last executing test programs: 16.714614206s ago: executing program 4 (id=245): syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000100010ac05470200000000000109024300010000000009040000010300000009210000000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000d0200000056789439bfa0fc5d4ad6406e7bdd84d3d9829040dc5ca3b8c1b9b340d16249b4a3f58c39b5f9c250d7eafbb5bafb815c712b2112b7c91864f78efe3e1f0f24cb0ad6a8fea4534d1e9d5d75ec2a7c25e05d398cc795c0622ea159eee6c05afc435e181053e7f497ce0b067da96172642fa65ffcd19a32717c28163ff092e9912e5edcc05c2fe1bd"], 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1200}], 0x39, 0xb77) 16.414792097s ago: executing program 4 (id=246): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) 15.515945937s ago: executing program 4 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000640)={0x0, 0x0, @d}, 0xfffffffffffffe14, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000080)='\x00', &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) lstat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r6, r7) fstat(r0, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000024c0)={0x5c, 0x7d, 0x2, {{0x0, 0x41, 0x7, 0x6, {0x2, 0x3, 0x3}, 0x88800000, 0x5, 0x4, 0x3, 0x0, '', 0x6, 'wlan0\x00', 0x0, '', 0x8, 'batadv0\x00'}, 0x6, 'wlan0\x00', r4, r7, r8}}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400000000000000588035045a", @ANYRES32=0x0, @ANYBLOB="51420000000000002800128008000100687372001c00028008000200", @ANYRES32=r1, @ANYBLOB="050007000100000008000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 10.863032827s ago: executing program 4 (id=259): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000011620142480b05101e8c047d4a00000001090212000100000005090401"], 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000780)='rxrpc\x00', 0x0, &(0x7f0000000900)="0000000000000040ff6943b80000000800000028f2000000008607000000ebb0", 0x20, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000460900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r3, &(0x7f0000000180)=""/133, 0x85) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000e8b000/0x2000)=nil, &(0x7f0000765000/0x4000)=nil, 0x2000, 0x2}) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 9.011017646s ago: executing program 1 (id=268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x7ccc94dfe8850f85) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xac}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000340)={0x2, 0x100, 0xfff}) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) set_mempolicy(0x0, &(0x7f0000000140)=0x80000001, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="6b12700915844b210000000000000800"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) 8.807219279s ago: executing program 2 (id=269): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x40) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3\x9f*sgrVen:De', 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$reject(0x13, r3, 0x0, 0x5, r3) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000003500)=ANY=[], 0x24b4}, 0x1, 0x0, 0x0, 0x4000}, 0x20008804) read$FUSE(r2, &(0x7f0000000940)={0x2020}, 0x2020) 8.744743457s ago: executing program 2 (id=270): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x456, 0x0}) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x1a, 0x2000051b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000, @value=r2}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@deltclass={0x4c, 0x29, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x6, 0x7}, {0x5, 0x8}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0xa0}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x4c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0x5cd93a8ab1dbab39, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x100, 0x0, 0x39a, 0x0, r2}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xd8, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e23, 0x9, @remote, 0x9}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}, 0x95}, @in6={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xed6}, @in6={0xa, 0x4e24, 0x1, @local, 0x3ff}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}]}, &(0x7f0000002100)=0x10) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfd}, 0x3}) fcntl$dupfd(r10, 0x406, r10) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, {0x0, 0x6}, {0x80000001, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}]}) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x108, 0x108, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@loopback, @loopback, 0xff000000, 0x0, 0xb, 0xd, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x4, 0x329, 0xfff8, 0x7, 0x3ff, 0x3, 'virt_wifi0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x5, {0x2}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="ae487b6600dc", @rand_addr=0x64010102, @rand_addr=0x64010100, 0x8, 0xffffffff}}}, {{@arp={@loopback, @broadcast, 0xff000000, 0xff000000, 0xe, 0xe, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x3ff, 0x3, 0x4, 0x8001, 0x4, 'ip6gre0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x24}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 7.722503441s ago: executing program 4 (id=271): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x8000006, 0x0, 0x10000, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x4, 0x0, 0xfffff037}, {0x87d9, 0x0, 0x2, 0x3b63}, {0x4, 0x0, 0xfe, 0x3}]}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000002c00128009000100626f6e64000000001c000280050001000600000005000c000200000008000b001ab0b9a50e2362e18eccc871df8114c1965020f735a7a33dcc9f0e3311e8a09509980a184542875c56e03b2be169e2", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x2501003) fcntl$getown(r3, 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x64300, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x2400c080) socket$nl_netfilter(0x10, 0x3, 0xc) 7.549419829s ago: executing program 3 (id=272): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'bond_slave_0\x00', 0x1000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f000000e400)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)="dee2466deffa71646f8f88f5cd28ede0358a00d06446891a7b8d67bab14680220e649976a60539e82a18719cd91d92f4888e2673ddb857918129aae46f6c94fac643bbf29b8abbd3fe3eb7ca8bb0461a8a991d56649e7a64", 0x58}, {&(0x7f0000000600)="8a734887f2e041784ad6d81ffa61a1e8f3bd3d95b15049eeb9cd33a021db4c71c5c651c3725aad32897e1f29d6f694f5d8c7286c7144b847f6ecf6a9215cc0abe1fdb00350abb1fca40fe471fca038ad54e13d767b88719ed2197c7ac779833e794be497c4dd1c13a95f7886eada76f04e1990cf0cd59fcb7883d703399a9b01322cc356a233039eaa4a49db75fba5e5e3135ddc3f9e71888dd4ff6180a9f44ca3968d8aefbaa69c2489aacb590783cbac34be83612865b6c0be9c0d9b7af9beb8c640f2815512", 0xc7}, {&(0x7f0000000700)="ef3081b4c68959c7950842f16e6476541f43837eb9e03b757752b1cf7436", 0x1e}, {&(0x7f0000000740)="6901019a90b1ae55d1cb28565516d904b9fb70ae7dcf88767eaa3a665e2e8c07d342b5693b155b85eb6a0a12fe9010f0e5f55a8d4a11d9423beaa97a5ff85a49770c333dcbe91e19b26bf218208e753624e4e8ad5776fa5ec2865acc9b4dbd14cc5fdddc0d10a3179fb7e19731bcd6c442ec946c76df4e6057c85196e90d015f25", 0x81}, {&(0x7f0000000800)="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", 0x1000}], 0x5, &(0x7f0000001900)=[@rights={{0x28, 0x1, 0x1, [r2, r4, r0, r2, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, r4, r3, r4, r1, r3, r0]}}], 0x60, 0x4000080}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001980)="a4697e826b38c879d2395da9dd45dc667b48a21a8a964a21586b0089254638fbb79916ead5f3ddf955d80f9a3a21845338ff885e8e1378e40d93b3a96960e6bb3344314a0fa4c834f4e21152f26b3820c34cf7dcf26e49852b1bc60321288fd1d2b5619128daaf00ff1c639c7dd255992ddc722bd7e0e2ab2b2592768a8d5232d690e6905150499f3dee9521268b1110d60cd1956a6e10712914a892e357c879383891369a43f8e88d6a7cb7164838cd8fa68d", 0xb3}, {&(0x7f0000001a40)="f6ea6cf50e1f74a86499c9728191c34de641c953d40ea8afdb1444de24e868aa3fdb3ba3f8fa4bee17489ff54160406021b5e0a3fa68ee7a4c24334b7553eeaa015faf3baec15b6cd32a4c90abcaaec1ea969d854c7a3df68aa9ea6f994a9bb60c3a4ff14c64cb865f30bf08cd60843ebe74eb0c8feeafd88c2d1a65682be597a60c90fa2b2f7d7e47dd5689bf5f0957bdd78a60cf4d705efd12d838b0b0d965ae8ce9dff99007b03631181920431095f640bff7098f68a2fcd968703e2b9d252e9464264765b35ba26da2176c", 0xcd}, {&(0x7f0000001b40)="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", 0xff}, {&(0x7f0000001dc0)="6c73c0818638aedb6c2a76fa023fe3a03fee9457db1a3518b05a0dac11563ca0113b769097ea769d363af257cf6753125da80e246c6a5c3803e8473b16ee80e9f6b7f05ddf7037739bbe385c0b1078f3f80f40f92b0309681cbbe38b3f8f9601aec4b0774ba344007baf40c5a87dfbfcd2c3c282e7a3b4e3dd02a1b5068ac55003f386", 0x83}, {&(0x7f0000001d00)="b275706f1a05260a2b114034de31811c95aec9de737312ed2ab326f773e85fc7a6a4c704e92aa481f3ca6b294399397a70d7d3f73296be53903650d549954c", 0x3f}], 0x5, &(0x7f00000042c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r4, r2]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r4]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}], 0xb8, 0x4000040}}], 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r6, 0x0) r7 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20001002, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xfffffbff, @initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, 0x1}, {0xa, 0x10, 0x0, @empty, 0x10}, r8, 0xa}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r9, r9, 0x0, 0x7fffffff) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) close(r1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x40c00) 6.573301087s ago: executing program 0 (id=273): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x73d18de, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e20000000000000000000000000000000000747261", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x4) 6.108093188s ago: executing program 0 (id=274): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) 5.192944884s ago: executing program 0 (id=275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x800000000001e8, 0x12) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800190043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0", 0x5e}, {&(0x7f0000000a40)="6aa7822c8384cd5d7f392e6401584a8e1f9dff49401b727ad059a69346d0e9776c49db4ace1db4eb57fcaf26fe93993ad767e78271ad8536010019d282acf027c429562e2f1c1c5cff95f2c087019468ea522ff85a65acd02c945a8470ebbd15dad2d8a644d049935e21d5635fe0abcbb1a9383279ef56aea37d", 0x7a}], 0x2}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173"], 0x5c}}, 0x0) (async) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d0000", 0x2b}], 0x1) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x4, 0x1c, 0x60, 0x0, 0xa, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}, @address_reply={0x12, 0x0, 0x0, 0xde}}}}}, 0x0) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) (rerun: 64) 4.744358932s ago: executing program 1 (id=276): sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="c870564d5fe5f52f4eaad117bc1d19c98b54b9e0d460b85cf369655c47e4ae59237d1bc3f1ec6916af387800a233dffc89df0e71c9d45d6f2d675399ac961866e894d531942306b9b11498eabd29da", 0x4f, 0x44804, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r1, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="f4f20f01f1b8010000000f01d9670f01ca66bad004b005ee0fc76826c4c285ba0f0f01cf66baa100b8fa000000ef0f35", 0x30}], 0x1, 0x29, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000380)=[{0x6, 0x10, 0xb, 0x7ffc0000}]}) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc1000004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3e) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) write$vhost_msg(r1, &(0x7f0000000a00)={0x1, {0x0, 0x0, 0x0, 0x1, 0x3}}, 0x48) preadv2(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000001380)=""/129, 0x1f}, {&(0x7f0000000180)=""/134, 0x86}], 0x3, 0x80000000, 0x0, 0x11) 4.508820922s ago: executing program 2 (id=277): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) unshare(0x22020600) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') setns(r1, 0x0) (async) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x167) (async) sync() (async) syz_usb_connect(0x5, 0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011001420c5c08fa9988894154010203010902580001020c40800904"], 0x0) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) timer_create(0x3129c2dfde5bdfd7, &(0x7f0000000080)={0x0, 0x26}, &(0x7f00000000c0)) (async) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="400f350000003507d363b57ae8559bb0a9ca334cc1b23378e152de600ed9609a1456134a48587880618610c9b368be4254735bb6e886"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.35560005s ago: executing program 3 (id=278): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x1a, 0x8, 0x8000400000000, 0x2004cb, 0xffffffffffffffff, 0xa1d, 0x6900, 0x4, 0x1, 0x3, 0x7, 0x0, 0x100000000], 0x30000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r4, &(0x7f0000000240)={0xffffffffffffffff, r0, 0xdf2}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='auxv\x00') readv(r7, &(0x7f00000017c0)=[{&(0x7f0000000000)=""/72, 0x48}, {0x0, 0x48}], 0x2) 4.171055325s ago: executing program 0 (id=279): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000037000000", 0xfe60) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xaa001) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r5, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r3], 0x44}}, 0x8000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0x5) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x4, 0x5, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000001180)={{0x3, 0x2, 0x80000000, 0x100, 'syz1\x00', 0xffffffff}, 0x0, [0x6ba74c59, 0x85, 0xf, 0xfff, 0x1000000009, 0x6, 0x7, 0xdb, 0x0, 0xf0, 0x3, 0x5, 0x8001, 0xfffffffffffffffb, 0x6, 0x2938, 0x100, 0xfffffffffffffff8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x5, 0x9025, 0x5, 0x5, 0x7, 0x100000001, 0x40, 0x9, 0x9, 0x100000005, 0x100, 0x9, 0xb, 0x1a7427cb, 0x7, 0x8, 0x7, 0xa, 0x2, 0xfffd, 0x8000000000000001, 0xffffffffffffff3d, 0x800, 0x5, 0xe4e, 0x3, 0x6, 0xa8, 0x659, 0xc2, 0xfff, 0x2, 0xffff, 0xffffffffffffff53, 0x0, 0x101, 0x7f, 0x100000000004, 0x7, 0x10, 0x2, 0x40d1c, 0x9, 0x9, 0x8001, 0x0, 0x1, 0x6, 0xf, 0x4, 0x4, 0x1, 0x9, 0x9, 0xfa0, 0x9, 0xffffffffffffbffd, 0x401, 0x8, 0x7fffffffffffffff, 0x101, 0xffffffffffffff2f, 0xe, 0x4, 0x4040000, 0xffffffff, 0x1, 0x7, 0x5, 0x1ff, 0x3, 0xfff7fffffffffb27, 0x100, 0x5, 0x7, 0x5, 0x3, 0xfffffdfffffffff9, 0x6, 0x8, 0x3, 0x4, 0x9, 0x800027ee, 0x0, 0x0, 0x0, 0x4, 0x101, 0x8, 0x6, 0x8000000000000001, 0x4, 0x3, 0x1, 0x4, 0x8001, 0x3, 0x9, 0x87, 0x80, 0x4, 0x2, 0x2c, 0xa, 0x6, 0x1, 0x8]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000c80)={{0x3, 0x1, 0x1, 0x3557, 'syz1\x00', 0x200005}, 0x1, [0x2, 0x84, 0x1c00000000000002, 0x7fffffffffffffff, 0x80000003, 0x3896, 0x5, 0x3, 0x8, 0xffffffff, 0xfffffffffffffff7, 0x9, 0x7, 0x80, 0x2fc2f8ae, 0x1, 0x101, 0xa70, 0x7fffffffffffffff, 0xa1, 0xfffffffffffffff8, 0x40, 0x2, 0x7, 0x10, 0x9, 0x8, 0x2, 0x6, 0x6, 0x6, 0x5, 0x2, 0x101, 0xffff, 0x144be44d, 0xc3b, 0x400000000003, 0x800000, 0x12, 0x2, 0x8, 0xbb9, 0x2, 0x8, 0x9, 0xb1e, 0x8, 0xf, 0x651, 0x8, 0x8000, 0xc, 0xffffffffffffffff, 0x4, 0x0, 0x400, 0x1, 0x5, 0x80000000, 0x5, 0x81, 0x5, 0x1, 0x6, 0xb, 0x4, 0x5af0512f, 0x8001, 0x5, 0xfffd, 0x8, 0x1, 0x100000001, 0x81, 0x3, 0x1, 0x800, 0xf5, 0x7, 0x1, 0x401, 0xf, 0x4, 0x2c, 0x5, 0x8, 0x2, 0x3, 0x5, 0x80000000, 0xed, 0x9, 0x7, 0x3, 0x7, 0x500000000000000, 0x100, 0xfffffffffffffffb, 0x6, 0xf, 0xf95, 0x4, 0x4, 0x8, 0x61, 0x1, 0xe, 0x8, 0x1, 0x2, 0x0, 0x400000000, 0x13ff, 0xa, 0xd3, 0x80, 0x6, 0x1000, 0x401, 0xe51b, 0x9, 0x7, 0x3, 0x9, 0x5, 0x9, 0x1ff]}) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000380)={0x0, 0x99, 0x8e, 0xfffffffd, 0x1, 0x1, 0x7}) 4.05634881s ago: executing program 3 (id=280): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x1412, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x40d1}, 0x20040841) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000300)={0x5, 0x7}) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000000c0)={&(0x7f00000005c0)=[{0x8, 0x0, 0x0, 0x0}, {0x0, 0x2011, 0x0, 0x0}], 0x2}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f060101"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 3.984141615s ago: executing program 2 (id=281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) getpid() sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x63682, 0x0) fallocate(r5, 0x0, 0x200, 0x1100000800000004) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x40400, 0x8) fcntl$notify(r6, 0x402, 0x8000003b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r7 = accept4$alg(r1, 0x0, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f00000001c0)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 3.746932316s ago: executing program 0 (id=282): ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) (async) ioctl$FICLONE(r0, 0x40049409, r0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) (async) ioctl$RTC_UIE_ON(r1, 0x7003) close(r1) (async) close(r1) r2 = socket$inet(0x2, 0xa, 0x8) getsockname$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) (async) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r5, 0x0, 