last executing test programs: 10.662939979s ago: executing program 3 (id=803): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x7, 0x100) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000180)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x10, 0x20, 0x1, 0xb1, {{0x20, 0x4, 0x0, 0x36, 0x80, 0x67, 0x0, 0xb, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, {[@timestamp_addr={0x44, 0xc, 0xbb, 0x1, 0x9, [{@empty, 0x426}]}, @timestamp_addr={0x44, 0x34, 0xc8, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x39}, 0xd}, {@remote, 0x3}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@remote, 0x3d643487}]}, @noop, @rr={0x7, 0x23, 0x44, [@dev={0xac, 0x14, 0x14, 0x40}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, @remote, @broadcast, @local, @multicast1]}, @noop, @rr={0x7, 0x7, 0x4c, [@loopback]}]}}}}}) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x5}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/189, 0xbd}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x16, &(0x7f0000000540)=@raw=[@call={0x85, 0x0, 0x0, 0x8d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @alu={0x7, 0x0, 0x8, 0x0, 0x6, 0xfffffffffffffff8, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000200)='syzkaller\x00', 0x180, 0xf3, &(0x7f0000000600)=""/243, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x3, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000880)=r5, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/84, 0x54}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x0, 0x2}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x52, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131010000000000400012800e00010069703665727370616e0000002c0002801400050000000000000200000000bfff7f00000108001500b9c20a000400120005001699942495b1"], 0x60}}, 0x0) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c0002801800028008"], 0xec}}, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 9.736046766s ago: executing program 3 (id=805): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x500) 9.577223232s ago: executing program 3 (id=807): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x29) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0xf, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = io_uring_setup(0x1a8, &(0x7f0000000000)={0x0, 0xfca0, 0x2, 0x0, 0x274}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = socket(0x1e, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/38, 0x26}], 0x1}, 0x2174eda0}], 0x1, 0x1, &(0x7f0000000580)={0x77359400}) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) io_uring_register$IORING_REGISTER_RING_FDS(r4, 0x13, &(0x7f0000001bc0), 0x2) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000c0000000888224bea11a61115c000000000006002b00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0}) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 7.735141856s ago: executing program 1 (id=815): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x6a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x6, 0x800, 0xffff, {r2, r3/1000+10000}, {0x77359400}, {0x1}, 0x1, @canfd={{0x2}, 0x28, 0x1, 0x0, 0x0, "0301e17098e2de216fd9940ba2cdd94a0ed61dede6227cdcf4f5205274ab16f46fdc514825a5cc67d4cc0af22f6d2ddaba3fada65bb6989788546b611e37dc9a"}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}]}}}]}, 0x48}}, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x10280, 0x0) 7.605696419s ago: executing program 1 (id=817): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="86", 0x1}], 0x1}}], 0x1, 0x20004000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) unshare(0x2040400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x4, 0x0, [{0x321, 0x0, 0xffff}, {0xa2b, 0x0, 0x7fffffffffffffff}, {0x584, 0x0, 0xffffffffffff7fff}, {0x1dd, 0x0, 0x200}]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x2}}, 0x14) r9 = getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000180)={0xfffffff7, 0x800, {r9}, {0xffffffffffffffff}, 0x2, 0x3}) shutdown(r7, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000000400081001fff02000000200001801400040000000000000000000000ffffac1414aa060001000a"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@acquire={0x134, 0x17, 0x1, 0x80000000, 0x0, {{@in6=@private0, 0x0, 0x6c}, @in6=@remote, {@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfd}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {}, 0xfffffffd}, 0x80}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0x134}}, 0x0) 7.017912626s ago: executing program 1 (id=819): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0x5, 0x6, 0x7}, 0x1c) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0x5, 0x6, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xf44c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xc2c4b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000000080)=""/1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.453026444s ago: executing program 3 (id=822): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc038563b, &(0x7f0000000080)={0x0, 0x2, @start={0xffffff83}}) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000017c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x2b}, {@in6=@private2={0xfc, 0x2, '\x00', 0x41}, 0x2, 0x32}, @in6=@remote, {0x7, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x6, 0x9}, {0xfffffffffffff461, 0x0, 0x0, 0x10000}, {0x3, 0x2}, 0x70bd2a, 0x0, 0x2, 0x0, 0x0, 0x30}, [@algo_crypt={0x13, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e23, @in=@loopback}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) 6.368596702s ago: executing program 4 (id=823): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz0\x00', {0x8fad, 0x6, 0x0, 0x101}, 0x51, [0x7ff, 0x6, 0xfffffffa, 0x4, 0x5, 0xe5b, 0x9, 0xa, 0xfffffffd, 0x6, 0x6, 0xffffff44, 0x9, 0x4, 0x81, 0xd2a3, 0x7, 0x1, 0x7, 0x9, 0x0, 0x1, 0x3ff, 0xfc, 0x5, 0x6, 0x200, 0x483, 0x8, 0x6cf13da7, 0x2, 0xfffffff8, 0xfffeffff, 0x1, 0x10001, 0x9, 0x5, 0xd43, 0xfffffff9, 0x3, 0x7ff, 0x3, 0x1ff, 0x4e7, 0x5, 0x1800, 0x1ff, 0xffff, 0x101, 0x40, 0x80, 0xfffff306, 0xf7, 0x100, 0x2, 0x80000000, 0x1, 0x1, 0x6, 0x7fffffff, 0xfffffffe, 0xff, 0x814f], [0x400, 0x3, 0x4, 0x8000, 0xf, 0xc, 0x6, 0x14000000, 0x8, 0xef00, 0x1, 0x0, 0x0, 0x6, 0x9, 0x2, 0x9, 0x1, 0x7f, 0x0, 0x101, 0x101, 0x5250a71f, 0x1, 0xfffffff7, 0xc, 0xffffffff, 0x10001, 0xffff3f49, 0x9, 0xb2, 0x7, 0x5, 0x9, 0x7, 0x8, 0x2fa4, 0x8, 0x101, 0xfffffeff, 0x8, 0x9, 0x8, 0x6a, 0x451, 0x4, 0x0, 0x5, 0x2, 0x8, 0x6, 0xfd, 0x0, 0x2e8efac0, 0x0, 0xfffffffe, 0x6103, 0x6, 0x5b, 0x81, 0x1ff, 0x6, 0x6, 0x3ff], [0x4, 0x8, 