ T5677] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 743.533204][T11441] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[11441] [ 743.544571][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 743.607661][ T5677] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 743.640590][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.656673][ T5677] usb 4-1: Product: syz [ 743.663404][ T5677] usb 4-1: Manufacturer: syz [ 743.668269][ T5677] usb 4-1: SerialNumber: syz [ 743.678762][T11440] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1248'. [ 743.688184][T11440] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1248'. [ 743.730367][ T5677] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 743.926454][ T5714] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 744.525557][ T5677] usb 4-1: USB disconnect, device number 37 [ 745.015216][ T5714] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 745.075480][ T5714] ath9k_htc: Failed to initialize the device [ 745.110066][ T5677] usb 4-1: ath9k_htc: USB layer deinitialized [ 745.232443][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 745.422954][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 745.457513][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 745.473452][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 745.505331][ T24] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 745.526385][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.553660][ T24] usb 3-1: Product: syz [ 745.563483][ T24] usb 3-1: Manufacturer: syz [ 745.579990][ T24] usb 3-1: SerialNumber: syz [ 745.608899][ T24] usb 3-1: config 0 descriptor?? [ 745.637561][ T24] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 746.039790][ T6487] usb 3-1: USB disconnect, device number 39 [ 746.920379][T11466] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[11466] [ 747.414290][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.461266][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.370937][T11500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 750.430183][T11505] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1267'. [ 750.446414][T11505] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1267'. [ 752.437487][T11520] ptrace attach of "./syz-executor exec"[8334] was attempted by "./syz-executor exec"[11520] [ 754.865659][ T30] audit: type=1326 audit(1777519790.169:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.0.1279" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f01c code=0x7fc00000 [ 754.908203][T11551] fuse: root generation should be zero [ 757.472306][ T5714] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 757.652501][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 757.672485][ T5714] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 757.706745][ T5714] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 757.743879][ T5714] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 757.947697][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 757.952588][ T6489] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 757.988012][ T5714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 758.026433][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 758.076287][ T5714] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 758.092765][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.108963][ T5714] usb 3-1: config 0 descriptor?? [ 758.184773][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.333128][ T6489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.380341][ T5714] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 758.397325][ T6489] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 758.447486][ T6489] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.472969][ T5714] usb 3-1: USB disconnect, device number 40 [ 758.514910][ T5714] usblp0: removed [ 758.568381][ T6489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.654386][ T6489] usb 6-1: config 0 descriptor?? [ 758.902430][ T5714] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 759.062173][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 759.085944][ T5714] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 759.105566][ T5714] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 759.127301][ T5714] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 759.148651][ T6489] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 759.163853][ T5714] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 759.265123][ T5714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 759.296985][ T5714] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 759.313796][ T5714] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 759.324777][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.376321][ T6489] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 759.389245][ T5714] usb 3-1: config 0 descriptor?? [ 759.451181][ T6489] usb 6-1: USB disconnect, device number 20 [ 759.671680][T11597] fido_id[11597]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 759.697749][ T5714] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 759.965164][ T5714] usb 3-1: USB disconnect, device number 41 [ 760.007336][ T5714] usblp0: removed [ 761.272754][T11618] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[11618] [ 761.288435][ T6489] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 761.342115][ T5714] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 761.462085][ T6489] usb 6-1: Using ep0 maxpacket: 8 [ 761.475346][ T6489] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 761.498708][ T6489] usb 6-1: config 179 has no interface number 0 [ 