0x0, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) 3.746598732s ago: executing program 1 (id=283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="6569d19e00c20200"], 0xea) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x3, 0x1, 0x40, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000980)=[@request_death={0x400c630e, 0x3}, @free_buffer], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)={0x24, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}]}, 0x24}}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x41, 0x70, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x7, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x100, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xf8, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x81, 0x2, 0x3}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x4, 0x7, 0x0, 0xff, 0x4}, 0xf, &(0x7f0000000180)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8, 0x9, 0x200}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2809}}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000240)={0x2, r5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000006700000008000300", @ANYBLOB], 0x3c}}, 0x880) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000100)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd2f, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x850}, 0x20000000) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.482486463s ago: executing program 4 (id=284): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x8000006, 0x0, 0x10000, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x6, 0x22, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x4, 0x0, 0xfffff037}, {0x87d9, 0x0, 0x2, 0x3b63}, {0x4, 0x0, 0xfe, 0x3}]}, 0x10) r5 = socket$inet6(0xa, 0x5, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000002c00128009000100626f6e64000000001c000280050001000600000005000c000200000008000b001ab0b9a50e2362e18eccc871df8114c1965020f735a7a33dcc9f0e3311e8a09509980a184542875c56e03b2be169e2", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x2501003) fcntl$getown(r3, 0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x64300, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x40}}, 0x2400c080) socket$nl_netfilter(0x10, 0x3, 0xc) 2.538121373s ago: executing program 2 (id=285): socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) 2.104079575s ago: executing program 0 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x103702, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x194}, 0x1, 0x0, 0x0, 0x4000000}, 0x7ccc94dfe8850f85) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}}, 0xac}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r5, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000340)={0x2, 0x100, 0xfff}) r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x6a) set_mempolicy(0x0, &(0x7f0000000140)=0x80000001, 0x6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="6b12700915844b210000000000000800"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.010248751s ago: executing program 3 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x0, 0x456, 0x0}) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1, 0x1a, 0x2000051b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000, @value=r2}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@deltclass={0x4c, 0x29, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x6, 0x7}, {0x5, 0x8}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0xa0}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x4c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {}, {0x5cd93a8ab1dbab39, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x100, 0x0, 0x39a, 0x0, r2}) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r9, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000380)={0x3, 'erspan0\x00', {0xfd}, 0x3}) fcntl$dupfd(r10, 0x406, r10) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x2, 0x0, 0x800}, {0x0, 0x6}, {0x80000001, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}]}) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x108, 0x108, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000340), {[{{@arp={@loopback, @loopback, 0xff000000, 0x0, 0xb, 0xd, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x4, 0x329, 0xfff8, 0x7, 0x3ff, 0x3, 'virt_wifi0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x5, {0x2}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="ae487b6600dc", @rand_addr=0x64010102, @rand_addr=0x64010100, 0x8, 0xffffffff}}}, {{@arp={@loopback, @broadcast, 0xff000000, 0xff000000, 0xe, 0xe, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x0, 0x3ff, 0x3, 0x4, 0x8001, 0x4, 'ip6gre0\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x24}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.539931184s ago: executing program 2 (id=288): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x20000, 0x1, 0x8e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x184, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x134, 0x11, [{@in=@multicast1, @in=@local, @in6=@private2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x33, 0x4, 0x0, 0x34ff, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x8}, {@in=@private=0xa010102, @in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}, {@in=@loopback, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x33, 0x4, 0x0, 0x3503, 0xa, 0x2}]}]}, 0x184}}, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x68) landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r8, &(0x7f00000001c0)='./file0\x00', r8, &(0x7f0000000200)='.\x02\x00', 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r8, &(0x7f0000000000)='./file0\x00', 0x2) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r3, 0x0, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) fcntl$lock(r9, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0xb}) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0xfffffffffffffffc) 1.461056974s ago: executing program 3 (id=289): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000000780)={@void, @void, @mpls={[{0x62c}, {0x2}, {0x0, 0x0, 0x1}, {0x7}], @ipv6=@dccp_packet={0x3, 0x6, "bb824d", 0x10, 0x21, 0x0, @mcast2, @local, {[], {{0x4e24, 0x4e23, 0x4, 0x1, 0xf, 0x0, 0x0, 0x6, 0x7, "0ea6ae", 0xf3, "0c5db1"}}}}}}, 0x48) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 1.132450119s ago: executing program 3 (id=290): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) pselect6(0x40, &(0x7f0000000080)={0xc, 0x4, 0x401, 0x5, 0x6, 0x80081, 0x3, 0x400}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r4, 0x7}, 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000068a00800000000004000000cb2004000001000095"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xfe5, &(0x7f0000001600)=""/4069, 0x40f00, 0x41}, 0x94) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfb61cb0106df6c98}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x411, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0xfffd, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 635.92144ms ago: executing program 1 (id=291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x9e645000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) (async) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) (async) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) (async, rerun: 64) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) (rerun: 64) 286.784893ms ago: executing program 1 (id=292): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020) r1 = syz_open_dev$loop(&(0x7f0000002280), 0xffff, 0x121ac3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900000000000000000000000000000000000000000000000005", [0x100000000, 0x8000000000000000]}}) 0s ago: executing program 1 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a3100000000050001000700000008000940000000058800088084000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xfff, 0x80000, 0xffffffffffffffff}) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$NBD_PRINT_DEBUG(r2, 0xab06) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x5) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000039e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) close(r4) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000180)={{0x12, 0x1, 0xd6830047d4f62af7, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x3, 0x40, 0xb, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "e1dd3b91"}, {0x5, 0x24, 0x0, 0x900}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7f, 0x25ac, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0xe, 0x24, 0x7, 0xae, 0x9, [0x8, 0xf13d, 0x400, 0x4a7f]}, @mbim_extended={0x8, 0x24, 0x1c, 0xa, 0x10}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0xe0, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x7f, 0xb}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x53, 0x3}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x5, 0x3, 0x5, 0x8, 0x1}, 0x55, &(0x7f0000000300)={0x5, 0xf, 0x55, 0x5, [@generic={0x34, 0x10, 0x1, "178376d4e60d0333c793d58896bc937cd43c1489508ffe5abaa08e657caec319e52ae5909b7e96d98f679b650f04a106d4"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x81, 0x83, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x2, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xa, 0x5}]}, 0x5, [{0x4, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x861}}]}) kernel console output (not intermixed with test programs): lave bond_slave_0): Enslaving as an active interface with an up link [ 79.373129][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.381181][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.389000][ T5640] bridge_slave_0: entered allmulticast mode [ 79.396448][ T5640] bridge_slave_0: entered promiscuous mode [ 79.403801][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.411321][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.418999][ T5642] bridge_slave_0: entered allmulticast mode [ 79.426520][ T5642] bridge_slave_0: entered promiscuous mode [ 79.443998][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.479875][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.487091][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.494452][ T5640] bridge_slave_1: entered allmulticast mode [ 79.502118][ T5640] bridge_slave_1: entered promiscuous mode [ 79.509348][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.517329][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.524856][ T5642] bridge_slave_1: entered allmulticast mode [ 79.533036][ T5642] bridge_slave_1: entered promiscuous mode [ 79.542752][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.592122][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.603536][ T5643] team0: Port device team_slave_0 added [ 79.609706][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.617959][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.625296][ T5644] bridge_slave_0: entered allmulticast mode [ 79.633053][ T5644] bridge_slave_0: entered promiscuous mode [ 79.671514][ T5643] team0: Port device team_slave_1 added [ 79.678059][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.685327][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.692736][ T5644] bridge_slave_1: entered allmulticast mode [ 79.699973][ T5644] bridge_slave_1: entered promiscuous mode [ 79.709882][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.724675][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.764655][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.788653][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.801875][ T5641] team0: Port device team_slave_0 added [ 79.848365][ T5641] team0: Port device team_slave_1 added [ 79.855218][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.862345][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.888995][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.905040][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.916972][ T5640] team0: Port device team_slave_0 added [ 79.942390][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.949775][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.976821][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.990739][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.013905][ T5640] team0: Port device team_slave_1 added [ 80.021540][ T5642] team0: Port device team_slave_0 added [ 80.063958][ T5642] team0: Port device team_slave_1 added [ 80.070315][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.077506][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.104409][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.127311][ T5644] team0: Port device team_slave_0 added [ 80.137369][ T5632] Bluetooth: hci3: command tx timeout [ 80.137374][ T5633] Bluetooth: hci0: command tx timeout [ 80.158546][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.165719][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.194365][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.215485][ T5644] team0: Port device team_slave_1 added [ 80.221655][ T5633] Bluetooth: hci1: command tx timeout [ 80.221662][ T5638] Bluetooth: hci2: command tx timeout [ 80.233991][ T5632] Bluetooth: hci4: command tx timeout [ 80.236417][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.247162][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.273669][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.307486][ T5643] hsr_slave_0: entered promiscuous mode [ 80.314549][ T5643] hsr_slave_1: entered promiscuous mode [ 80.331494][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.338640][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.365756][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.378097][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.385256][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.412129][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.424673][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.432989][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.460694][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.473315][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.480925][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.507563][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.536455][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.543988][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.571485][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.642061][ T5641] hsr_slave_0: entered promiscuous mode [ 80.648695][ T5641] hsr_slave_1: entered promiscuous mode [ 80.654944][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 80.661172][ T5641] Cannot create hsr debugfs directory [ 80.748007][ T5640] hsr_slave_0: entered promiscuous mode [ 80.754659][ T5640] hsr_slave_1: entered promiscuous mode [ 80.761214][ T5640] debugfs: 'hsr0' already exists in 'hsr' [ 80.767226][ T5640] Cannot create hsr debugfs directory [ 80.779796][ T5642] hsr_slave_0: entered promiscuous mode [ 80.786515][ T5642] hsr_slave_1: entered promiscuous mode [ 80.792909][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 80.799170][ T5642] Cannot create hsr debugfs directory [ 80.856885][ T5644] hsr_slave_0: entered promiscuous mode [ 80.863183][ T5644] hsr_slave_1: entered promiscuous mode [ 80.869666][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 80.875653][ T5644] Cannot create hsr debugfs directory [ 81.341288][ T5643] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.358528][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.367299][ T5643] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.377507][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.385349][ T5643] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.395508][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.404430][ T5643] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.414531][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.495401][ T5642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.505847][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.514043][ T5642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.523992][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.533583][ T5642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.543990][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.552507][ T5642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.562465][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.647814][ T5641] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.658677][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.676038][ T5641] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.689300][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.697534][ T5641] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.709798][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.717735][ T5641] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.729477][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.831594][ T5640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.842788][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.851313][ T5640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.862669][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.880069][ T5640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.892405][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.901274][ T5640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.911627][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.950225][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.028764][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.067022][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.077539][ T5644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.088160][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.098382][ T5644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.109313][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.118430][ T5644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.128845][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.138668][ T5644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.149094][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.160283][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.168109][ T3302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.190010][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.197150][ T3302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.216904][ T5633] Bluetooth: hci3: command tx timeout [ 82.222876][ T5632] Bluetooth: hci0: command tx timeout [ 82.275754][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.296650][ T5633] Bluetooth: hci4: command tx timeout [ 82.296802][ T5638] Bluetooth: hci2: command tx timeout [ 82.302907][ T5632] Bluetooth: hci1: command tx timeout [ 82.343301][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.350576][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.360543][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.368061][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.455117][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.523370][ T5642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.544574][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.563051][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.583488][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.590611][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.613091][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.633515][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.640878][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.672901][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.693240][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.714255][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.721751][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.749337][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.756908][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.781785][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.823656][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.847521][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.854911][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.894109][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.901272][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.911377][ T5643] veth0_vlan: entered promiscuous mode [ 82.983339][ T5643] veth1_vlan: entered promiscuous mode [ 83.045452][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.085853][ T5642] veth0_vlan: entered promiscuous mode [ 83.124325][ T5642] veth1_vlan: entered promiscuous mode [ 83.139281][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.182472][ T5643] veth0_macvtap: entered promiscuous mode [ 83.213904][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.223720][ T5641] veth0_vlan: entered promiscuous mode [ 83.237533][ T5643] veth1_macvtap: entered promiscuous mode [ 83.270160][ T5642] veth0_macvtap: entered promiscuous mode [ 83.280672][ T5641] veth1_vlan: entered promiscuous mode [ 83.323362][ T5642] veth1_macvtap: entered promiscuous mode [ 83.335335][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.351441][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.371676][ T5640] veth0_vlan: entered promiscuous mode [ 83.394160][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.404785][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.429297][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.438934][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.461568][ T5640] veth1_vlan: entered promiscuous mode [ 83.476679][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.512467][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.523421][ T5644] veth0_vlan: entered promiscuous mode [ 83.532218][ T5641] veth0_macvtap: entered promiscuous mode [ 83.558577][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.568291][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.582370][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.612507][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624247][ T5644] veth1_vlan: entered promiscuous mode [ 83.635001][ T5641] veth1_macvtap: entered promiscuous mode [ 83.682230][ T5640] veth0_macvtap: entered promiscuous mode [ 83.720353][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.732341][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.747870][ T5640] veth1_macvtap: entered promiscuous mode [ 83.790497][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.801369][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.823488][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.824347][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.836572][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.850587][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.859788][ T5644] veth0_macvtap: entered promiscuous mode [ 83.906973][ T5644] veth1_macvtap: entered promiscuous mode [ 83.929275][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.942351][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.000583][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.001493][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.010329][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.054925][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.080704][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.089301][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.097489][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.119748][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.130924][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.135521][ T5643] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.178699][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.190031][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.207678][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.223232][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.240120][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.265117][ T1054] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.298137][ T5633] Bluetooth: hci3: command tx timeout [ 84.303706][ T5632] Bluetooth: hci0: command tx timeout [ 84.315044][ T1054] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.355256][ T1054] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.367150][ T1054] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.376868][ T5632] Bluetooth: hci2: command tx timeout [ 84.383303][ T5633] Bluetooth: hci1: command tx timeout [ 84.384799][ T5638] Bluetooth: hci4: command tx timeout [ 84.462789][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.478174][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.539820][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.558148][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.686701][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.695422][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.833377][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.850427][ T5728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.083913][ T47] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.101825][ T5736] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.142577][ T47] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.196481][ T47] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.222501][ T47] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.263218][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.287786][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.410478][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.455830][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.625537][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.662665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.885910][ T5745] bond1: entered promiscuous mode [ 85.899438][ T5745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.379751][ T5638] Bluetooth: hci0: command tx timeout [ 86.385821][ T5632] Bluetooth: hci3: command tx timeout [ 86.456621][ T5638] Bluetooth: hci4: command tx timeout [ 86.462653][ T5632] Bluetooth: hci2: command tx timeout [ 86.467065][ T5633] Bluetooth: hci1: command tx timeout [ 86.729586][ T5769] Zero length message leads to an empty skb [ 86.874185][ T5760] bond1: entered promiscuous mode [ 86.906936][ T5760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.498455][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 87.727955][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 87.775325][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 87.810585][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.849944][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.905347][ T29] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.978924][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.059314][ T29] usb 5-1: config 0 descriptor?? [ 88.571982][ T5779] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.611074][ T5779] process 'syz.1.9' launched './file0' with NULL argv: empty string added [ 88.625213][ T29] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 89.319976][ T5785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8'. [ 89.369681][ T5785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8'. [ 89.424412][ T5785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8'. [ 90.259589][ T5790] loop2: detected capacity change from 0 to 7 [ 90.307219][ T5790] Dev loop2: unable to read RDB block 7 [ 90.329296][ T5790] loop2: AHDI p1 p2 p3 [ 90.345411][ T5790] loop2: partition table partially beyond EOD, truncated [ 90.400639][ T5790] loop2: p1 start 1818582900 is beyond EOD, truncated [ 90.424124][ T5790] loop2: p3 start 335544320 is beyond EOD, truncated [ 90.451621][ T5359] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 90.676261][ T5703] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.846206][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 90.866689][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.899916][ T5703] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.925886][ T5703] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 90.956141][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.001555][ T5703] usb 3-1: config 0 descriptor?? [ 91.351681][ T29] usb 5-1: USB disconnect, device number 2 [ 91.393374][ T5812] netlink: 164 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.478060][ T5703] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 91.537348][ T5703] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 91.628311][ T5703] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 91.741453][ T5703] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 91.839149][ T5703] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 91.858040][ T5703] savu 0003:1E7D:2D5A.0002: unbalanced collection at end of report description [ 91.914468][ T5792] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11'. [ 91.934530][ T5703] savu 0003:1E7D:2D5A.0002: parse failed [ 91.934674][ T5816] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 91.942362][ T5703] savu 0003:1E7D:2D5A.0002: probe with driver savu failed with error -22 [ 92.006399][ T5816] syzkaller1: linktype set to 769 [ 92.028152][ T995] cfg80211: failed to load regulatory.db [ 93.185411][ T5816] syz.0.17 (5816): drop_caches: 2 [ 93.524237][ T5823] netlink: 136 bytes leftover after parsing attributes in process `syz.0.19'. [ 93.583296][ T5826] binder: 5822:5826 ioctl d000941e 200000000c40 returned -22 [ 93.602113][ T5823] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 93.698596][ T29] usb 3-1: USB disconnect, device number 2 [ 93.730933][ T5826] binder: 5822:5826 ioctl c4089434 200000001c40 returned -22 [ 94.016179][ T5703] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.256213][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 94.293746][ T5703] usb 2-1: config 0 has no interfaces? [ 94.343080][ T5696] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.431754][ T5703] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 94.454892][ T5703] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 94.489452][ T5703] usb 2-1: Manufacturer: syz [ 94.592806][ T5703] usb 2-1: config 0 descriptor?? [ 94.601254][ T5696] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.658905][ T5696] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.692351][ T5823] syz.0.19 (5823): drop_caches: 2 [ 94.751849][ T5696] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.781551][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 94.823875][ T5696] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 94.883789][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.930999][ T5831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 95.337082][ T5703] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.376710][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.460526][ T5854] fuseblk: Bad value for 'max_read' [ 95.469986][ T5854] syzkaller0: entered promiscuous mode [ 95.477842][ T5854] syzkaller0: entered allmulticast mode [ 95.510235][ T5703] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 95.533696][ T5703] usb 5-1: config 0 has no interface number 0 [ 95.558402][ T5703] usb 5-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 95.577974][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 95.589873][ T5703] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 120, changing to 7 [ 95.607183][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.618638][ T5703] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 8192, setting to 1024 [ 95.641690][ T5703] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 95.661642][ T9] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 95.677239][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.685752][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.703439][ T9] usb 4-1: Product: syz [ 95.710619][ T5703] usb 5-1: config 0 descriptor?? [ 95.721090][ T9] usb 4-1: Manufacturer: syz [ 95.735439][ T9] usb 4-1: SerialNumber: syz [ 95.757567][ T5696] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 95.781929][ T5696] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 95.921586][ T5696] usb 3-1: USB disconnect, device number 3 [ 95.927765][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 95.947456][ T5843] netlink: 'syz.4.23': attribute type 2 has an invalid length. [ 95.994381][ T5845] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 96.028801][ T5703] usb 5-1: string descriptor 0 read error: -71 [ 96.045990][ T5703] keyspan 5-1:0.168: Keyspan 2 port adapter converter detected [ 96.064622][ T5703] keyspan 5-1:0.168: unsupported endpoint type 1 [ 96.089453][ T5703] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 1 [ 96.112845][ T5703] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 84 [ 96.129910][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 96.139091][ T5703] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 2 [ 96.150606][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 96.169331][ T5703] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 96.210275][ T5703] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 88 [ 96.258405][ T5703] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 6 [ 96.293006][ T5703] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 96.350724][ T5703] usb 5-1: USB disconnect, device number 3 [ 96.386903][ T5696] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.401725][ T5703] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 96.421619][ T9] usb 4-1: USB disconnect, device number 2 [ 96.471678][ T5703] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 96.510076][ T5703] keyspan 5-1:0.168: device disconnected [ 96.554907][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.589471][ T5696] usb 3-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 96.610139][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.665884][ T5696] usb 3-1: config 0 descriptor?? [ 96.703622][ T5696] usb-storage 3-1:0.0: USB Mass Storage device detected [ 96.920259][ T5853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.957421][ T5853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.981770][ T29] usb 2-1: USB disconnect, device number 2 [ 97.015895][ T5696] usb 3-1: USB disconnect, device number 4 [ 97.186631][ T5868] random: crng