0x8c7a, 0x7, 0x80000000, 0x3, 0x7, 0x1, 0x1, 0xd2a, 0x2, 0xd, 0x7, 0x0, 0x43b9, 0x9, 0x6, 0x6, 0x9, 0x9, 0xc9a, 0x1, 0x5a68713c, 0x6, 0x4fa9330a, 0x4, 0x2, 0x7ff, 0x200, 0x10001, 0xf01f, 0x45, 0x101, 0xe7, 0x3, 0x4, 0x200, 0x4, 0x3, 0x442c, 0xfffffff0, 0x8, 0x1000, 0x9, 0xa, 0x5, 0x236e, 0x6, 0x7fff, 0x6, 0xe, 0x1, 0x887a, 0x4, 0x4, 0x0, 0x101, 0x1000, 0x6, 0x5, 0x1, 0x9, 0x17e, 0x8b], [0x7, 0x600, 0x7fffffff, 0x9, 0x5, 0xbd21, 0x7, 0x7fffffff, 0x5, 0xc, 0x2, 0x7fff, 0x1, 0x0, 0x8, 0xc, 0x4, 0x1a5, 0x4, 0x6, 0xb0f, 0x4, 0x4, 0x5, 0x6, 0x4, 0xff, 0x7fff, 0x3ff, 0x0, 0x1185, 0x640e, 0x9, 0x3, 0xf, 0x7, 0x7, 0x9, 0x1, 0x6, 0x3, 0x1, 0x9, 0x400, 0x5d4, 0x10000, 0x200, 0x40, 0xf, 0x9, 0xa8d1, 0x7, 0x3, 0x80000000, 0x7, 0x400, 0xf7, 0x7fff, 0xffffff4b, 0x7f, 0x10001, 0x1, 0x8, 0x2]}, 0x45c) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x3, 0x1, 0x0, 0xfdfdffff, 0x4}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0xff}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000080)={@loopback, @multicast1=0xe0000020, 0x1, "d64724f6257e43b341dc333940c1ca0000000000002000", 0xffffffff, 0x0, 0x5, 0xc3b}, 0x3c) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x5, @vifc_lcl_addr=@remote, @loopback}, 0x10) pipe2(&(0x7f0000000080), 0x80) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 6.162988014s ago: executing program 4 (id=824): r0 = socket$inet(0x2, 0x1, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SNDCTL_DSP_RESET(r5, 0x5000, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000100)={0xd000, 0x0, 0x8}) unshare(0x4000400) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000780)) setns(r7, 0x20000000) socket$netlink(0x10, 0x3, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x87, 0x34, 0x8e, 0x40, 0x2040, 0xb980, 0x4b77, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x8, 0x0, 0x0, [{{0x9, 0x4, 0xd, 0x0, 0x0, 0xb0, 0x68, 0x1}}]}}]}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_SIOCGIFCONF(r1, 0x890b, &(0x7f0000000000)=@req={0x28, &(0x7f0000000080)={'gre0\x00', @ifru_flags=0x100}}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="fd3ced91b0687a343d33bc44822f54b7d0552d4f0496902fea660200000067c51cd501b7b25b506df30b9931dbf12d19366b922fa0d2d9565162a2021ec2174f98bf1111fc2ffb0b3eb847e4094699", 0x4f) 6.045335186s ago: executing program 2 (id=825): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000040)={0xd, 0x7, 0x2, {{}, 0x1b50}}, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$hidraw(&(0x7f00000000c0), 0xfffffffffffffff8, 0x428000) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000100)) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x25}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x8}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x3}}, @NFQA_CFG_MASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000240)={0x2, "5336058523fbd58fdc62e57bb894377fb692b35eb99ea0436319978043fbe1f40a818499c97ba8a749aaafb1aa251feb3f2ef7cf2e6534ee101cc641f9045e00"}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = accept4(r5, &(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x80, 0x800) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f00000005c0)=@buf={0x39, &(0x7f0000000580)="65ba38eb30522a57e57a623ac1cc002761ab5c7f64860ba73bfebf4beb18acb50f8e41de14a8c068512ef0648e062a44cd0e8fdb75487dce00"}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_int(r0, &(0x7f0000000600)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000640)=0x100, 0x12) write$P9_RFSYNC(r1, &(0x7f0000000680)={0x7, 0x33, 0x2}, 0x7) accept4(r7, &(0x7f00000006c0)=@generic, &(0x7f0000000740)=0x80, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$cgroup_ro(r8, &(0x7f0000000780)='rdma.current\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r10, &(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r10, 0xc0045520, &(0x7f0000000800)=0xb) socket$kcm(0x29, 0x2, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000840)=0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000880)={0x0, 0x0, 0x3, [0xc, 0x3, 0x4]}, 0xe) r11 = accept4(r2, &(0x7f00000008c0)=@hci, &(0x7f0000000940)=0x80, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000a, 0x4010, r11, 0x7cb47000) fspick(r10, &(0x7f0000000980)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$F2FS_IOC_GET_PIN_FILE(r12, 0x8004f50e, &(0x7f0000000a00)) 5.870804022s ago: executing program 2 (id=826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0) 5.823104672s ago: executing program 1 (id=827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x88}}, 0x0) (fail_nth: 1) 5.189666424s ago: executing program 2 (id=828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe94, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe68, 0x2, [@TCA_FW_ACT={0xe64, 0x4, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xdcdc, 0x5fa8, 0x3, 0x839, 0x7}, 0x7, 0x91}, [{0x4, 0x2, 0x5d0, 0x8, 0x100, 0xfd}, {0x9, 0xf2, 0x688d, 0x7, 0x1, 0x2}, {0x7f, 0x8, 0x0, 0x400, 0x2557, 0x462}, {0x2, 0x0, 0x8001, 0x56cc, 0xc9}, {0x8001, 0x6, 0x7f, 0x5, 0x7fff, 0x7fffffff}, {0x2, 0x7ff, 0xfffffffe, 0x7, 0xfffffc00, 0x3}, {0x8, 0x710, 0x80000001, 0x6, 0x4, 0x3000000}, {0xc000000, 0x400, 0x80, 0x100, 0x3, 0x12}, {0x6, 0x0, 0xa, 0xfffffffe, 0x7, 0x6}, {0x0, 0x2, 0x0, 0xff, 0x67, 0x5}, {0x0, 0x80000000, 0x0, 0x4, 0x9, 0x1}, {0x6, 0xd7, 0x2e, 0x56d, 0x4, 0x80000000}, {0x8001, 0x6, 0x1, 0x1, 0x4, 0x9}, {0x3, 0x3, 0x200, 0x7ff, 0x273, 0x2207}, {0x332400, 0x2, 0x5, 0x4d1, 0xfffffffe, 0x2}, {0x7, 0x6, 0x4, 0x5, 0x1, 0x2}, {0xe, 0xfffffffb, 0x7, 0x3ff, 0x4, 0x8}, {0x5, 0x7, 0x1, 0x1, 0x3ff, 0x3ff}, {0x0, 0xffff0001, 0x9, 0x102, 0xa0a, 0x5}, {0x7, 0x4, 0x13ca4b9a, 0xfffffffa, 0xffff, 0x9}, {0x1, 0x2, 0x7fffffff, 0xfffff8f4, 0x7, 0x200}, {0x0, 0x0, 0x40, 0xffff352c, 0x5, 0x6}, {0x200, 0x3, 0x34e, 0xc, 0x4, 0x1}, {0x1, 0x9, 0x1, 0x8, 0xe163, 0x72e00000}, {0x9ee4, 0x52d, 0x5, 0xe4ffffff, 0x7, 0x5}, {0x9, 0xda, 0x0, 0x5, 0xf, 0x7}, {0x4, 0x6e, 0xa, 0x8, 0x826, 0x5}, {0x9, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x8}, {0xff, 0x131e, 0x5, 0x9, 0x3}, {0x6, 0x8, 0xd781, 0x7, 0xdce0, 0x101}, {0x0, 0x1ff, 0x0, 0x9, 0xfff, 0x8}, {0x8, 0x6, 0x6, 0x4, 0x69, 0x5149dc08}, {0x1, 0x0, 0x6, 0x101, 0x8, 0x18000}, {0x0, 0x9, 0x1, 0x5, 0xc}, {0x3, 0x9, 0x9, 0xe68, 0x2, 0xffff}, {0x9, 0x62, 0xe2f, 0xa, 0x44, 0x7}, {0xfffffff9, 0x7f, 0xffffffff, 0x3, 0x341, 0x3}, {0x6, 0x6, 0x4, 0x40000, 0x2, 0xa155}, {0x6d3, 0x3, 0x9, 0x9, 0xfffffffd, 0xfffffffa}, {0xd47, 0x3ff, 0x800, 0x40, 0x80000001, 0x4}, {0x5c2e, 0x8, 0x0, 0x76, 0x7}, {0xac77, 0x5, 0x0, 0x101, 0xb2a, 0x1ff}, {0x8, 0xfffffffa, 0x8, 0x4, 