761.537296][ T6489] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 761.597488][ T6489] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 761.612289][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 761.645637][ T6489] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 761.660380][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 761.688072][ T6489] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 761.707296][ T6489] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 761.728363][ T6489] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 761.744321][ T6489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.757597][ T5714] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.795611][ T5714] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 761.818501][T11612] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 761.855826][ T5714] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 761.907653][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.991709][ T5714] usb 1-1: config 0 descriptor?? [ 762.606081][ T5714] HID 045e:07da: Invalid code 65791 type 1 [ 762.937902][ T5714] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0020/input/input36 [ 762.964857][T11612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.075008][T11612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.141855][ T5714] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 763.244044][ T6487] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input37 [ 763.430628][ T5714] usb 1-1: USB disconnect, device number 32 [ 763.933325][ T24] usb 6-1: USB disconnect, device number 21 [ 763.933364][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 763.948532][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 764.228341][T11631] fido_id[11631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 766.643368][T11666] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1314'. [ 766.657403][T11666] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1314'. [ 767.552214][ T6487] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 767.752494][ T6487] usb 3-1: Using ep0 maxpacket: 16 [ 767.773318][ T6487] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.818286][ T6487] usb 3-1: config 0 interface 0 has no altsetting 0 [ 767.857325][ T6487] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 767.899166][ T6487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.958885][ T6487] usb 3-1: config 0 descriptor?? [ 768.921017][ T6487] nzxt-smart2 0003:1E71:2009.0021: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 769.211536][ T6487] usb 3-1: USB disconnect, device number 42 [ 769.488227][T11688] fido_id[11688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 770.453002][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 770.498325][T11700] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1324'. [ 770.510789][T11700] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1324'. [ 772.664200][ T29] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 772.704741][T11723] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1330'. [ 772.717161][T11723] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1330'. [ 772.932409][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 772.961751][ T29] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 772.984434][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 773.018435][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 773.061513][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 773.086774][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.104598][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 773.115716][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.162088][ T6487] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 773.323785][ T6487] usb 6-1: Using ep0 maxpacket: 8 [ 773.357872][ T6487] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 773.400249][ T6487] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 773.423912][ T6487] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 773.438924][ T29] usb 4-1: usb_control_msg returned -32 [ 773.456606][ T6487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.456654][ T29] usbtmc 4-1:16.0: can't read capabilities [ 773.495785][ T6487] usb 6-1: Product: syz [ 773.506275][ T6487] usb 6-1: Manufacturer: syz [ 773.531418][ T6487] usb 6-1: SerialNumber: syz [ 773.590370][ T6487] usb 6-1: config 0 descriptor?? [ 773.628189][ T6487] streamzap 6-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 773.831476][ T29] usb 6-1: USB disconnect, device number 22 [ 774.488879][ T6487] usb 4-1: USB disconnect, device number 38 [ 774.659952][T11737] syzkaller1: entered promiscuous mode [ 774.739915][T11737] syzkaller1: entered allmulticast mode [ 776.246131][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1340'. [ 777.392528][ T6491] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 777.616076][ T6491] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.661725][T11778] IPVS: set_ctl: invalid protocol: 46 172.30.1.4:20001 [ 777.671060][ T6491] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.715388][ T6491] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.728594][ T6491] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.773229][ T6491] usb 3-1: SerialNumber: syz [ 778.054403][ T6491] usb 3-1: 0:2 : does not exist [ 778.081615][ T6491] usb 3-1: unit 253 not found! [ 778.280810][ T6491] usb 3-1: USB disconnect, device number 43 [ 778.573750][ T9901] udevd[9901]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 778.640362][T11789] syzkaller0: entered promiscuous mode [ 778.873288][ T29] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 778.999899][T11795] ptrace attach of "./syz-executor exec"[9578] was attempted by "./syz-executor exec"[11795] [ 779.046771][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 779.088328][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 779.122102][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 779.141319][ T29] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 779.170844][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.197006][ T29] usb 4-1: Product: syz [ 779.208375][ T29] usb 4-1: Manufacturer: syz [ 779.218065][ T29] usb 4-1: SerialNumber: syz [ 779.247594][ T29] usb 4-1: config 0 descriptor?? [ 779.329468][ T29] streamzap 4-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 779.507811][ T29] usb 4-1: USB disconnect, device number 39 [ 782.712486][ T5714] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 782.965337][ T5714] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 783.086115][ T5714] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 783.157477][ T5714] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 783.278119][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.396498][T11830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 783.692861][ T5714] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 783.790797][T11840] ptrace attach of "./syz-executor exec"[8334] was attempted by "./syz-executor exec"[11840] [ 784.271790][ T5714] usb 1-1: USB disconnect, device number 33 [ 786.555270][T11872] ptrace attach of "./syz-executor exec"[5640] was attempted by "./syz-executor exec"[11872] [ 787.733733][T11880] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 790.367365][T11905] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[11905] [ 791.281919][ T30] audit: type=1326 audit(1777519826.579:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11912 comm="syz.6.1387" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc601c code=0x0 [ 791.706102][T11922] ptrace attach of "./syz-executor exec"[8334] was attempted by "./syz-executor exec"[11922] [ 791.985852][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 792.006330][T11923] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1386'. [ 792.020143][T11923] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1386'. [ 794.709331][T11942] bridge0: port 3(vlan2) entered blocking state [ 794.725699][T11942] bridge0: port 3(vlan2) entered disabled state [ 794.742350][T11942] vlan2: entered allmulticast mode [ 794.752549][T11942] geneve0: entered allmulticast mode [ 794.765105][T11942] vlan2: entered promiscuous mode [ 794.770407][T11942] geneve0: entered promiscuous mode [ 795.086833][T11948] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 795.355955][T11952] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 795.372394][T11952] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 795.519198][T11955] syzkaller1: entered promiscuous mode [ 795.529894][T11955] syzkaller1: entered allmulticast mode [ 795.540800][T11952] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 795.550823][T11952] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 795.765827][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1403'. [ 795.780918][T11959] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1403'. [ 795.798203][T11959] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1403'. [ 796.022116][ T6491] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 796.173272][T11970] ================================================================== [ 796.181481][T11970] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.190126][T11970] Write of size 360 at addr ffffc90007257ea0 by task vivid-000-vid-c/11970 [ 796.198722][T11970] [ 796.201076][T11970] CPU: 0 UID: 0 PID: 11970 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 796.201099][T11970] Tainted: [L]=SOFTLOCKUP [ 796.201104][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.201120][T11970] Call Trace: [ 796.201130][T11970] [ 796.201138][T11970] dump_stack_lvl+0xe8/0x150 [ 796.201158][T11970] print_address_description+0x55/0x1e0 [ 796.201174][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.201192][T11970] print_report+0x58/0x70 [ 796.201205][T11970] kasan_report+0x117/0x150 [ 796.201228][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.201247][T11970] kasan_check_range+0x264/0x2c0 [ 796.201269][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.201286][T11970] __asan_memcpy+0x40/0x70 [ 796.201304][T11970] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.201348][T11970] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 796.201389][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 796.201405][T11970] ? lockdep_hardirqs_on+0x7a/0x110 [ 796.201423][T11970] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 796.201448][T11970] ? vivid_thread_vid_cap+0x491/0x1190 [ 796.201477][T11970] vivid_thread_vid_cap+0x909/0x1190 [ 796.201497][T11970] ? __lock_acquire+0x6b5/0x2cf0 [ 796.201523][T11970] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 796.201548][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 796.201563][T11970] ? __kthread_parkme+0x7a/0x1f0 [ 796.201582][T11970] kthread+0x388/0x470 [ 796.201601][T11970] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 796.201621][T11970] ? __pfx_kthread+0x10/0x10 [ 796.201639][T11970] ret_from_fork+0x514/0xb70 [ 796.201655][T11970] ? __pfx_ret_from_fork+0x10/0x10 [ 796.201670][T11970] ? __switch_to+0xc79/0x1410 [ 796.201691][T11970] ? __pfx_kthread+0x10/0x10 [ 796.201710][T11970] ret_from_fork_asm+0x1a/0x30 [ 796.201733][T11970] [ 796.201738][T11970] [ 