reseeded on system resumption [ 97.451024][ T30] audit: type=1326 audit(1778520705.771:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.484915][ T30] audit: type=1326 audit(1778520705.811:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.516424][ T29] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 97.525405][ T30] audit: type=1326 audit(1778520705.811:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.555461][ T30] audit: type=1326 audit(1778520705.811:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.645828][ T30] audit: type=1326 audit(1778520705.811:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.675495][ T30] audit: type=1326 audit(1778520705.841:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.701801][ T30] audit: type=1326 audit(1778520705.841:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.731177][ T30] audit: type=1326 audit(1778520705.881:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5874 comm="syz.4.31" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19899cdd9 code=0x7ffc0000 [ 97.731305][ T29] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 97.893674][ T29] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.948213][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.964403][ T29] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 98.026443][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.086852][ T29] usb 2-1: config 0 descriptor?? [ 98.519671][ T29] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 98.545797][ T29] hid-steam 0003:28DE:1102.0003: unknown main item tag 0x0 [ 98.558690][ T29] hid-steam 0003:28DE:1102.0003: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 98.628278][ T29] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' connected [ 98.695206][ T29] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0003/input/input7 [ 98.717934][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.799385][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.884727][ T5870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.945672][ T5870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.093329][ T29] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 99.178822][ T29] hid-steam 0003:28DE:1102.0004: unknown main item tag 0x0 [ 99.298408][ T29] hid-steam 0003:28DE:1102.0004: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 99.604415][ T29] usb 2-1: USB disconnect, device number 3 [ 99.812072][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.872957][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.923660][ T29] hid-steam 0003:28DE:1102.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 100.026215][ T5696] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 100.186304][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.257684][ T5696] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 100.268851][ T5696] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 100.306186][ T5696] usb 3-1: config 220 has no interface number 2 [ 100.322226][ T5696] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 100.357777][ T5696] usb 3-1: config 220 interface 0 has no altsetting 0 [ 100.366805][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 100.384115][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 100.397229][ T5696] usb 3-1: config 220 interface 76 has no altsetting 0 [ 100.412726][ T5696] usb 3-1: config 220 interface 1 has no altsetting 0 [ 100.427115][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.440326][ T5696] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 100.459847][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 100.482309][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.499041][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.509840][ T5696] usb 3-1: Product: syz [ 100.519660][ T5696] usb 3-1: Manufacturer: syz [ 100.531190][ T9] usb 4-1: config 0 descriptor?? [ 100.539565][ T5696] usb 3-1: SerialNumber: syz [ 100.777937][ T5703] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.801048][ T5696] usb 3-1: selecting invalid altsetting 0 [ 100.821100][ T5696] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 100.834021][ T5696] uvcvideo 3-1:220.0: No valid video chain found. [ 100.855832][ T5696] usb 3-1: selecting invalid altsetting 0 [ 100.863188][ T5696] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 100.881319][ T5696] usb 3-1: USB disconnect, device number 5 [ 100.954906][ T5908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.965163][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 100.974818][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.986494][ T5908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.998178][ T5703] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 101.012833][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.032116][ T5703] usb 1-1: config 0 descriptor?? [ 101.387750][ T9] corsair-cpro 0003:1B1C:0C10.0005: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 101.458688][ T5703] lenovo 0003:17EF:60EE.0006: unknown main item tag 0x0 [ 101.475176][ T5703] lenovo 0003:17EF:60EE.0006: unknown main item tag 0x0 [ 101.484329][ T5703] lenovo 0003:17EF:60EE.0006: unknown main item tag 0x0 [ 101.492094][ T5703] lenovo 0003:17EF:60EE.0006: unknown main item tag 0x0 [ 101.503776][ T5703] lenovo 0003:17EF:60EE.0006: unknown main item tag 0x0 [ 101.512032][ T5703] lenovo 0003:17EF:60EE.0006: unknown main item tag 0x0 [ 101.538046][ T5703] lenovo 0003:17EF:60EE.0006: hidraw1: USB HID v7f.fd Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 101.612930][ T9] corsair-cpro 0003:1B1C:0C10.0005: probe with driver corsair-cpro failed with error -5 [ 101.645613][ T5703] lenovo 0003:17EF:60EE.0006: Failed to switch middle button: -71 [ 101.685125][ T5703] lenovo 0003:17EF:60EE.0006: Fn-lock setting failed: -71 [ 101.714444][ T5703] lenovo 0003:17EF:60EE.0006: Sensitivity setting failed: -71 [ 101.733431][ T5703] usb 1-1: USB disconnect, device number 2 [ 101.777333][ T29] usb 4-1: USB disconnect, device number 3 [ 102.275512][ T5932] loop9: detected capacity change from 0 to 2640 [ 102.428269][ T5932] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 102.494244][ T5932] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.610417][ T5935] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 102.632414][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.650441][ T5935] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 102.676647][ T5935] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 102.698472][ T5935] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 102.722088][ T5935] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 102.745334][ T5935] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 102.765927][ T5935] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 102.787894][ T5935] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 102.820083][ T5935] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 102.826239][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 102.854684][ T9] usb 4-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config [ 102.864514][ T5935] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 102.901129][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.931165][ T5935] I/O error, dev loop9, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 102.967569][ T5935] I/O error, dev loop9, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 74 prio class 2 [ 102.995603][ T9] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 103.019923][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=131 [ 103.100743][ T9] usb 4-1: Product: syz [ 103.124116][ T9] usb 4-1: Manufacturer: syz [ 103.129187][ T9] usb 4-1: SerialNumber: syz [ 103.189606][ T9] usb 4-1: config 0 descriptor?? [ 103.239342][ T5943] x_tables: duplicate underflow at hook 4 [ 103.400937][ T9] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 103.474160][ T9] usb 4-1: USB disconnect, device number 4 [ 104.016326][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.152289][ T5957] loop5: detected capacity change from 0 to 7 [ 104.181768][ T5957] Dev loop5: unable to read RDB block 7 [ 104.199331][ T5957] loop5: unable to read partition table [ 104.211602][ T5957] loop5: partition table beyond EOD, truncated [ 104.245449][ T5957] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 104.276244][ T5359] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.292296][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.347010][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 104.385768][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 104.442402][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.478271][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.480580][ T5359] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 104.497932][ T9] usb 3-1: Product: syz [ 104.547711][ T5359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.548442][ T9] usb 3-1: Manufacturer: syz [ 104.608661][ T9] usb 3-1: SerialNumber: syz [ 104.642605][ T5359] usb 1-1: config 0 descriptor?? [ 104.667254][ T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 104.690406][ T5359] cp210x 1-1:0.0: cp210x converter detected [ 104.695727][ T9] cdc_ncm 3-1:1.0: bind() failure [ 104.723523][ T5960] netlink: 'syz.4.54': attribute type 1 has an invalid length. [ 104.729581][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 104.762341][ T5960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.767447][ T9] cdc_ncm 3-1:1.1: bind() failure [ 105.055010][ T5968] loop4: detected capacity change from 0 to 2640 [ 105.077164][ T9] usb 3-1: USB disconnect, device number 6 [ 105.078487][ T5968] ldm_validate_partition_table(): Disk read failed. [ 105.098931][ T5359] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 105.132238][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.142962][ T5968] Dev loop4: unable to read RDB block 0 [ 105.151893][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.161075][ T5968] loop4: unable to read partition table [ 105.189073][ T5968] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 105.221334][ T5359] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 105.235607][ T5359] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 105.263428][ T5359] usb 1-1: cp210x converter now attached to ttyUSB0 [ 105.272726][ T5687] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.304647][ T5359] usb 1-1: USB disconnect, device number 3 [ 105.329430][ T5359] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 105.348697][ T5359] cp210x 1-1:0.0: device disconnected [ 105.381058][ T5980] loop9: detected capacity change from 0 to 2640 [ 105.438818][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.458437][ T5687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.503098][ T5687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.591628][ T5687] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.616124][ T5687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.639062][ T5687] usb 4-1: config 0 descriptor?? [ 106.138991][ T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.258315][ T5687] usbhid 4-1:0.0: can't add hid device: -71 [ 106.270051][ T5687] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 106.301218][ T5687] usb 4-1: USB disconnect, device number 5 [ 106.307367][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 106.322713][ T29] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 106.356794][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.377240][ T5359] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 106.397904][ T29] usb 1-1: config 0 descriptor?? [ 106.410409][ T29] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 106.548098][ T5359] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 106.557943][ T5359] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.573255][ T5359] usb 2-1: config 0 has no interface number 0 [ 106.582021][ T5359] usb 2-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.602416][ T5359] usb 2-1: config 0 interface 200 has no altsetting 0 [ 106.614072][ T5359] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 106.640421][ T5359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.650224][ T5359] usb 2-1: Product: syz [ 106.659683][ T5359] usb 2-1: Manufacturer: syz [ 106.665730][ T5359] usb 2-1: SerialNumber: syz [ 106.681407][ T5359] usb 2-1: config 0 descriptor?? [ 106.898237][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.920666][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.960169][ T5359] usbhid 2-1:0.200: couldn't find an input interrupt endpoint [ 106.985958][ T5359] usb 2-1: USB disconnect, device number 4 [ 107.526345][ T5696] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.696590][ T5696] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 107.723981][ T5696] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 107.748030][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.756361][ T5696] usb 5-1: Product: ÑŠ [ 107.760734][ T5696] usb 5-1: Manufacturer: ᵓʈ舧젆䤬҂犊㇀蚄훵瓎ä‰æ¤Œí„¶ë±›æŠæ‚©æˆ˜í– ä¦¿äŸµå¸‡à±žî¸œî•¼âŸ¥ä›‡è¤˜âƒè†åŽ›ã¡´î‹ê”©å‹™ä”€ç°è£™ç±…â®é¯€ï¿£äššë§Œæ®²ìš [ 107.778709][ T5696] usb 5-1: SerialNumber: Ї [ 107.793064][ T6022] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 107.822751][ T29] gspca_vc032x: reg_r err -32 [ 107.842690][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.864370][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.864907][ T6024] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 107.880001][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.889310][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.903072][ T6022] team0: Port device dummy0 added [ 107.907287][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.924324][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.930609][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.942270][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.949988][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.965993][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.974865][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 107.992621][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.004713][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.012509][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.016797][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.022992][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.029795][ T6024] team0: Port device dummy0 removed [ 108.037531][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.044062][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.049437][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.050563][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.100051][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.107097][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.116028][ T6024] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.122235][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.136294][ T5695] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 108.151476][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.166521][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 108.167476][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.181039][ T29] gspca_vc032x: Unknown sensor... [ 108.210706][ T29] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 108.221594][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.271162][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.287193][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.322455][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.402683][ T6043] loop9: detected capacity change from 0 to 2640 [ 108.559916][ T5703] usb 1-1: USB disconnect, device number 4 [ 108.717156][ T5695] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.899456][ T5695] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 108.935362][ T5695] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 108.957656][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.995276][ T5695] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 109.006341][ T5687] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 109.076254][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 109.186418][ T5687] usb 3-1: Using ep0 maxpacket: 32 [ 109.197897][ T5687] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 109.216216][ T5687] usb 3-1: config 0 has no interface number 0 [ 109.229452][ T5687] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 109.240276][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.240319][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.243724][ T9] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 109.279040][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.291493][ T9] usb 2-1: Product: syz [ 109.293515][ T5687] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 109.295991][ T9] usb 2-1: Manufacturer: syz [ 109.296011][ T9] usb 2-1: SerialNumber: syz [ 109.299925][ T9] usb 2-1: config 0 descriptor?? [ 109.328209][ T9] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 109.331862][ T5687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.335541][ T9] uvcvideo 2-1:0.0: No valid video chain found. [ 109.409435][ T5687] usb 3-1: Product: syz [ 109.421212][ T5687] usb 3-1: Manufacturer: syz [ 109.431408][ T5687] usb 3-1: SerialNumber: syz [ 109.445678][ T5687] usb 3-1: config 0 descriptor?? [ 109.458455][ T6054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.672577][ T6054] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 109.890360][ T5687] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 109.916654][ T5687] asix 3-1:0.188: probe with driver asix failed with error -61 [ 110.059414][ T5695] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 110.067121][ T5695] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 110.075671][ T5695] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 110.122338][ T5687] usb 3-1: USB disconnect, device number 7 [ 110.267783][ T29] usb 4-1: USB disconnect, device number 7 [ 110.356387][ T5696] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.368599][ T5696] usb 5-1: MIDIStreaming interface descriptor not found [ 110.604435][ T5696] usb 5-1: USB disconnect, device number 4 [ 111.226334][ T29] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.293684][ T6096] netlink: 164 bytes leftover after parsing attributes in process `syz.3.80'. [ 111.406208][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 111.472256][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.528996][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 111.595516][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 111.606931][ T995] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.630645][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 111.664135][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 111.682292][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 111.700323][ T5359] usb 2-1: USB disconnect, device number 5 [ 111.715432][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 111.730783][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 111.771818][ T995] usb 1-1: Using ep0 maxpacket: 32 [ 111.801519][ T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1B, changing to 0xB [ 111.830491][ T995] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.859364][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 32767, setting to 64 [ 111.874074][ T995] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.892633][ T6101] loop9: detected capacity change from 0 to 2640 [ 111.921620][ T29] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 111.931885][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.942173][ T995] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 111.952367][ T29] usb 5-1: Product: syz [ 111.957096][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.961683][ T6101] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 111.965771][ T29] usb 5-1: Manufacturer: syz [ 111.986390][ T995] usb 1-1: Product: syz [ 111.999431][ T995] usb 1-1: Manufacturer: syz [ 112.006313][ T6101] buffer_io_error: 346 callbacks suppressed [ 112.006338][ T6101] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 112.024659][ T29] usb 5-1: SerialNumber: syz [ 112.029743][ T995] usb 1-1: SerialNumber: syz [ 112.046388][ T995] usb 1-1: config 0 descriptor?? [ 112.053366][ T29] usb 5-1: config 0 descriptor?? [ 112.082492][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.093204][ T6101] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 112.103982][ T6101] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 112.127289][ T6101] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 112.170967][ T6101] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 112.199750][ T6101] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 112.233628][ T6101] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 112.246245][ T6101] Buffer I/O error on dev loop9, logical block 7, lost async page write [ 112.271446][ T6101] Buffer I/O error on dev loop9, logical block 8, lost async page write [ 112.309318][ T29] usb 5-1: USB disconnect, device number 5 [ 112.320943][ T6101] Buffer I/O error on dev loop9, logical block 9, lost async page write [ 112.363445][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.402685][ T6101] I/O error, dev loop9, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 112.508182][ T6101] I/O error, dev loop9, sector 2048 op 0x1:(WRITE) flags 0x800 phys_seg 74 prio class 2 [ 112.537909][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.565658][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.722919][ T6112] netlink: 276 bytes leftover after parsing attributes in process `syz.1.86'. [ 112.747697][ T6112] vlan2: entered allmulticast mode [ 112.754733][ T6112] gretap0: entered allmulticast mode [ 113.288598][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 113.532115][ T30] audit: type=1326 audit(1778520721.861:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.2.93" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ceb39cdd9 code=0x0 [ 113.732623][ T5695] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 113.891970][ T5695] usb 4-1: Using ep0 maxpacket: 32 [ 113.899709][ T5695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.940237][ T5695] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 113.944706][ T6141] Cannot find set identified by id 0 to match [ 113.950192][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.974037][ T5695] usb 4-1: Product: syz [ 113.985321][ T5695] usb 4-1: Manufacturer: syz [ 113.990716][ T5695] usb 4-1: SerialNumber: syz [ 114.006738][ T5695] usb 4-1: config 0 descriptor?? [ 114.029341][ T5695] usb 4-1: expecting 3 got 0 endpoints! Bailing out. [ 114.249449][ T5695] usb 4-1: USB disconnect, device number 8 [ 114.474170][ T995] usb 1-1: USB disconnect, device number 5 [ 114.569117][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 114.629306][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.95'. [ 114.850004][ T6157] loop5: detected capacity change from 0 to 7 [ 114.877502][ T6157] Dev loop5: unable to read RDB block 7 [ 114.885225][ T6157] loop5: unable to read partition table [ 114.891250][ T6157] loop5: partition table beyond EOD, truncated [ 114.909294][ T6157] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 115.046890][ T6160] netlink: 96 bytes leftover after parsing attributes in process `syz.3.98'. [ 115.929858][ T6153] warning: `syz.0.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.003084][ T6160] vlan2: entered allmulticast mode [ 116.022715][ T6160] gretap0: entered allmulticast mode [ 116.124208][ T30] audit: type=1326 audit(1778520724.451:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6168 comm="syz.1.101" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x0 [ 116.330674][ T6179] fuse: Unknown parameter '' [ 117.004258][ T6185] tipc: Enabling of bearer rejected, failed to enable media [ 117.266459][ T5687] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 117.482373][ T5687] usb 5-1: config 251 has an invalid interface number: 254 but max is 0 [ 117.502998][ T5687] usb 5-1: config 251 has no interface number 0 [ 117.520323][ T5687] usb 5-1: config 251 interface 254 has no altsetting 0 [ 117.546187][ T29] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.560373][ T5687] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=e1.c1 [ 117.591559][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.619502][ T5687] usb 5-1: Product: syz [ 117.629701][ T5687] usb 5-1: Manufacturer: syz [ 117.649356][ T5687] usb 5-1: SerialNumber: syz [ 117.716684][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 117.726831][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.756540][ T29] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.793410][ T29] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 117.804040][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.821765][ T29] usb 2-1: Product: syz [ 117.833485][ T29] usb 2-1: Manufacturer: syz [ 117.843616][ T29] usb 2-1: SerialNumber: syz [ 117.932626][ T5687] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:251.254/input/input8 [ 118.004469][ T5687] usb 5-1: USB disconnect, device number 7 [ 118.141056][ T6207] netlink: 144 bytes leftover after parsing attributes in process `syz.0.111'. [ 118.293864][ T29] usb 2-1: USB disconnect, device number 6 [ 118.298021][ T30] audit: type=1326 audit(1778520726.621:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6208 comm="syz.2.112" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ceb39cdd9 code=0x0 [ 118.405346][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.113'. [ 118.616610][ T5703] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 118.657037][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.784033][ T5703] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.784062][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.784078][ T5703] usb 3-1: Product: syz [ 118.784090][ T5703] usb 3-1: Manufacturer: syz [ 118.784104][ T5703] usb 3-1: SerialNumber: syz [ 118.850348][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.867722][ T9] usb 4-1: config index 0 descriptor too short (expected 65282, got 36) [ 118.881940][ T9] usb 4-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 118.897103][ T9] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 118.928150][ T9] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 3 [ 118.968492][ T9] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 118.979311][ T6234] loop2: detected capacity change from 0 to 7 [ 118.998999][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.013166][ T6234] Dev loop2: unable to read RDB block 7 [ 119.034148][ T5703] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 119.037768][ T6234] loop2: AHDI p1 p2 p3 [ 119.044845][ T9] usb 4-1: Product: syz [ 119.050601][ T9] usb 4-1: Manufacturer: syz [ 119.059275][ T5703] cdc_ncm 3-1:1.0: bind() failure [ 119.063246][ T6234] loop2: partition table partially beyond EOD, truncated [ 119.069036][ T9] usb 4-1: SerialNumber: syz [ 119.084488][ T6234] loop2: p1 start 1818582900 is beyond EOD, truncated [ 119.085311][ T5703] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 119.101809][ T6234] loop2: p3 start 335544320 is beyond EOD, truncated [ 119.109238][ T5703] cdc_ncm 3-1:1.1: bind() failure [ 119.288384][ T29] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 119.314583][ T9] usb 4-1: USB disconnect, device number 9 [ 119.448561][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.460104][ T29] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 119.469497][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.483231][ T29] usb 5-1: config 0 descriptor?? [ 119.556811][ T5687] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.606170][ T5359] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 119.701659][ T29] usbhid 5-1:0.0: can't add hid device: -71 [ 119.708091][ T29] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 119.716509][ T5687] usb 1-1: Using ep0 maxpacket: 16 [ 119.724309][ T29] usb 5-1: USB disconnect, device number 8 [ 119.737908][ T5687] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.757670][ T5687] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.769802][ T5687] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 119.785709][ T5687] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.793051][ T5359] usb 2-1: config 208 has too many interfaces: 51, using maximum allowed: 32 [ 119.802762][ T5687] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 119.812923][ T5359] usb 2-1: config 208 has an invalid descriptor of length 88, skipping remainder of the config [ 119.824391][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.833755][ T5359] usb 2-1: config 208 has 0 interfaces, different from the descriptor's value: 51 [ 119.845408][ T5687] usb 1-1: config 0 descriptor?? [ 119.861018][ T5359] usb 2-1: string descriptor 0 read error: -22 [ 119.875088][ T5359] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40 [ 119.886619][ T5359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.943905][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 120.009993][ T6254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.025799][ T6254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.040832][ T6254] netlink: 'syz.3.126': attribute type 3 has an invalid length. [ 120.216550][ T29] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 120.246282][ T5721] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 120.285122][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.294954][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.305999][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.315424][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.356486][ T6238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.365578][ T6238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.366228][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 120.380852][ T5721] usb 4-1: device descriptor read/64, error -71 [ 120.393293][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.405998][ T29] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 120.415819][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.427920][ T29] usb 5-1: config 0 descriptor?? [ 120.436996][ T29] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 120.463243][ T29] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 120.504367][ T5687] usbhid 1-1:0.0: can't add hid device: -71 [ 120.514320][ T5687] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.525220][ T5687] usb 1-1: USB disconnect, device number 6 [ 120.626402][ T5721] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 120.756249][ T5721] usb 4-1: device descriptor read/64, error -71 [ 120.845461][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 120.855731][ T5687] usb 5-1: USB disconnect, device number 9 [ 120.864537][ T5687] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 120.875997][ T5721] usb usb4-port1: attempt power cycle [ 121.190355][ T5703] usb 3-1: USB disconnect, device number 8 [ 121.237093][ T5721] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 121.286942][ T5721] usb 4-1: device descriptor read/8, error -71 [ 121.431840][ T6270] netlink: 96 bytes leftover after parsing attributes in process `syz.4.131'. [ 121.446798][ T6270] vlan2: entered allmulticast mode [ 121.452274][ T6270] gretap0: entered allmulticast mode [ 121.546285][ T5721] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 121.576305][ T5703] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 121.578356][ T5721] usb 4-1: device descriptor read/8, error -71 [ 121.636746][ T6278] binder: BINDER_SET_CONTEXT_MGR already set [ 121.656356][ T6278] binder: 6271:6278 ioctl 4018620d 200000004a80 returned -16 [ 121.694000][ T6278] binder: 6271:6278 ioctl c0306201 0 returned -14 [ 121.720170][ T5721] usb usb4-port1: unable to enumerate USB device [ 121.759362][ T5703] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.778361][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.811732][ T5703] usb 3-1: config 0 descriptor?? [ 121.827112][ T5703] cp210x 3-1:0.0: cp210x converter detected [ 122.113578][ T6281] input: syz0 as /devices/virtual/input/input9 [ 122.227879][ T5703] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 122.255908][ T5703] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 122.284796][ T5703] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 122.325765][ T5703] usb 3-1: cp210x converter now attached to ttyUSB0 [ 122.435695][ T995] usb 2-1: USB disconnect, device number 7 [ 122.447570][ T9] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 122.616382][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 122.756200][ T9] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 122.890128][ T995] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 122.936818][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 122.946769][ T6300] syzkaller0: entered promiscuous mode [ 122.955700][ T9] usb usb5-port1: attempt power cycle [ 122.961553][ T6300] syzkaller0: entered allmulticast mode [ 123.076305][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 123.093460][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.123651][ T995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.145391][ T995] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 123.167376][ T995] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 123.185156][ T995] usb 2-1: Manufacturer: syz [ 123.211743][ T995] usb 2-1: config 0 descriptor?? [ 123.240678][ T6311] xt_hashlimit: size too large, truncated to 1048576 [ 123.306192][ T9] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 123.341183][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 123.442836][ T5703] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 123.478062][ T9] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 123.508687][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 123.533431][ T9] usb usb5-port1: unable to enumerate USB device [ 123.586644][ T5703] usb 4-1: device descriptor read/64, error -71 [ 123.671664][ T995] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0007/input/input10 [ 123.745132][ T995] creative-sb0540 0003:041E:3100.0007: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 123.759343][ T5359] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 123.827115][ T5703] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 123.926198][ T5359] usb 1-1: Using ep0 maxpacket: 8 [ 123.940817][ T5359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.954242][ T5359] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.965367][ T5359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.977186][ T5703] usb 4-1: device descriptor read/64, error -71 [ 123.989794][ T5359] usb 1-1: config 0 descriptor?? [ 124.060644][ T9] usb 2-1: USB disconnect, device number 8 [ 124.103240][ T5703] usb usb4-port1: attempt power cycle [ 124.213967][ T5359] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 124.295437][ T5359] usb 3-1: USB disconnect, device number 9 [ 124.319358][ T5359] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 124.339087][ T5359] cp210x 3-1:0.0: device disconnected [ 124.376677][ T5633] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.377057][ T5721] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 124.397013][ T5721] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 124.456224][ T5703] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 124.476890][ T5703] usb 4-1: device descriptor read/8, error -71 [ 124.672108][ T6324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.704402][ T6324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.713550][ T5359] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 124.716191][ T5703] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 124.734529][ T995] usb 1-1: USB disconnect, device number 7 [ 124.766895][ T5703] usb 4-1: device descriptor read/8, error -71 [ 124.888391][ T5703] usb usb4-port1: unable to enumerate USB device [ 124.890446][ T5359] usb 3-1: config 0 has no interfaces? [ 124.912798][ T5359] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 124.926504][ T5359] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 124.945318][ T5359] usb 3-1: Product: syz [ 124.950330][ T5359] usb 3-1: Manufacturer: syz [ 124.965766][ T5359] usb 3-1: config 0 descriptor?? [ 125.373552][ T6389] netlink: 96 bytes leftover after parsing attributes in process `syz.4.142'. [ 125.706210][ T995] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 125.877933][ T995] usb 5-1: not running at top speed; connect to a high speed hub [ 125.899131][ T995] usb 5-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config [ 125.915692][ T995] usb 5-1: config 65 has 2 interfaces, different from the descriptor's value: 3 [ 125.936862][ T995] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 125.951472][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.980127][ T995] usb 5-1: Product: syz [ 125.991033][ T995] usb 5-1: Manufacturer: syz [ 126.012038][ T995] usb 5-1: SerialNumber: syz [ 126.054856][ T995] usb 5-1: 0:2 : does not exist [ 126.073221][ T995] usb 5-1: unit 130 not found! [ 126.252587][ T6396] program syz.4.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.456263][ T5633] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.459032][ T5721] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.511915][ T5721] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 126.744738][ T6429] loop5: detected capacity change from 0 to 7 [ 126.786241][ T5359] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 126.808480][ T6429] Dev loop5: unable to read RDB block 7 [ 126.857127][ T6429] loop5: unable to read partition table [ 126.869191][ T6429] loop5: partition table beyond EOD, truncated [ 126.885082][ T6429] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.956488][ T5359] usb 4-1: Using ep0 maxpacket: 8 [ 126.987791][ T5359] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 127.021821][ T5359] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 127.073384][ T5359] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.102985][ T5359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.131867][ T5359] usb 4-1: Product: â ‰ [ 127.148045][ T5359] usb 4-1: Manufacturer: à°„ [ 127.165318][ T5359] usb 4-1: SerialNumber: syz [ 127.316121][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.393584][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.501718][ T5695] usb 3-1: USB disconnect, device number 10 [ 127.915596][ T6436] netlink: 'syz.4.152': attribute type 10 has an invalid length. [ 127.965275][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.973756][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.974332][ T6442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.986789][ T5695] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 128.133311][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.141036][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.149989][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.158314][ T6436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.186286][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 128.200407][ T6442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.223308][ T5695] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 128.241983][ T5695] usb 3-1: config 1 has no interface number 0 [ 128.252424][ T5695] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 128.270859][ T5695] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 128.288457][ T5695] usb 3-1: config 1 interface 105 has no altsetting 0 [ 128.310813][ T6436] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 128.327735][ T5695] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 128.343774][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 128.370133][ T5695] usb 3-1: Product: syz [ 128.389218][ T5695] usb 3-1: Manufacturer: syz [ 128.390560][ T6436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.152'. [ 128.417884][ T5695] usb 3-1: SerialNumber: syz [ 128.427207][ T6436] bridge_slave_1: left allmulticast mode [ 128.450527][ T6436] bridge_slave_1: left promiscuous mode [ 128.466015][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.475516][ T6441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.486452][ T6441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.555084][ T6436] bridge_slave_0: left allmulticast mode [ 128.576955][ T6436] bridge_slave_0: left promiscuous mode [ 128.594154][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.616202][ T5633] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.617995][ T5721] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 128.650252][ T5721] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 128.794401][ T6436] bond0: (slave bridge0): Releasing backup interface [ 128.909727][ T6441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 128.918558][ T6441] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.131103][ T5695] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 129.162870][ T5695] aqc111 3-1:1.105: probe with driver aqc111 failed with error -32 [ 129.557806][ T5359] cdc_ncm 4-1:1.0: bind() failure [ 129.607712][ T5359] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 129.642661][ T5359] cdc_ncm 4-1:1.1: bind() failure [ 129.688529][ T5359] usb 4-1: USB disconnect, device number 18 [ 129.800130][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.818138][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.892388][ T30] audit: type=1804 audit(1778520738.221:13): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.159" name="bus" dev="ramfs" ino=12531 res=1 errno=0 [ 129.923570][ T6459] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 129.995835][ T6459] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.011565][ T6459] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 130.042085][ T6459] bond1: (slave vxcan3): making interface the new active one [ 130.057513][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 130.068546][ T6459] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 130.080283][ T5359] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 130.088360][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.135444][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.159559][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.183623][ T6466] netlink: 164 bytes leftover after parsing attributes in process `syz.0.160'. [ 130.198908][ T6464] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 130.218901][ T6464] bond1 (unregistering): Released all slaves [ 130.250218][ T5359] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.268332][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 130.286603][ T5359] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.300906][ T24] usb 2-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 130.319354][ T5359] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.327580][ T24] usb 2-1: config 220 has no interface number 2 [ 130.350365][ T5359] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 130.360405][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 130.383005][ T5359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.398350][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 130.406466][ T5359] usb 4-1: config 0 descriptor?? [ 130.427174][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 130.444577][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 130.484100][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 130.535897][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.552474][ T24] usb 2-1: Product: syz [ 130.557664][ T24] usb 2-1: Manufacturer: syz [ 130.563257][ T24] usb 2-1: SerialNumber: syz [ 130.655963][ T995] usb 5-1: USB disconnect, device number 14 [ 130.705131][ T5703] usb 3-1: USB disconnect, device number 11 [ 130.821908][ T24] usb 2-1: selecting invalid altsetting 0 [ 130.857816][ T5633] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.862199][ T5721] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 130.871413][ T6472] tipc: Started in network mode [ 130.889238][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 130.921324][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.943977][ T6472] tipc: Node identity 4, cluster identity 4711 [ 130.958477][ T5721] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 130.966867][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 130.990005][ T6472] tipc: Node number set to 4 [ 130.993065][ T24] usb 2-1: selecting invalid altsetting 0 [ 131.019807][ T5359] hid_parser_main: 222 callbacks suppressed [ 131.019824][ T5359] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 131.043008][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 131.067338][ T5359] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 131.080516][ T24] usb 2-1: USB disconnect, device number 9 [ 131.108188][ T5359] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 131.143468][ T5359] monterey 0003:0566:3004.0008: unknown main item tag 0x0 [ 131.187843][ T5359] monterey 0003:0566:3004.0008: hidraw0: USB HID v10.09 Device [HID 0566:3004] on usb-dummy_hcd.3-1/input0 [ 131.270965][ T5703] usb 4-1: USB disconnect, device number 19 [ 131.374237][ T6474] fido_id[6474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 131.527376][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.1.165'. [ 131.550763][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'. [ 131.630304][ T6485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.946240][ T5359] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 132.145600][ T5359] usb 2-1: config index 0 descriptor too short (expected 7768, got 18) [ 132.162219][ T6505] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 132.172057][ T5359] usb 2-1: config 0 has an invalid interface number: 222 but max is 0 [ 132.186357][ T6505] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 132.212877][ T5359] usb 2-1: config 0 has no interface number 0 [ 132.223103][ T5359] usb 2-1: config 0 interface 222 has no altsetting 0 [ 132.239221][ T5359] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 132.268649][ T5359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.302293][ T5359] usb 2-1: config 0 descriptor?? [ 132.405793][ T6508] netlink: 164 bytes leftover after parsing attributes in process `syz.4.170'. [ 132.454576][ T6512] netlink: 82 bytes leftover after parsing attributes in process `syz.0.172'. [ 132.531190][ T5359] usb 2-1: string descriptor 0 read error: -71 [ 132.606042][ T5359] ftdi_sio 2-1:0.222: FTDI USB Serial Device converter detected [ 132.644528][ T5359] ftdi_sio ttyUSB0: unknown device type: 0x524d [ 132.655232][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 132.689715][ T5359] usb 2-1: USB disconnect, device number 10 [ 132.744906][ T5359] ftdi_sio 2-1:0.222: device disconnected [ 132.787908][ T30] audit: type=1326 audit(1778520741.111:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.2.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ceb39cdd9 code=0x7ffc0000 [ 132.898449][ T30] audit: type=1326 audit(1778520741.141:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.2.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2ceb39cdd9 code=0x7ffc0000 [ 132.940500][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.949306][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.958022][ T30] audit: type=1326 audit(1778520741.141:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.2.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ceb39cdd9 code=0x7ffc0000 [ 133.016746][ T5633] Bluetooth: hci4: command 0x0c1a tx timeout [ 133.024273][ T5721] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 133.061166][ T5721] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 133.138320][ T30] audit: type=1326 audit(1778520741.141:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.2.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ceb39cdd9 code=0x7ffc0000 [ 133.189961][ T30] audit: type=1326 audit(1778520741.141:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.2.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2ceb39cdd9 code=0x7ffc0000 [ 133.295057][ T30] audit: type=1326 audit(1778520741.161:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.2.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ceb39cdd9 code=0x7ffc0000 [ 133.381466][ T30] audit: type=1326 audit(1778520741.161:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.2.169" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ceb39cdd9 code=0x7ffc0000 [ 133.461040][ T6521] loop5: detected capacity change from 0 to 7 [ 133.516478][ T6521] Dev loop5: unable to read RDB block 7 [ 133.560250][ T6521] loop5: unable to read partition table [ 133.596485][ T6521] loop5: partition table beyond EOD, truncated [ 133.644866][ T6521] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 133.874118][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 133.983247][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 134.855239][ T6566] loop9: detected capacity change from 0 to 4096 [ 135.046191][ T5695] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 135.265760][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.314615][ T5695] usb 2-1: not running at top speed; connect to a high speed hub [ 135.375862][ T5695] usb 2-1: config 2 has an invalid interface number: 9 but max is 0 [ 135.403885][ T5695] usb 2-1: config 2 has no interface number 0 [ 135.429810][ T5695] usb 2-1: config 2 interface 9 has no altsetting 0 [ 135.480138][ T5695] usb 2-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=23.72 [ 135.493899][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.504661][ T5695] usb 2-1: Product: syz [ 135.541553][ T5695] usb 2-1: Manufacturer: syz [ 135.574081][ T5695] usb 2-1: SerialNumber: syz [ 135.706248][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 135.906697][ T9] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.948048][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.991414][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.994390][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.189'. [ 136.063047][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 136.078700][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.110307][ T6577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.335913][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.363577][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.901992][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 136.928815][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input11 [ 136.986436][ T5696] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.039189][ T9] usb 4-1: USB disconnect, device number 20 [ 137.045374][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 137.166471][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 137.177937][ T5696] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 137.189708][ T5696] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 137.215984][ T5696] usb 1-1: config 0 has no interface number 0 [ 137.233765][ T5696] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 137.246773][ T5696] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 