0xf771, 0x800}, {0xc, 0xfffffc01, 0x2, 0x4, 0x6, 0x1}, {0x4, 0x8, 0x149, 0xfffffff7, 0x2, 0xfff}, {0x8000, 0xd, 0x1, 0x101, 0x6}, {0x1000, 0xfffffffb, 0x268f, 0x80000001, 0xdf, 0x4}, {0x4, 0x0, 0x101, 0x1, 0x7, 0x9}, {0x9, 0x3, 0x20004, 0x0, 0x9, 0x8}, {0x400, 0xfe8, 0x5, 0x112, 0x10001, 0x7ff}, {0x4399, 0x0, 0x8, 0x2d1, 0x3ff}, {0xd8d2053, 0x7fffffff, 0x401, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x205, 0x8, 0x6, 0xe7e1}, {0x550, 0x200, 0x342, 0x9, 0x8, 0x7}, {0x2, 0x7fffffff, 0x0, 0x8, 0x800, 0x3}, {0x4, 0x6, 0x3, 0x2, 0x2, 0x2d}, {0x1, 0x5d9, 0x4, 0xffffffff, 0x9, 0xac}, {0x7, 0x6, 0x7, 0xff, 0x4, 0x3}, {0x0, 0x5c6c, 0x8, 0x2, 0xffffffff, 0x4}, {0x40, 0xaa, 0x4, 0x6, 0xfffffff8, 0x3}, {0x0, 0xfffffffd, 0x7e0, 0xc, 0x7, 0x401}, {0xffff, 0x3, 0x5, 0x8, 0x47, 0xf9d}, {0xfffffbff, 0x0, 0x4, 0x0, 0x9, 0xffff}, {0xffffffff, 0x6, 0xfffffffa, 0x2, 0x8000, 0xbde}, {0x6af, 0x8001, 0x7f, 0x7, 0x7, 0x516}, {0x33, 0x8, 0x7, 0x8, 0x2, 0x80000001}, {0x9, 0x2, 0x9, 0x8000, 0x8, 0x3}, {0x6, 0x9, 0x6, 0x400, 0x1, 0xf}, {0xd424, 0x3, 0x7, 0xec, 0x3, 0x4}, {0x7, 0x7, 0xd7a, 0x80000001, 0xb137, 0x5}, {0xdcb, 0x10000, 0xe1, 0x6, 0x4, 0xfffffffb}, {0x4, 0x5, 0x3, 0x8, 0xe, 0x7}, {0x10000, 0x6, 0x80, 0x2, 0x8, 0x6}, {0x0, 0x4, 0xc779, 0x33000000, 0x100, 0x800}, {0x1000, 0x800, 0x0, 0x101, 0x4, 0x6}, {0x2, 0x101, 0xb, 0x5, 0x5399, 0x4f4}, {0x5, 0x2, 0x7, 0x7, 0x1, 0x5}, {0x800, 0xde, 0x9, 0x6, 0x7, 0x3ff}, {0x1, 0x6, 0x2, 0xfffffff7, 0x0, 0xfffff000}, {0xfffffe01, 0xdc76, 0x1, 0x2, 0x2, 0xf}, {0x9, 0x1, 0xcf69, 0x0, 0x457, 0x1}, {0x0, 0x573, 0x4, 0x5, 0x5, 0x4}, {0x6, 0x1, 0xeb1, 0x80, 0xe6, 0x5}, {0x1ff, 0xa601, 0xffff7fff, 0x5, 0x100, 0x4}, {0x5, 0x2, 0x87d, 0x2, 0x8, 0x9627}, {0x81, 0xffff, 0x4, 0xee46, 0x4, 0x6ed}, {0xa4, 0x30000000, 0x200, 0x9, 0x2f056e5b, 0x4}, {0x3, 0x7, 0x3, 0x7fffffff, 0xd, 0xd}, {0x6, 0x6, 0x4, 0x100, 0x200, 0x8}, {0x40, 0xd00e, 0x22c, 0x2133ecfa, 0xffffff81, 0x1}, {0xfffffe00, 0x2, 0x10, 0x7f, 0x200}, {0x6, 0x10000, 0x4000, 0x3, 0xfb23, 0x8}, {0x8, 0xfff, 0x2, 0x7, 0x4, 0x3}, {0x8001, 0x4, 0x3, 0x1, 0x4, 0x17e3862}, {0x1, 0xe, 0x6, 0x5, 0x4, 0x1}, {0xcb67, 0x7, 0xc08c, 0x1, 0x3, 0x101}, {0x7, 0x401, 0x37, 0x3, 0x1, 0xe85}, {0x7fffffff, 0x1, 0x3, 0x10001, 0x3}, {0x8, 0x2, 0x59211cb1, 0x9, 0x1, 0x4}, {0x6, 0x3, 0x1, 0x7, 0x7, 0x100}, {0x7, 0x4, 0x2, 0x6, 0x400, 0x7}, {0xe, 0x6, 0x24, 0x3, 0x5, 0x1ff}, {0x1ff, 0x3fb, 0x2, 0x5, 0x7fff, 0x4}, {0x3ff, 0xa81, 0x5, 0x0, 0x5, 0x6}, {0xc, 0x76, 0x0, 0x2d0f3c09, 0x1, 0xbe9}, {0xffffbfb8, 0x7fff, 0x0, 0x1450e18f, 0x68c12bef, 0x6}, {0x4, 0x0, 0xc, 0x69, 0x6, 0x9}, {0x10, 0xf09, 0x1, 0x4, 0x1, 0x5}, {0xfffffffc, 0x9, 0x5, 0x4, 0xca, 0xffffffdf}, {0x0, 0x3, 0x8, 0xcf2f, 0x2, 0x1}, {0x7fff, 0xc9, 0x82, 0x6, 0x5}, {0x7, 0x4, 0x9, 0x5, 0x2, 0x9}, {0x4516, 0x3, 0x0, 0x8, 0x4, 0x1000}, {0xe4, 0xd, 0x8001, 0xc84, 0xc, 0x3}, {0xfffffffa, 0x0, 0x3, 0x9, 0xffff0000, 0xffffffff}, {0x400, 0x5, 0x9, 0x1, 0xd, 0x3}, {0x1, 0x2b, 0x5, 0xfffffff1, 0x3, 0x1}, {0x7fffffff, 0x5, 0x9, 0x80, 0x9, 0xd450}, {0x20000, 0x7ff, 0x61, 0x4, 0x8, 0x7}, {0xff, 0x1, 0x1, 0xa68b, 0x10, 0x60000}, {0x8, 0x0, 0x8, 0xf7f, 0x5, 0xfffffff8}, {0x28e, 0x1, 0xff, 0x6, 0xb3f2, 0x1}, {0x7, 0x4, 0x400040, 0x4, 0x9, 0x2}, {0x9, 0x8, 0xd, 0xe, 0x3, 0xd842}, {0x8, 0x8, 0x7, 0x0, 0xfffffff1, 0x2}, {0xffff9c2f, 0x84d, 0x4, 0x400, 0x7, 0x58}, {0x3, 0xffffffa2, 0x6, 0x0, 0x8, 0x1ff}, {0x8, 0xc1, 0x9, 0x1, 0x7ff, 0xff}], [{0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {0x1, 0xffffffffffffffff}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x5}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x4}, {0x4}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {}, {0x2}, {0x2}, {0x5, 0x1}, {}, {0x3}, {}, {0x5}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x4e2ac20550e7fa09}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2}, {0x5}, {0x3}, {0x4}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0xf, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {}, {0x2}, {0x1}, {0x3}, {0x5}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x0, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xa0c7cfeff3d3347d}]}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.186038325s ago: executing program 1 (id=829): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0x0, 0x2000001, 0x0, 0x0, 0x4, 0x1}}) socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902"], 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000080)="2e108ea768f2db304683775a7f2cdf7ffa698c7167ab83db04d28f0e5632c605f4734f06bebd0d199085a560180c17772accc042d8424f4c6855c70c0a7724b76ed37cddc52391b1256f2e7a5c8defcca76dd0a006fb04e0770ac1f3e07f527beaaba2fe205384f0ec0d0a00", 0x6c}], 0x1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="4016fb000000eaf62cbe9095752fb3392f1cc68561fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003d0007ff0f00000000000000037c000004"], 0x18}}, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x478) fsopen(&(0x7f0000000140)='vfat\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r7, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 4.806773368s ago: executing program 2 (id=831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x5, 0xb, 0x1, @mcast2, @empty, 0x20, 0x80, 0x1000006, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x44, 0x3ff, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x1, 0x200001, 0x1ff}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="000129bd7000fddbdf251600000020000180140002007465616d30000000000000000000080001000000db77f82d285c7ee22632b267363a7b387107ef60b2efd6d67e4c39e75f356b49872b01a9e8261f04a0ce08adfdd53d160261032240fa2635f8e3981e44544104fa30df0a8fbe318a7bfc037cb41a372a0bded033fa93d14165", @ANYRES32=0x0, @ANYBLOB="05000300000000000500020001000000050003000000000005000200010000003000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="14000200776c616e3000"/20], 0x84}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x20]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x14b941, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab701020301090212000100000000090400000006000000"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2840010300000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'gretap0\x00'}) r10 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f00000011c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="e8f4fb8b7628491f272707827e7d5b18625d917bf787574d96a430b4ff3b2188307cc57fc5ebfd6f8aca179a30d2741ddc556406592f94c274e25f3dcec3124d0305f9aecc9f112132a3607f114d25f6467a1d9f97fda98c4de4a7e70cee7996e204f420b58d6b48ad88e0a9e77770706169032514e7b738882fb05b07a4f711cb42429ce1738ad4ff6c6c30e93f972da21fd069fd2aabf30416f0438d25b63226dad482d83bfe9fa7d7b7e9049738bb1f5369905ffe67e50090017d86143445f56220", 