796.384087][T11970] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc90007257000 allocated at vb2_vmalloc_alloc+0xef/0x360 [ 796.397352][T11970] The buggy address belongs to the physical page: [ 796.403802][T11970] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51f15 [ 796.412583][T11970] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 796.419722][T11970] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 796.428331][T11970] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 796.436977][T11970] page dumped because: kasan: bad access detected [ 796.443502][T11970] page_owner tracks the page as allocated [ 796.449237][T11970] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 11969, tgid 11968 (syz.2.1406), ts 796168347350, free_ts 796168310430 [ 796.468621][T11970] post_alloc_hook+0x231/0x280 [ 796.473432][T11970] get_page_from_freelist+0x24ba/0x2540 [ 796.479010][T11970] __alloc_frozen_pages_noprof+0x18d/0x380 [ 796.484842][T11970] __alloc_pages_noprof+0x10/0x100 [ 796.489982][T11970] alloc_pages_bulk_noprof+0x5ff/0x7c0 [ 796.495472][T11970] alloc_pages_bulk_mempolicy_noprof+0x34e/0x1680 [ 796.501916][T11970] __vmalloc_node_range_noprof+0xad1/0x1750 [ 796.507845][T11970] vmalloc_user_noprof+0xad/0xe0 [ 796.512809][T11970] vb2_vmalloc_alloc+0xef/0x360 [ 796.517687][T11970] __vb2_queue_alloc+0x9c5/0x15a0 [ 796.522741][T11970] vb2_core_reqbufs+0xc1f/0x1410 [ 796.527708][T11970] __vb2_init_fileio+0x318/0xff0 [ 796.532681][T11970] vb2_core_poll+0x4c1/0x840 [ 796.537312][T11970] vb2_fop_poll+0x193/0x310 [ 796.541848][T11970] v4l2_poll+0x147/0x2c0 [ 796.546115][T11970] do_sys_poll+0x96c/0x10e0 [ 796.550641][T11970] page last free pid 11969 tgid 11968 stack trace: [ 796.557240][T11970] __free_frozen_pages+0xbc7/0xd30 [ 796.562402][T11970] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 796.567984][T11970] alloc_vmap_area+0xd47/0x1480 [ 796.572858][T11970] __get_vm_area_node+0x1f8/0x300 [ 796.577904][T11970] __vmalloc_node_range_noprof+0x36a/0x1750 [ 796.583825][T11970] vmalloc_user_noprof+0xad/0xe0 [ 796.588793][T11970] vb2_vmalloc_alloc+0xef/0x360 [ 796.593673][T11970] __vb2_queue_alloc+0x9c5/0x15a0 [ 796.598723][T11970] vb2_core_reqbufs+0xc1f/0x1410 [ 796.603691][T11970] __vb2_init_fileio+0x318/0xff0 [ 796.608669][T11970] vb2_core_poll+0x4c1/0x840 [ 796.613285][T11970] vb2_fop_poll+0x193/0x310 [ 796.617809][T11970] v4l2_poll+0x147/0x2c0 [ 796.622075][T11970] do_sys_poll+0x96c/0x10e0 [ 796.626606][T11970] __ia32_compat_sys_ppoll_time32+0x2aa/0x320 [ 796.632698][T11970] __do_fast_syscall_32+0x229/0x6e0 [ 796.637939][T11970] [ 796.640283][T11970] Memory state around the buggy address: [ 796.645933][T11970] ffffc90007257f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.654018][T11970] ffffc90007257f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 796.662183][T11970] >ffffc90007258000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 796.670256][T11970] ^ [ 796.674375][T11970] ffffc90007258080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 796.682455][T11970] ffffc90007258100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 796.690536][T11970] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 796.898371][ T6491] usb 6-1: Using ep0 maxpacket: 32 [ 796.906669][T11970] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 796.914065][T11970] CPU: 0 UID: 0 PID: 11970 Comm: vivid-000-vid-c Tainted: G L syzkaller #0 PREEMPT(full) [ 796.925489][T11970] Tainted: [L]=SOFTLOCKUP [ 796.929915][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 796.940015][T11970] Call Trace: [ 796.943343][T11970] [ 796.946317][T11970] vpanic+0x56c/0xa60 [ 796.950355][T11970] ? __pfx_vpanic+0x10/0x10 [ 796.954900][T11970] ? __pfx___schedule+0x10/0x10 [ 796.959794][T11970] panic+0xc5/0xd0 [ 796.963570][T11970] ? __pfx_panic+0x10/0x10 [ 796.968048][T11970] ? preempt_schedule_common+0x82/0xd0 [ 796.973539][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.979204][T11970] check_panic_on_warn+0x89/0xb0 [ 796.984175][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.989836][T11970] end_report+0x73/0x170 [ 796.994112][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 796.999764][T11970] kasan_report+0x128/0x150 [ 797.004296][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 797.009962][T11970] kasan_check_range+0x264/0x2c0 [ 797.015109][T11970] ? tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 797.020769][T11970] __asan_memcpy+0x40/0x70 [ 797.025211][T11970] tpg_fill_plane_buffer+0x1b9b/0x5ec0 [ 797.030730][T11970] vivid_thread_vid_cap_tick+0x1021/0x5fd0 [ 797.036719][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 797.042584][T11970] ? lockdep_hardirqs_on+0x7a/0x110 [ 797.047824][T11970] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 797.054193][T11970] ? vivid_thread_vid_cap+0x491/0x1190 [ 797.059696][T11970] vivid_thread_vid_cap+0x909/0x1190 [ 797.065012][T11970] ? __lock_acquire+0x6b5/0x2cf0 [ 797.069986][T11970] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 797.075829][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 797.081657][T11970] ? __kthread_parkme+0x7a/0x1f0 [ 797.086648][T11970] kthread+0x388/0x470 [ 797.090748][T11970] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 797.096504][T11970] ? __pfx_kthread+0x10/0x10 [ 797.101131][T11970] ret_from_fork+0x514/0xb70 [ 797.105775][T11970] ? __pfx_ret_from_fork+0x10/0x10 [ 797.110911][T11970] ? __switch_to+0xc79/0x1410 [ 797.115620][T11970] ? __pfx_kthread+0x10/0x10 [ 797.120238][T11970] ret_from_fork_asm+0x1a/0x30 [ 797.125037][T11970] [ 797.128981][T11970] Kernel Offset: disabled [ 797.133327][T11970] Rebooting in 86400 seconds..