137.275187][ T5696] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 137.316026][ T5696] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 137.327799][ T5696] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 137.348576][ T5696] usb 1-1: Product: syz [ 137.363491][ T5696] usb 1-1: Manufacturer: syz [ 137.376257][ T5696] usb 1-1: config 0 descriptor?? [ 137.603783][ T6596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.645982][ T6596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.748155][ T5696] usb 1-1: USB disconnect, device number 8 [ 137.995485][ T5695] quatech2 2-1:2.9: Quatech 2nd gen USB to Serial Driver converter detected [ 138.023547][ T5695] usb 2-1: qt2_attach - failed to power on unit: -71 [ 138.031711][ T5695] quatech2 2-1:2.9: probe with driver quatech2 failed with error -71 [ 138.049355][ T5695] usb 2-1: USB disconnect, device number 11 [ 138.226185][ T5696] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 138.396416][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 138.408538][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.430998][ T5696] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 138.441204][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.461771][ T5696] usb 1-1: config 0 descriptor?? [ 138.473906][ T5696] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 138.682132][ T9] usb 1-1: USB disconnect, device number 9 [ 139.752581][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.201'. [ 140.555738][ T6647] fuse: Bad value for 'group_id' [ 140.562544][ T6647] fuse: Bad value for 'group_id' [ 140.772758][ T6623] syz_tun: entered allmulticast mode [ 140.781406][ T6623] syz_tun: left allmulticast mode [ 140.933679][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 140.944409][ T30] audit: type=1400 audit(1778520749.271:21): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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q: adding VLAN 0 to HW filter on device bond1 [ 141.123312][ T6657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 141.167019][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 141.185266][ T6659] netlink: 'syz.3.209': attribute type 4 has an invalid length. [ 141.188764][ T5687] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 141.223333][ T6659] netlink: 152 bytes leftover after parsing attributes in process `syz.3.209'. [ 141.248232][ T6657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.258781][ T5687] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 141.278264][ T6657] bond1: (slave bond0): making interface the new active one [ 141.320047][ T6657] bond1: (slave bond0): Enslaving as an active interface with an up link [ 141.357467][ T5359] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.370939][ T6659] .`: renamed from bond0 (while UP) [ 141.446341][ T5721] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 141.526191][ T5359] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 141.540381][ T1054] bond1: (slave .`): link status definitely down, disabling slave [ 141.550727][ T5359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.563147][ T1054] bond1: now running without any active interface! [ 141.570197][ T5359] usb 3-1: Product: syz [ 141.580011][ T5359] usb 3-1: Manufacturer: syz [ 141.585565][ T5359] usb 3-1: SerialNumber: syz [ 141.595156][ T5359] usb 3-1: config 0 descriptor?? [ 141.613246][ T5359] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 141.623086][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 141.632274][ T5721] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.648938][ T5721] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 141.680015][ T5721] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40 [ 141.697677][ T5359] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.710346][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.724781][ T5359] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 141.738620][ T5721] usb 1-1: Product: syz [ 141.744148][ T5721] usb 1-1: Manufacturer: syz [ 141.751170][ T5721] usb 1-1: SerialNumber: syz [ 141.756220][ T5359] usb 3-1: media controller created [ 141.796677][ T5359] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.818251][ T6663] dvb-usb: bulk message failed: -22 (7/0) [ 141.830783][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 141.854921][ T6663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.879819][ T6663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.945706][ T5359] DVB: Unable to find symbol mt352_attach() [ 141.987177][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 142.009339][ T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 142.032365][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.049257][ T9] usb 4-1: config 0 has no interface number 0 [ 142.049427][ T5359] DVB: Unable to find symbol nxt6000_attach() [ 142.057775][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 142.078337][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.086861][ T9] usb 4-1: Product: syz [ 142.090077][ T5359] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 142.091353][ T9] usb 4-1: Manufacturer: syz [ 142.107789][ T9] usb 4-1: SerialNumber: syz [ 142.124740][ T9] usb 4-1: config 0 descriptor?? [ 142.144342][ T9] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 142.153809][ T9] uvcvideo 4-1:0.105: No valid video chain found. [ 142.154903][ T5359] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 142.208351][ T5721] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 142.216549][ T5359] dvb-usb: schedule remote query interval to 1000 msecs. [ 142.236590][ T5359] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 142.256303][ T5359] dvb-usb: bulk message failed: -22 (7/0) [ 142.270397][ T5359] dvb-usb: bulk message failed: -22 (7/0) [ 142.393093][ T6675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.420640][ T6675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.450959][ T5721] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 142.518490][ T5721] usb 1-1: USB disconnect, device number 10 [ 142.585492][ T5687] usb 3-1: USB disconnect, device number 12 [ 142.803152][ T5687] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 142.889692][ T6690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'. [ 143.018916][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 143.195266][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.217353][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.234730][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.261190][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 143.283005][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.306025][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.325954][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.337605][ T9] usb 2-1: Product: syz [ 143.345715][ T9] usb 2-1: Manufacturer: syz [ 143.368227][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 143.385466][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 143.420647][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 143.433869][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 143.672364][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.751379][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.019949][ T5687] usb 2-1: USB disconnect, device number 12 [ 144.172036][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 144.258632][ T6758] sg_write: data in/out 445404/202 bytes for SCSI command 0x0-- guessing data in; [ 144.258632][ T6758] program syz.1.225 not setting count and/or reply_len properly [ 144.601623][ T5696] usb 4-1: USB disconnect, device number 21 [ 144.653869][ T6766] netlink: 164 bytes leftover after parsing attributes in process `syz.4.224'. [ 144.760898][ T6771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.227'. [ 144.782251][ T6772] netlink: 36 bytes leftover after parsing attributes in process `syz.3.227'. [ 145.107664][ T6777] loop2: detected capacity change from 0 to 7 [ 145.139198][ T6777] Dev loop2: unable to read RDB block 7 [ 145.146308][ T6777] loop2: AHDI p1 p2 p3 [ 145.160195][ T6777] loop2: partition table partially beyond EOD, truncated [ 145.168094][ T6777] loop2: p1 start 1818582900 is beyond EOD, truncated [ 145.184122][ T6777] loop2: p3 start 335544320 is beyond EOD, truncated [ 146.147789][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 146.515754][ T6796] loop5: detected capacity change from 0 to 7 [ 146.535148][ T6796] Dev loop5: unable to read RDB block 7 [ 146.551288][ T6796] loop5: unable to read partition table [ 146.558174][ T6796] loop5: partition table beyond EOD, truncated [ 146.566780][ T6796] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 147.884401][ T6808] bond1: option mode: unable to set because the bond device has slaves [ 148.088304][ T6816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.119901][ T6816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.130944][ T6819] loop2: detected capacity change from 0 to 7 [ 148.141946][ T6819] Dev loop2: unable to read RDB block 7 [ 148.162880][ T6820] netlink: 'syz.2.238': attribute type 13 has an invalid length. [ 148.172487][ T6819] loop2: AHDI p1 p2 p3 [ 148.182301][ T6819] loop2: partition table partially beyond EOD, truncated [ 148.204932][ T6819] loop2: p1 start 1818582900 is beyond EOD, truncated [ 148.212165][ T5721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 148.239810][ T6819] loop2: p3 start 335544320 is beyond EOD, truncated [ 148.287512][ T5695] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 148.388971][ T5721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.435261][ T5721] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 148.483865][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.551570][ T5721] usb 1-1: config 0 descriptor?? [ 148.572136][ T5721] pwc: Askey VC010 type 2 USB webcam detected. [ 148.575818][ T6834] tipc: Enabled bearer , priority 0 [ 148.642596][ T6817] tipc: Disabling bearer [ 148.716438][ T5703] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 148.877896][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 148.900930][ T5703] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 148.917176][ T5703] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 148.942212][ T5703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.971331][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.996349][ T5721] pwc: recv_control_msg error -32 req 02 val 2b00 [ 149.000675][ T5703] usb 2-1: Product: â ‰ [ 149.035280][ T5703] usb 2-1: Manufacturer: à°„ [ 149.036262][ T5721] pwc: recv_control_msg error -32 req 02 val 2700 [ 149.053451][ T5703] usb 2-1: SerialNumber: syz [ 149.074192][ T5721] pwc: recv_control_msg error -32 req 02 val 2c00 [ 149.087658][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.107173][ T5721] pwc: recv_control_msg error -32 req 04 val 1000 [ 149.128687][ T5721] pwc: recv_control_msg error -32 req 04 val 1300 [ 149.141619][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.153966][ T5721] pwc: recv_control_msg error -32 req 04 val 1400 [ 149.175221][ T6835] syz.3.243 uses obsolete (PF_INET,SOCK_PACKET) [ 149.184955][ T5721] pwc: recv_control_msg error -32 req 02 val 2000 [ 149.404150][ T5721] pwc: recv_control_msg error -71 req 04 val 1500 [ 149.425136][ T5721] pwc: recv_control_msg error -71 req 02 val 2500 [ 149.443493][ T5721] pwc: recv_control_msg error -71 req 02 val 2400 [ 149.463107][ T5721] pwc: recv_control_msg error -71 req 02 val 2600 [ 149.488209][ T5721] pwc: recv_control_msg error -71 req 02 val 2900 [ 149.504669][ T5721] pwc: recv_control_msg error -71 req 02 val 2800 [ 149.516624][ T5721] pwc: recv_control_msg error -71 req 04 val 1100 [ 149.535117][ T5721] pwc: recv_control_msg error -71 req 04 val 1200 [ 149.605608][ T5721] pwc: Registered as video103. [ 149.630662][ T5721] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 149.698154][ T5721] usb 1-1: USB disconnect, device number 11 [ 150.020991][ T5687] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 150.064402][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 150.187077][ T5687] usb 4-1: Using ep0 maxpacket: 32 [ 150.204193][ T5687] usb 4-1: config index 0 descriptor too short (expected 49, got 27) [ 150.215190][ T5687] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 150.225400][ T5687] usb 4-1: config 0 has no interface number 0 [ 150.232070][ T5687] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x8A has invalid wMaxPacketSize 0 [ 150.243205][ T5687] usb 4-1: config 0 interface 89 has no altsetting 0 [ 150.253664][ T5687] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 150.267066][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.275518][ T5687] usb 4-1: Product: syz [ 150.280876][ T5687] usb 4-1: Manufacturer: syz [ 150.285900][ T5687] usb 4-1: SerialNumber: syz [ 150.297456][ T5687] usb 4-1: config 0 descriptor?? [ 150.311454][ T5687] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 150.322161][ T5687] em28xx 4-1:0.89: Video interface 89 found: [ 150.329229][ T5687] em28xx 4-1:0.89: DVB interface 89 found: [ 150.522941][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.532687][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.647197][ T6864] loop9: detected capacity change from 0 to 2640 [ 151.136740][ T5687] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 151.230972][ T5687] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 151.253067][ T5687] em28xx 4-1:0.89: board has no eeprom [ 151.320125][ T5687] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 151.344196][ T5687] em28xx 4-1:0.89: analog set to bulk mode. [ 151.360995][ T5687] em28xx 4-1:0.89: dvb set to bulk mode. [ 151.386917][ T5721] em28xx 4-1:0.89: Registering V4L2 extension [ 151.429730][ T5687] usb 4-1: USB disconnect, device number 23 [ 151.472004][ T5687] em28xx 4-1:0.89: Disconnecting em28xx [ 151.537801][ T5703] cdc_ncm 2-1:1.0: bind() failure [ 151.586199][ T5721] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 151.619829][ T5721] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 151.635184][ T5721] em28xx 4-1:0.89: No AC97 audio processor [ 151.667837][ T5703] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 151.695966][ T5703] cdc_ncm 2-1:1.1: bind() failure [ 151.770057][ T5721] usb 4-1: Decoder not found [ 151.771091][ T5703] usb 2-1: USB disconnect, device number 13 [ 151.802207][ T5721] em28xx 4-1:0.89: failed to create media graph [ 151.821930][ T5721] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 151.906752][ T6880] mmap: syz.3.254 (6880) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.922199][ T5721] em28xx 4-1:0.89: Registering snapshot button... [ 151.964388][ T5721] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input15 [ 152.102349][ T5721] em28xx 4-1:0.89: Remote control support is not available for this card. [ 152.143227][ T5687] em28xx 4-1:0.89: Closing input extension [ 152.161852][ T5687] em28xx 4-1:0.89: Deregistering snapshot button [ 152.225031][ T6884] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.253' sets config #0 [ 152.272912][ T6884] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.253' sets config #1 [ 152.665412][ T5687] em28xx 4-1:0.89: Freeing device [ 154.476470][ T5687] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 154.646209][ T5687] usb 2-1: Using ep0 maxpacket: 8 [ 154.652233][ T6861] batadv0: entered promiscuous mode [ 154.653028][ T5687] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 154.665046][ T6861] batadv0: left promiscuous mode [ 154.665133][ T5687] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.682901][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.695334][ T5687] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.734696][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.745716][ T6873] team0: Device gtp0 is of different type [ 154.788248][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.817096][ T5687] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.843722][ T5687] usb 2-1: config 168 interface 0 has no altsetting 0 [ 154.897803][ T5687] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 154.905710][ T5687] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 154.923650][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 154.935843][ T5687] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.948974][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.967662][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.979865][ T5687] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 154.997771][ T5687] usb 2-1: config 168 interface 0 has no altsetting 0 [ 155.017597][ T5687] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 155.028866][ T5687] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 155.042168][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 155.067003][ T5687] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.079487][ T5721] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 155.110394][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.137666][ T5687] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 