0xc3}, {&(0x7f00000023c0)="3a4f9426fb2889025b221daaa80c29afdc6df7ed07213ff61ac3bc30f354aab074f116ae47669ab684af13f012598b2471743bc35f4a4f7b21875680ed6c3968717851cf6bebb2e94f46eb67a226a33dc061305581ac28186e0f14f7fcdd7b3b9bfb5252c64c71c7cf18e5c11b7f78a80a23b100c5e7df57bb8b1abb158033bd44a23b8dc60a5f1239e42a697cba1d24b1b3fd14ac4e4f7a68ddea06853c9d8fcabe4800"/175, 0xaf}], 0x3}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r11) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r12, &(0x7f00000000c0)=""/4096, 0x1000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) 4.805891144s ago: executing program 0 (id=832): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/42, 0x2a) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x4004551e, &(0x7f0000000140)={0x0, 0x0, "7da046dc02e5b62e78c14b725ca7f19907a99aab4810bf036efc2530653612031ae2e7d4cecf208a26253d61e08ecbf63439944da1206a4a75c61e590f68d3d0e72bc39efb072acdd44a1270eaa016ca30e85907bb70f16ffe70d35c68edc4fdc288f58acc1fbb1694fe895b64ab35a80455c3337fcf066013ea47b949388dd6bf4b81eff76dd1c5bba45307d0809ca1120534fb2a259395d6973af5ab9e78a8141bfa999e49df4393de21c0b21c0250f07399415841c344949a51f4d4dcfa4613f922654a9f382837c7fde6dd61c862fecebe93619a922900"}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = getpgrp(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000080)={r5, 0x1, 0x80}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}]}]}]}], {0x14, 0x10}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.831525457s ago: executing program 0 (id=833): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a0500000000000000ff00010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000010900010073797a3000000000140000001100010000"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6c3d5", @ANYRESOCT]) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c0020060020010000000000000000000000000001fe8000000000000000000000000000aafffe4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002fffd9078000001fe08f989adb18d07000000785f0a2d4ccd7c2cf22f3960b150abc410eb75dc3f19ca9ae2cdc073404f18c17c805834832ead1abf8074ede3aa7bce84698581a70249fd1270ea3ed1d8607141f1e524b639b7cc952d3871033c3fd72f71e07e35"], 0x0) r3 = io_uring_setup(0x40b0, &(0x7f0000000080)={0x0, 0xe9ce, 0x2, 0x20001, 0x175}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.636006488s ago: executing program 0 (id=834): getresuid(&(0x7f0000000000), 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x9e92, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0xa, 0x4, 0x0, 0x6, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000080)={'team_slave_0\x00', 0xff}) 3.511067136s ago: executing program 0 (id=835): socket$inet6(0xa, 0x3, 0x8000000003c) creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="200006"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0085}, 0x14) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008fcc0920e80401a18e800102030109021b0001000010000904810001ffef529800"], 0x0) 3.151452228s ago: executing program 3 (id=836): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x0, 0x5c8cff7d, {{0x33, 0x4, 0x3, 0x7, 0xcc, 0x67, 0x0, 0x84, 0x29, 0x0, @private=0xa010102, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x47, 0x3, 0x6, [{@private=0xa010100, 0xbc8}]}, @end, @ssrr={0x89, 0x17, 0x71, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @empty]}, @rr={0x7, 0x7, 0x9e, [@local]}, @end, @ssrr={0x89, 0x17, 0xf6, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}, @end, @timestamp_prespec={0x44, 0xc, 0x5e, 0x3, 0x8, [{@private=0xa010101, 0x5}]}, @timestamp={0x44, 0x28, 0xbf, 0x0, 0x2, [0x8000, 0x1, 0x80, 0x7fff, 0x5, 0x6, 0x9, 0x8, 0x7]}, @ssrr={0x89, 0x1b, 0x89, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @local]}, @cipso={0x86, 0x1e, 0x3, [{0x2, 0x5, "e0ec27"}, {0x0, 0xf, "c85fe72d6af8d619d1989e4142"}, {0x2, 0x4, "b73f"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x20, 0x80, 0xe, 0x889c, {{0x5, 0x4, 0x1, 0x1f, 0x14, 0x68, 0x0, 0xfa, 0x29, 0x0, @multicast1, @broadcast}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff000000000000000000000000000000001234b2630e2ae8c3f4aec386e11b40d3ed45fa26216cd7e8aa960b9f359e0550475ca80bb68b95297b3a9fc24eba456260d9f1156d42b0590911d614e3b6b9365abcf600b69e47165aab70d6305c546339dc12a34ee282d47882f4e128943b34b0acb4def13c2c1586fe0471353090bb1d1bc8dedd3e7a83eeea0c26498c417df64658ac0ccfe765afa9b3f529548528e546e2e3bf8e32e9bc49b07003d0e2e30c73", @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44008) syz_emit_ethernet(0x54, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) futex(&(0x7f0000000140)=0xfffffffc, 0x5, 0x0, 0x0, &(0x7f00000001c0), 0xfffdffff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1000000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffffc}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) sendmmsg$inet6(r5, &(0x7f0000003cc0), 0x0, 0x4001c00) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r8, 0xc040563d, 0x0) 3.020903283s ago: executing program 4 (id=837): socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000240)={r5, 0x2}, 0x8) r6 = epoll_create1(0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f0000000340), 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8084) socket$netlink(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r9, &(0x7f0000000000)='./file0\x00', 0x5) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x837d8000) 1.74691986s ago: executing program 1 (id=838): syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mq_notify(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407900060000000000000109022408010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="6006a50000"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="6006a50000"], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/90, 0x5a}], 0x2}, 0x40000000) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/90, 0x5a}], 0x2}, 0x40000000) 1.482232839s ago: executing program 4 (id=839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) unshare(0x26020480) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="03", 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xec) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000005c0)="01000000020001000003be8c5ee17688a2", 