155.166674][ T5687] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 155.184010][ T5687] usb 2-1: config 168 interface 0 has no altsetting 0 [ 155.198841][ T5687] usb 2-1: string descriptor 0 read error: -22 [ 155.206586][ T5687] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 155.216246][ T5721] usb 5-1: device descriptor read/64, error -71 [ 155.224947][ T5687] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.248424][ T5687] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 155.342652][ T6909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 155.456324][ T5721] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 155.558394][ T5703] usb 2-1: USB disconnect, device number 14 [ 155.559802][ T6891] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 155.596257][ T5721] usb 5-1: device descriptor read/64, error -71 [ 155.616449][ T5742] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 155.716728][ T5721] usb usb5-port1: attempt power cycle [ 155.801268][ T5742] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.809787][ T5742] usb 3-1: config 0 has no interface number 0 [ 155.816903][ T5742] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.828351][ T5742] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.839814][ T5742] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 155.849927][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.857458][ T6915] loop9: detected capacity change from 0 to 2640 [ 155.868348][ T5742] usb 3-1: config 0 descriptor?? [ 156.059545][ T5721] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 156.100755][ T5721] usb 5-1: device descriptor read/8, error -71 [ 156.255806][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.265'. [ 156.265983][ T6920] raw_sendmsg: syz.3.264 forgot to set AF_INET. Fix it! [ 156.292363][ T5742] usbhid 3-1:0.1: can't add hid device: -71 [ 156.306222][ T5742] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 156.320627][ T5742] usb 3-1: USB disconnect, device number 13 [ 156.326890][ T5703] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 156.376376][ T5721] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 156.410785][ T5721] usb 5-1: device descriptor read/8, error -71 [ 156.423753][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.266'. [ 156.455841][ T6928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.266'. [ 156.475979][ T6931] syzkaller0: entered promiscuous mode [ 156.482050][ T6931] syzkaller0: entered allmulticast mode [ 156.496320][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 156.514913][ T5703] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 156.526578][ T5721] usb usb5-port1: unable to enumerate USB device [ 156.528482][ T5703] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 156.553033][ T6933] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 156.563680][ T6933] PKCS7: Only support pkcs7_signedData type [ 156.573519][ T5703] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.583807][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.592053][ T5703] usb 1-1: Product: â ‰ [ 156.596657][ T5703] usb 1-1: Manufacturer: à°„ [ 156.601782][ T5703] usb 1-1: SerialNumber: syz [ 156.674686][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 159.165172][ T6956] loop9: detected capacity change from 0 to 2640 [ 159.230403][ T5703] cdc_ncm 1-1:1.0: bind() failure [ 159.257306][ T5703] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 159.333330][ T5703] cdc_ncm 1-1:1.1: bind() failure [ 159.410805][ T5703] usb 1-1: USB disconnect, device number 12 [ 161.003741][ T6948] bond1: entered promiscuous mode [ 161.023399][ T30] audit: type=1326 audit(1778520769.351:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.086357][ T30] audit: type=1326 audit(1778520769.351:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.103950][ T6948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.175229][ T30] audit: type=1326 audit(1778520769.381:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.251936][ T30] audit: type=1326 audit(1778520769.381:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.295805][ T30] audit: type=1326 audit(1778520769.381:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.507815][ T30] audit: type=1326 audit(1778520769.381:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.559936][ T30] audit: type=1326 audit(1778520769.381:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.587561][ T30] audit: type=1326 audit(1778520769.381:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.651209][ T30] audit: type=1326 audit(1778520769.381:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 161.676798][ T6979] capability: warning: `syz.0.279' uses deprecated v2 capabilities in a way that may be insecure [ 161.741824][ T30] audit: type=1326 audit(1778520769.381:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.276" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d85d9cdd9 code=0x7ffc0000 [ 162.016517][ T5721] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 162.167599][ T5721] usb 4-1: Using ep0 maxpacket: 32 [ 162.179800][ T5721] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.198365][ T5359] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 162.212443][ T5721] usb 4-1: config 0 has no interface number 0 [ 162.228866][ T5721] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.255115][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.279045][ T5721] usb 4-1: Product: syz [ 162.299037][ T5721] usb 4-1: Manufacturer: syz [ 162.315591][ T5721] usb 4-1: SerialNumber: syz [ 162.341131][ T5721] usb 4-1: config 0 descriptor?? [ 162.359840][ T5721] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 162.369271][ T5359] usb 2-1: Using ep0 maxpacket: 8 [ 162.384691][ T5359] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 162.424394][ T5359] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 162.460900][ T5359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.490186][ T5359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.507824][ T5359] usb 2-1: Product: â ‰ [ 162.521658][ T5359] usb 2-1: Manufacturer: à°„ [ 162.554485][ T5359] usb 2-1: SerialNumber: syz [ 162.571577][ T5721] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 162.630260][ T5721] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 162.788315][ T6984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.829671][ T6984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.098970][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 163.101607][ T5695] usb 4-1: USB disconnect, device number 24 [ 163.187965][ T5695] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 163.262333][ T5695] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 163.313450][ T5695] quatech2 4-1:0.51: device disconnected [ 163.559959][ T6999] bond2: entered promiscuous mode [ 163.577148][ T6999] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.775126][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 164.324173][ T7020] loop2: detected capacity change from 0 to 7 [ 164.348274][ T7020] Dev loop2: unable to read RDB block 7 [ 164.374401][ T7020] loop2: AHDI p1 p2 p3 [ 164.395209][ T7020] loop2: partition table partially beyond EOD, truncated [ 164.424341][ T7020] loop2: p1 start 1818582900 is beyond EOD, truncated [ 164.453851][ T7020] loop2: p3 start 335544320 is beyond EOD, truncated [ 164.557083][ T7022] tipc: Failed to remove unknown binding: 66,1,1/4:4042884335/4042884337 [ 164.724067][ T7024] netlink: 'syz.3.290': attribute type 13 has an invalid length. [ 165.042037][ T5359] cdc_ncm 2-1:1.0: bind() failure [ 165.073573][ T5359] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 165.106375][ T5359] cdc_ncm 2-1:1.1: bind() failure [ 165.160064][ T5359] usb 2-1: USB disconnect, device number 15 [ 165.488394][ T7033] loop5: detected capacity change from 0 to 7 [ 165.537966][ T7033] Dev loop5: unable to read RDB block 7 [ 165.557332][ T7033] loop5: unable to read partition table [ 165.563641][ T7033] loop5: partition table beyond EOD, truncated [ 165.584484][ T7033] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.761692][ T7035] netlink: 32 bytes leftover after parsing attributes in process `syz.1.293'. [ 166.056652][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 166.226643][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 166.247768][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 166.262494][ T9] usb 2-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 166.288083][ T9] usb 2-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 166.317326][ T9] usb 2-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 166.341594][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.350241][ T9] usb 2-1: Product: syz [ 166.364164][ T9] usb 2-1: Manufacturer: syz [ 166.368984][ T9] usb 2-1: SerialNumber: syz [ 166.633987][ T9] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 167.303385][ T9] usb 2-1: reset high-speed USB device number 16 using dummy_hcd [ 167.744341][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.796730][ T9] usb 2-1: device firmware changed [ 167.821268][ T9] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 167.830170][ T9] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 167.861517][ T9] usb 2-1: USB disconnect, device number 16 [ 167.871231][ T5703] usb 2-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 167.893911][ T5703] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 167.933928][ T5703] ------------[ cut here ]------------ [ 167.946488][ T5703] !atomic_read(&kn->count) [ 167.946515][ T5703] WARNING: fs/kernfs/dir.c:560 at kernfs_new_node+0x1b5/0x210, CPU#0: kworker/0:5/5703 [ 167.961211][ T5703] Modules linked in: [ 167.965822][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 167.975638][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.986931][ T5703] Workqueue: events request_firmware_work_func [ 167.993734][ T5703] RIP: 0010:kernfs_new_node+0x1b5/0x210 [ 168.000721][ T5703] Code: 74 08 4c 89 ff e8 6b f6 c0 ff 49 89 1f 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 ae 3b 09 cc e8 bc b7 55 ff 90 <0f> 0b 90 eb 97 89 e9 80 e1 07 fe c1 38 c1 0f 8c 85 fe ff ff 48 89 [ 168.021665][ T5703] RSP: 0018:ffffc900041d7538 EFLAGS: 00010293 [ 168.027983][ T5703] RAX: ffffffff82700a14 RBX: ffff88807f4ca870 RCX: ffff88807ce15c40 [ 168.036115][ T5703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.044940][ T5703] RBP: 0000000000000000 R08: ffff88807f4ca873 R09: 1ffff1100fe9950e [ 168.053335][ T5703] R10: dffffc0000000000 R11: ffffed100fe9950f R12: 00000000000041ed [ 168.061959][ T5703] R13: 0000000000000000 R14: ffff888078251a50 R15: dffffc0000000000 [ 168.071071][ T5703] FS: 0000000000000000(0000) GS:ffff88812528d000(0000) knlGS:0000000000000000 [ 168.080404][ T5703] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.087186][ T5703] CR2: 000000110c360bc5 CR3: 000000007e4d4000 CR4: 00000000003526f0 [ 168.095255][ T5703] Call Trace: [ 168.098589][ T5703] [ 168.101646][ T5703] kernfs_create_dir_ns+0x44/0x130 [ 168.107177][ T5703] sysfs_create_dir_ns+0x12f/0x2a0 [ 168.112485][ T5703] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 168.118864][ T5703] ? do_raw_spin_unlock+0xf5/0x210 [ 168.124264][ T5703] kobject_add_internal+0x62b/0xd00 [ 168.129624][ T5703] kobject_add+0x163/0x240 [ 168.134341][ T5703] ? rcu_is_watching+0x15/0xb0 [ 168.139319][ T5703] ? __pfx_kobject_add+0x10/0x10 [ 168.144465][ T5703] ? __kasan_kmalloc+0x93/0xb0 [ 168.149550][ T5703] ? kobject_init+0x83/0x1e0 [ 168.154151][ T5703] get_device_parent+0x316/0x3a0 [ 168.159148][ T5703] device_add+0x2e1/0xbb0 [ 168.163635][ T5703] firmware_fallback_sysfs+0x2e4/0xa30 [ 168.169597][ T5703] ? kfree+0x1c5/0x640 [ 168.173686][ T5703] _request_firmware+0x1052/0x1780 [ 168.179062][ T5703] ? __pfx__request_firmware+0x10/0x10 [ 168.184665][ T5703] ? process_scheduled_works+0xa70/0x1860 [ 168.190564][ T5703] ? process_scheduled_works+0xa70/0x1860 [ 168.197073][ T5703] request_firmware_work_func+0xaf/0x1c0 [ 168.202825][ T5703] ? process_scheduled_works+0xa70/0x1860 [ 168.208712][ T5703] process_scheduled_works+0xb5d/0x1860 [ 168.214410][ T5703] ? __pfx_process_scheduled_works+0x10/0x10 [ 168.220488][ T5703] ? assign_work+0x3d5/0x5e0 [ 168.225187][ T5703] worker_thread+0xa53/0xfc0 [ 168.230096][ T5703] kthread+0x388/0x470 [ 168.234320][ T5703] ? __pfx_worker_thread+0x10/0x10 [ 168.239492][ T5703] ? __pfx_kthread+0x10/0x10 [ 168.244259][ T5703] ret_from_fork+0x514/0xb70 [ 168.249049][ T5703] ? __pfx_ret_from_fork+0x10/0x10 [ 168.254256][ T5703] ? __switch_to+0xc79/0x1410 [ 168.259081][ T5703] ? __pfx_kthread+0x10/0x10 [ 168.263769][ T5703] ret_from_fork_asm+0x1a/0x30 [ 168.268797][ T5703] [ 168.271994][ T5703] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.279292][ T5703] CPU: 0 UID: 0 PID: 5703 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full) [ 168.289350][ T5703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.299686][ T5703] Workqueue: events request_firmware_work_func [ 168.305943][ T5703] Call Trace: [ 168.309233][ T5703] [ 168.312261][ T5703] vpanic+0x56c/0xa60 [ 168.316437][ T5703] ? __pfx__printk+0x10/0x10 [ 168.321047][ T5703] ? __pfx_vpanic+0x10/0x10 [ 168.325641][ T5703] ? is_bpf_text_address+0x292/0x2b0 [ 168.331515][ T5703] ? is_bpf_text_address+0x26/0x2b0 [ 168.336899][ T5703] panic+0xc5/0xd0 [ 168.340737][ T5703] ? __pfx_panic+0x10/0x10 [ 168.345307][ T5703] ? ret_from_fork_asm+0x1a/0x30 [ 168.350472][ T5703] __warn+0x315/0x4c0 [ 168.354531][ T5703] ? kernfs_new_node+0x1b5/0x210 [ 168.359679][ T5703] ? kernfs_new_node+0x1b5/0x210 [ 168.364788][ T5703] __report_bug+0x29a/0x540 [ 168.369303][ T5703] ? __pfx_idr_alloc_u32+0x10/0x10 [ 168.374414][ T5703] ? kernfs_new_node+0x1b5/0x210 [ 168.379549][ T5703] ? __pfx___report_bug+0x10/0x10 [ 168.384750][ T5703] ? preempt_schedule_common+0x82/0xd0 [ 168.390213][ T5703] ? preempt_schedule_thunk+0x16/0x30 [ 168.395586][ T5703] ? bpf_lsm_kernfs_init_security+0x9/0x20 [ 168.401384][ T5703] ? security_kernfs_init_security+0x76/0x270 [ 168.407451][ T5703] ? __kernfs_new_node+0x64e/0x970 [ 168.412666][ T5703] ? kernfs_new_node+0x1b5/0x210 [ 168.417802][ T5703] report_bug+0x16a/0x220 [ 168.422500][ T5703] ? kernfs_new_node+0x1b5/0x210 [ 168.427462][ T5703] ? kernfs_new_node+0x1b7/0x210 [ 168.432506][ T5703] handle_bug+0x9c/0x200 [ 168.436750][ T5703] exc_invalid_op+0x1a/0x50 [ 168.441430][ T5703] asm_exc_invalid_op+0x1a/0x20 [ 168.446968][ T5703] RIP: 0010:kernfs_new_node+0x1b5/0x210 [ 168.452636][ T5703] Code: 74 08 4c 89 ff e8 6b f6 c0 ff 49 89 1f 4c 89 f0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 92 ae 3b 09 cc e8 bc b7 55 ff 90 <0f> 0b 90 eb 97 89 e9 80 e1 07 fe c1 38 c1 0f 8c 85 fe ff ff 48 89 [ 168.472683][ T5703] RSP: 0018:ffffc900041d7538 EFLAGS: 00010293 [ 168.478851][ T5703] RAX: ffffffff82700a14 RBX: ffff88807f4ca870 RCX: ffff88807ce15c40 [ 168.487628][ T5703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.495873][ T5703] RBP: 0000000000000000 R08: ffff88807f4ca873 R09: 1ffff1100fe9950e [ 168.504029][ T5703] R10: dffffc0000000000 R11: ffffed100fe9950f R12: 00000000000041ed [ 168.512647][ T5703] R13: 0000000000000000 R14: ffff888078251a50 R15: dffffc0000000000 [ 168.521508][ T5703] ? kernfs_new_node+0x1b4/0x210 [ 168.526464][ T5703] ? kernfs_new_node+0x1b4/0x210 [ 168.531588][ T5703] kernfs_create_dir_ns+0x44/0x130 [ 168.536703][ T5703] sysfs_create_dir_ns+0x12f/0x2a0 [ 168.542080][ T5703] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 168.548414][ T5703] ? do_raw_spin_unlock+0xf5/0x210 [ 168.554051][ T5703] kobject_add_internal+0x62b/0xd00 [ 168.559775][ T5703] kobject_add+0x163/0x240 [ 168.564288][ T5703] ? rcu_is_watching+0x15/0xb0 [ 168.569045][ T5703] ? __pfx_kobject_add+0x10/0x10 [ 168.573975][ T5703] ? __kasan_kmalloc+0x93/0xb0 [ 168.578740][ T5703] ? kobject_init+0x83/0x1e0 [ 168.583457][ T5703] get_device_parent+0x316/0x3a0 [ 168.588484][ T5703] device_add+0x2e1/0xbb0 [ 168.592820][ T5703] firmware_fallback_sysfs+0x2e4/0xa30 [ 168.598447][ T5703] ? kfree+0x1c5/0x640 [ 168.602544][ T5703] _request_firmware+0x1052/0x1780 [ 168.607776][ T5703] ? __pfx__request_firmware+0x10/0x10 [ 168.613254][ T5703] ? process_scheduled_works+0xa70/0x1860 [ 168.619008][ T5703] ? process_scheduled_works+0xa70/0x1860 [ 168.625602][ T5703] request_firmware_work_func+0xaf/0x1c0 [ 168.631405][ T5703] ? process_scheduled_works+0xa70/0x1860 [ 168.637376][ T5703] process_scheduled_works+0xb5d/0x1860 [ 168.642940][ T5703] ? __pfx_process_scheduled_works+0x10/0x10 [ 168.649263][ T5703] ? assign_work+0x3d5/0x5e0 [ 168.653876][ T5703] worker_thread+0xa53/0xfc0 [ 168.658503][ T5703] kthread+0x388/0x470 [ 168.662760][ T5703] ? __pfx_worker_thread+0x10/0x10 [ 168.668032][ T5703] ? __pfx_kthread+0x10/0x10 [ 168.672834][ T5703] ret_from_fork+0x514/0xb70 [ 168.677424][ T5703] ? __pfx_ret_from_fork+0x10/0x10 [ 168.682618][ T5703] ? __switch_to+0xc79/0x1410 [ 168.687302][ T5703] ? __pfx_kthread+0x10/0x10 [ 168.692063][ T5703] ret_from_fork_asm+0x1a/0x30 [ 168.696924][ T5703] [ 168.701903][ T5703] Kernel Offset: disabled [ 168.706357][ T5703] Rebooting in 86400 seconds..