0x11) sendmsg$tipc(r8, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000014d000012228bd74e29e8116130153c3a1", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000040000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf9800000000000056080000000000018500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r12, 0x0, 0x7}, 0x18) r13 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0xaf, "cb6db32ca5c9d1c2a05af5b87284853580b8b99922449d70627ee19b3bdb7dd54c3b4b7183bef0866936322052f703583c2d95afeffd3a12ff36f63f676c1cb3b4d74086ef5483a47f3d852b85eee9aa645a8ed7c91264553559c2062e11273fe211b711e7134f8969a47d57927c745b5528d59f746a0c4ed4286ce409a295f61fe1e2fa4d321320091140b1fed7e97df984c8b3a71c30e6fcc2eb7a87440d8deee1e2701fc95bccff2980dc375018"}, &(0x7f00000000c0)=0xb7) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r13, 0x84, 0x1, &(0x7f0000000180)={r14, 0x9, 0xc1, 0x3, 0x7, 0x8}, 0x14) 1.264881115s ago: executing program 3 (id=840): r0 = socket(0x10, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYRES8=r0, @ANYRESHEX=r2], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x42002, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000140)=""/67, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x1000000000000202, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04050004c900034e6edd7718451829d3fb4c94274bdef198a8e7b11b09930f43de7d2bed210af0efdb89916e445b696b1710112e172631bcb0fb288c35d09aca900f70a2145bfc60b1d6a464af2e3e8cc0a5cc20dd9a32ec9fbbc30c3acf79c1e5f8138192feba7a0c78786976dca7e5dc2acd7195a6bf40c0ece947ffab887eb038fd82ea61053323fefa58d19f032b1bab30908830b6358dcbde2fe71b02f52380cb12edbc8d8a6887252d6c3b20bd4bad0000000000000000000000000003d35b092ee67cfaec2b5ad19b8c650b4f0c78cc7b081d0ba29734c3eb8a96e6b9df5682d424"], 0x7) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x1, 0x70, 0x8, &(0x7f0000000080)={0x10, "34e7ea6ca7e281034aff71328cfa511a8d8765647764932868b7855947e830d648"}}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x676bf28b, 0x9, 0x8, 0xffffffff, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setgroups(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESOCT, @ANYRES16=r5, @ANYRESOCT=r6, @ANYRES32=r3, @ANYBLOB="22b18f08d4dd749ad159ff6e693234cfb23ef3fc4875a84fc1912cb678e64bbfdaf9522108a0a08c9e1cc05126b31a78d8aeab620b7ae0824a0779d5ead993acd614652550707a09d45235978955ed76ee16e0c2b84fc00754ae5dd82adbf03be8bf16372358a542713e947361"], 0x1f8) 1.214599653s ago: executing program 2 (id=841): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0x4, 0x7, 0x2}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, &(0x7f00000000c0)=""/159, &(0x7f0000000180)=""/154, &(0x7f0000000240)=""/83, 0x6000}) futex(&(0x7f0000000300), 0x2, 0x0, &(0x7f0000000340)={0x0, 0x989680}, &(0x7f0000000380)=0x1, 0x2) ioctl$TCGETA(r0, 0x5405, &(0x7f00000003c0)) r2 = getpgid(0x0) r3 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000400)={0x2, 0x1c2, {r2}, {r3}, 0x7fffffff, 0xde5a}) sched_getaffinity(r4, 0x8, &(0x7f0000000440)) r6 = syz_open_procfs(r4, &(0x7f0000000480)='net/vlan/vlan0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000500)={{0x3, 0x0, 0x6, 0x1, 0x1}, 0x0, 0x6}) r8 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x8, 0x2a0541) preadv2(r0, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/249, 0xf9}, {&(0x7f00000006c0)=""/135, 0x87}, {&(0x7f0000000780)=""/194, 0xc2}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/50, 0x32}], 0x5, 0x8, 0x4, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r6, 0x4068aea3, &(0x7f0000001940)) r9 = socket$netlink(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f00000019c0)={0x0, 0xffff, [0x20, 0x7, 0x6, 0x7, 0xfb5, 0x800]}) epoll_pwait(r6, &(0x7f0000001a00)=[{}], 0x1, 0x3, &(0x7f0000001a40)={[0xf54]}, 0x8) r10 = socket(0x8, 0x80000, 0x2) openat(r6, &(0x7f0000001a80)='./file0\x00', 0x101142, 0x44) getpgrp(r2) r11 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r11, 0x4b72, &(0x7f0000001ec0)={0x1, 0x1, 0xa, 0x8, 0x9c, &(0x7f0000001ac0)}) quotactl_fd$Q_SETQUOTA(r7, 0x0, r5, &(0x7f0000001f00)={0x1, 0x16eb, 0x7, 0xa, 0xb, 0x8001, 0x200, 0x8, 0xfffffffc}) ioctl$HIDIOCGRAWNAME(r6, 0x80404804, &(0x7f0000001f80)) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000001fc0)={"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"}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002400), r9) sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000002780)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002740)={&(0x7f0000002440)={0x2fc, r12, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x73, 0x3, "8c49cd8b322399672cddc51d045870ff1463d5ef024fadd047bcbd21c57ea9cd823235f26f2065dbdb80f437f286cae4fb3a3c396c3bdd5e06d59f34906d8230c7d2a95652fb6d52f051e8639f13a552a13d0e0b90c905c10983132313f557d9d443c115df619799a4d163b9296abf"}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "a4014fb244bd30041e7ef6c31217445b334411e26805485526c77c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x7b, 0x3, "571732ac55568545c4dab3b17c4730711012d29448832ef110df8603370d460917e3db88913d819880b97a327598a37a6987e850a63c8833bd312f4bace3449bd7a5f7c51689e89bc621da0f2195d759b03fb6cc9b93bf8733d67ec7bc22b75fcc28d0602d844e374ab312cc6ebf541c5e34765bbfbd73"}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "80b07fe72ea554ec88a490ddabb2917c875c099ebd"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "ad08117db0032037222453832a359867fdb93765e4784b"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x69dfb53da7f2f349}, 0x8004) read$fb(0xffffffffffffffff, &(0x7f0000002800)=""/211, 0xd3) 1.204779523s ago: executing program 4 (id=842): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$kcm(0x29, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) r4 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5pC\n\x00p\xf0\b\x84\xa2m\x00\v\x18\x004y\xa3y\xdb\xd1\xa7\xf1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=P\x03\xcdJ\x04K\x98\xaeph\xc9?\xa0[\xb1\xc8`\xcc\xd8\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\x06\xb2\xcc~\x95\xdf\xe7\xe5\xaeLl\x86(\xec\xac\xe33\x8a\x11\xd3\xfb\x9b\x1b,C\x05\xa4\x88I\xe1,W\xd7\xfcA\xa0\x06\xc3\xbc0\xf4\xfd\xcc\x8d\x01k|B2{ZVU&\xe8\xfd\xd0\v\xdb\xc8\x98\xd2\xd1\xcf8%d-\n\x971\xa8\xe2\xc1\x9fH\x9e\x8a\xfbSe\x1b\x97\xed\x18\x8f\x1a\xc1s,\xe7\x89\xbb\x1dU\f\xc1\x9682\xa4\x12u\xaa\xb6\xdel\x14\xdap\bA\xa7w\xd9\xff\v\xd0)\xc3\xfb|\xba&\xf5\xe4k\xec7u\xb3\xd1\fv^\x0ei\xd5\xd8\xda0$l\x9b\xc1\x89eu\xba\xfa\xd3/>@\xdb\xaa \a\xe1\x1a\xdc|\xb3\xe8\xa4\x06\x91s\x17{:\xfb\bw\xb0V\x97\xe0j\xee~\xa6eV\x0f\x94|\xdc\x13jQ\xc0`\x90\x80cfW^p]~kL\xcbh\xb4o8\xbe\xc2\x17\xb1\x9d\x1f\b<\x18\xee\xea\xbe\xcbG\xf7H\'f@F\aO\x830&\xab^\xa3\xe0\x1c\xa0\xe2\xf4?\x02!zJ\n\x11\x86\x86\xc9\x16\x10\x16\'Q\x7f\xd3\xd4\xe6\xfe\x89S\x8cw\xca\xce\x00\x00\x00\x00\x00\x00\x00\x00\x00]7\xb7\xc4\x866x2MQ2\xb5\xda\x19\xf8\xc0\xeaT\xc0-\xd3h\xcd', 0x0) fallocate(r4, 0x0, 0x2, 0xa) sendfile(r3, r4, 0x0, 0x200) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000140)={r1, r3}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000180), 0x6, 0x2000) fsetxattr$trusted_overlay_redirect(r8, &(0x7f00000001c0), &(0x7f0000000200)='./file0/file0\x00', 0xe, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x200007, 0x28a40) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x100003, @mcast2, 0x8}}, 0x24) listen(r0, 0xfffffff7) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x80, 0x9, 0x5}) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r5, &(0x7f00000000c0)=0x58, 0xa) 1.119756574s ago: executing program 2 (id=843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt(r1, 0x5, 0x9, &(0x7f0000000140)=""/166, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x200007, 0x28a40) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0xfffffff7) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0xa) 256.497589ms ago: executing program 0 (id=844): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x38, "4d26768012e32aebcfd04983e65be50f7cee2e9a0197afd2fa0eafdcbac24ecfe110c450e683049cf6204ac6116cfd48e8263646672140de"}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac13000100000000000000000000000000000000000000000a0020"], 0xb8}}, 0x0) 75.061735ms ago: executing program 4 (id=845): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="8a", 0x1}], 0x1) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x3ff, 0x1c800) pwritev2(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="497defa048ca439b542d9cddf6677e69ac51db839332c92ab845403eed0b47dbc3485e4aab5ae7d8478689d439323493986b25deffefc8a8767e7f1ac9dc4e3be2b938e34388c075cab6243d5d292a153dc5914f89733ab995f06ad77c4f3511ea0ce0b8958acf", 0x67}, {&(0x7f0000000140)="070cba0bc837fb6a14e7cd3ec3d7f4be92a9a8cb023c785a4bde257e28e7a501bca158442d74fd35c9c306d8fb4afe596a48f8529a6a884821e8470bd8205bea366f4a203181886da92259731122b929e060311f32f83cc48a47fdd5f704658adf6e602b93e6ac901780254a548d39c714fefdfe73428749e23f88f325", 0x7d}, {&(0x7f0000000280)="01309acce4fc5828e60597c550691a13b28ee0680275d067ea467bf981d850d8aec760f4c79438739e97850298381480620c493d99985e6931865b02a93faa35034c66311b45f3a2885899f3d6b559", 0x4f}], 0x3, 0x3b2cda7b, 0x5, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000080)={0x3, 0xfff, 0x5, 0x5, 0x1000, 0x0, 0x10}) 0s ago: executing program 0 (id=846): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x4b0, 0x2a8, 0x1b4, 0xac, 0x3a0, 0x1b4, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'ipvlan1\x00', {0xff}, {}, 0x11, 0x2, 0x42}, 0x0, 0x70, 0xac}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x5, 0x7, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, 0x4e21}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x89}}, @common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{0x2}, 0x4}, {{0x2}, 0xfc}}}]}, @TTL={0x24}}, {{@uncond, 0x0, 0x94, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0xfffffff7, 0x800000e, @ipv4=@loopback, 0x4e20}}}, {{@uncond, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x0, 0x3, 0x1, 0x7, 0x0, 0x3], 0x6, 0xa}}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @empty, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x50c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002214006200238daf452ca0809104"], 0x0}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): st mode [ 212.944312][ T6856] veth1_vlan: left allmulticast mode [ 213.359372][ T5835] usb 5-1: 0:2 : does not exist [ 213.402148][ T5835] usb 5-1: USB disconnect, device number 16 [ 213.572576][ T5880] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 214.576751][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.608027][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.634630][ T5880] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 214.654626][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.671320][ T6889] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 214.678175][ T5880] usb 3-1: config 0 descriptor?? [ 214.891014][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.907269][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.918732][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.952296][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.963391][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.995982][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.043058][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.061479][ T6897] syz_tun: entered allmulticast mode [ 215.123573][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.148398][ T6873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.151024][ T6896] syz_tun: left allmulticast mode [ 215.165643][ T6873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.233849][ T6902] tipc: Started in network mode [ 215.238905][ T6902] tipc: Node identity 000000000000002d0000000000000001, cluster identity 4711 [ 215.255905][ T6902] tipc: Enabling of bearer rejected, failed to enable media [ 215.296946][ T6904] netlink: 'syz.4.313': attribute type 10 has an invalid length. [ 215.434449][ T5880] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7 [ 215.448343][ T6910] Cannot find add_set index 0 as target [ 215.453916][ T5880] cp2112 0003:10C4:EA90.000A: parse failed [ 215.454045][ T5880] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -22 [ 215.608849][ T6910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.631033][ T6910] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 215.646678][ T5880] usb 3-1: USB disconnect, device number 16 [ 216.042405][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 216.202392][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 216.215335][ T10] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 216.224278][ T10] usb 5-1: config 0 has no interface number 0 [ 216.258947][ T10] usb 5-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 216.359421][ T10] usb 5-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.404965][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 216.421990][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.442025][ T10] usb 5-1: Product: syz [ 216.516056][ T10] usb 5-1: Manufacturer: syz [ 216.520803][ T10] usb 5-1: SerialNumber: syz [ 216.578314][ T10] usb 5-1: config 0 descriptor?? [ 216.633877][ T10] appletouch 5-1:0.154: Could not find int-in endpoint [ 216.635305][ T6921] vti0: entered promiscuous mode [ 216.645777][ T10] appletouch 5-1:0.154: probe with driver appletouch failed with error -5 [ 216.675259][ T6921] vti0: entered allmulticast mode [ 216.686588][ T10] usbhid 5-1:0.154: couldn't find an input interrupt endpoint [ 217.128524][ T10] usb 5-1: USB disconnect, device number 17 [ 217.146505][ T6933] netlink: 'syz.0.323': attribute type 5 has an invalid length. [ 217.228364][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 217.257556][ T6937] futex_wake_op: syz.1.320 tries to shift op by -33; fix this program [ 217.272932][ T6937] netdevsim netdevsim1: Direct firmware load for . [ 217.272932][ T6937] failed with error -2 [ 217.283768][ T6937] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 217.283768][ T6937] [ 217.465861][ T6941] blktrace: Concurrent blktraces are not allowed on sg0 [ 217.918615][ T6947] FAULT_INJECTION: forcing a failure. [ 217.918615][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 217.942543][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.0.327 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 217.942566][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.942577][ T6947] Call Trace: [ 217.942584][ T6947] [ 217.942592][ T6947] dump_stack_lvl+0x189/0x250 [ 217.942624][ T6947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.942649][ T6947] ? __pfx__printk+0x10/0x10 [ 217.942671][ T6947] ? __pfx___might_resched+0x10/0x10 [ 217.942688][ T6947] ? fs_reclaim_acquire+0x7d/0x100 [ 217.942717][ T6947] should_fail_ex+0x414/0x560 [ 217.942740][ T6947] should_failslab+0xa8/0x100 [ 217.942765][ T6947] __kmalloc_noprof+0xcb/0x4f0 [ 217.942790][ T6947] ? kfree+0x4d/0x440 [ 217.942808][ T6947] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 217.942835][ T6947] tomoyo_realpath_from_path+0xe3/0x5d0 [ 217.942859][ T6947] ? tomoyo_domain+0xda/0x130 [ 217.942887][ T6947] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 217.942905][ T6947] tomoyo_path_number_perm+0x1e8/0x5a0 [ 217.942926][ T6947] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.942960][ T6947] ? __lock_acquire+0xaac/0xd20 [ 217.943002][ T6947] ? __fget_files+0x2a/0x420 [ 217.943029][ T6947] ? __fget_files+0x3a0/0x420 [ 217.943050][ T6947] ? __fget_files+0x2a/0x420 [ 217.943082][ T6947] security_file_ioctl+0xcb/0x2d0 [ 217.943101][ T6947] __se_sys_ioctl+0x47/0x170 [ 217.943122][ T6947] do_syscall_64+0xf6/0x210 [ 217.943146][ T6947] ? clear_bhb_loop+0x60/0xb0 [ 217.943167][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.943184][ T6947] RIP: 0033:0x7f816b78e969 [ 217.943199][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.943213][ T6947] RSP: 002b:00007f816c642038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.943230][ T6947] RAX: ffffffffffffffda RBX: 00007f816b9b6080 RCX: 00007f816b78e969 [ 217.943243][ T6947] RDX: 0000200000000800 RSI: 00000000000089f3 RDI: 000000000000000c [ 217.943254][ T6947] RBP: 00007f816c642090 R08: 0000000000000000 R09: 0000000000000000 [ 217.943264][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.943273][ T6947] R13: 0000000000000000 R14: 00007f816b9b6080 R15: 00007f816badfa28 [ 217.943300][ T6947] [ 217.943989][ T6947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.525014][ T6973] input: syz0 as /devices/virtual/input/input12 [ 221.989536][ T5835] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 222.158194][ T5835] usb 1-1: config 4 has an invalid interface number: 196 but max is 0 [ 222.167165][ T5835] usb 1-1: config 4 has no interface number 0 [ 222.179576][ T5835] usb 1-1: config 4 interface 196 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 222.196943][ T5835] usb 1-1: config 4 interface 196 has no altsetting 0 [ 222.214387][ T5835] usb 1-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=f3.03 [ 222.237611][ T7010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.344'. [ 222.258561][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.285400][ T5835] usb 1-1: Product: syz [ 222.329866][ T5835] usb 1-1: Manufacturer: syz [ 222.335210][ T5835] usb 1-1: SerialNumber: syz [ 222.371036][ T7004] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.382858][ T5835] keyspan 1-1:4.196: Keyspan 1 port adapter converter detected [ 222.412854][ T7018] futex_wake_op: syz.1.340 tries to shift op by -33; fix this program [ 222.432240][ T7018] netdevsim netdevsim1: Direct firmware load for . [ 222.432240][ T7018] failed with error -2 [ 222.444034][ T7018] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 222.444034][ T7018] [ 222.484574][ T5835] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 84 [ 222.700460][ T5835] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 81 [ 222.713142][ T5835] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 1 [ 222.750150][ T5835] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 2 [ 222.827942][ T5835] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 83 [ 222.906613][ T5835] keyspan 1-1:4.196: found no endpoint descriptor for endpoint 3 [ 223.022793][ T5835] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 223.048824][ T5835] usb 1-1: USB disconnect, device number 18 [ 223.066684][ T5835] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 223.093598][ T5835] keyspan 1-1:4.196: device disconnected [ 223.677773][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'. [ 223.864266][ T7029] futex_wake_op: syz.4.345 tries to shift op by -33; fix this program [ 223.970549][ T7029] netdevsim netdevsim4: Direct firmware load for . [ 223.970549][ T7029] failed with error -2 [ 223.982356][ T7029] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 223.982356][ T7029] [ 224.232515][ T5894] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 224.287382][ T7040] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 224.542877][ T5894] usb 3-1: config 0 has no interfaces? [ 224.552187][ T5894] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 224.561483][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.581614][ T5894] usb 3-1: Product: syz [ 224.609042][ T5894] usb 3-1: Manufacturer: syz [ 224.626987][ T5894] usb 3-1: SerialNumber: syz [ 224.632610][ T7049] SET target dimension over the limit! [ 224.652961][ T5894] usb 3-1: config 0 descriptor?? [ 224.713217][ T7050] kernel profiling enabled (shift: 17) [ 225.181130][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 225.400108][ T7056] netlink: 32 bytes leftover after parsing attributes in process `syz.1.356'. [ 225.448937][ T7058] xt_hashlimit: overflow, rate too high: 0 [ 226.395217][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'. [ 226.420627][ T7080] vlan2: entered allmulticast mode [ 226.426505][ T7080] bridge_slave_0: entered allmulticast mode [ 226.985658][ T5883] usb 3-1: USB disconnect, device number 17 [ 227.231085][ T7089] netlink: 'syz.2.366': attribute type 5 has an invalid length. [ 227.284538][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 227.285668][ T7089] ip6erspan0: entered promiscuous mode [ 227.700599][ T7098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 229.731403][ T7123] netlink: 'syz.1.377': attribute type 3 has an invalid length. [ 229.815827][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 229.891581][ T7135] syzkaller1: entered promiscuous mode [ 229.902264][ T7135] syzkaller1: entered allmulticast mode [ 230.006954][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.382'. [ 230.090774][ T7139] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.352252][ T56] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 230.372472][ T5835] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 230.712388][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 230.729397][ T5835] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 230.746284][ T5835] usb 1-1: config 1 has no interface number 0 [ 230.768949][ T5883] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 230.776643][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 230.784194][ T5878] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 230.825031][ T5835] usb 1-1: config 1 interface 242 has no altsetting 0 [ 230.939203][ T5835] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 230.949192][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.957272][ T5835] usb 1-1: Product: syz [ 230.961655][ T5835] usb 1-1: Manufacturer: syz [ 230.977948][ T5835] usb 1-1: SerialNumber: syz [ 231.029564][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 231.039828][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 231.052430][ T24] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 231.066643][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.104200][ T5883] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 231.115452][ T24] usb 4-1: Product: syz [ 231.121326][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 231.148929][ T24] usb 4-1: Manufacturer: syz [ 231.168633][ T5878] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 231.181208][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.207351][ T24] usb 4-1: SerialNumber: syz [ 231.258399][ T5878] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 231.268848][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.283864][ T5883] usb 5-1: config 0 descriptor?? [ 231.292642][ T24] usb 4-1: config 0 descriptor?? [ 231.309285][ T5878] usb 3-1: Product: syz [ 231.317562][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 231.348096][ T5878] usb 3-1: Manufacturer: syz [ 231.354278][ T5883] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 231.386617][ T5878] usb 3-1: SerialNumber: syz [ 231.401523][ T5883] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 231.410386][ T5878] usb 3-1: config 0 descriptor?? [ 231.420479][ T7154] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 231.477579][ T5878] hub 3-1:0.0: bad descriptor, ignoring hub [ 231.495201][ T5878] hub 3-1:0.0: probe with driver hub failed with error -5 [ 231.551267][ T5878] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 231.575972][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.594989][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.668082][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 231.880967][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.386'. [ 232.323954][ T24] gspca_sunplus: reg_r err -110 [ 232.330983][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 232.379317][ T5835] aqc111 1-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 232.402849][ T7143] warning: `syz.0.384' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 232.443395][ T5835] aqc111 1-1:1.242 eth1: register 'aqc111' at usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller, 16:6c:bc:6e:67:e8 [ 232.646255][ T24] usb 1-1: USB disconnect, device number 19 [ 232.656241][ T24] aqc111 1-1:1.242 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, Aquantia AQtion USB to 5GbE Controller [ 232.724568][ T24] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 232.738956][ T24] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 232.758568][ T24] aqc111 1-1:1.242 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 233.697726][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.389'. [ 233.752274][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 234.202638][ T5878] usb 3-1: USB disconnect, device number 18 [ 234.304580][ T5880] usb 5-1: USB disconnect, device number 18 [ 234.436922][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.522464][ T5894] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 234.692351][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 234.713170][ T5894] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 234.738742][ T5894] usb 1-1: config 0 has no interface number 0 [ 234.765283][ T5894] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 234.807052][ T5894] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 234.862474][ T5894] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 234.903114][ T5894] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 25077, setting to 1024 [ 234.915538][ T5894] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.933649][ T5894] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 235.023467][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.125878][ T5894] usb 1-1: Product: syz [ 235.130077][ T5894] usb 1-1: Manufacturer: syz [ 235.191202][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 235.191218][ T30] audit: type=1326 audit(1748179616.061:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.4.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x0 [ 235.262776][ T5894] usb 1-1: SerialNumber: syz [ 235.262796][ T5835] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 235.407821][ T5894] usb 1-1: config 0 descriptor?? [ 235.639700][ T5894] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 235.709575][ T5835] usb 2-1: config 5 has an invalid interface number: 13 but max is 0 [ 235.745577][ T5835] usb 2-1: config 5 has no interface number 0 [ 235.818643][ T5835] usb 2-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=4b.77 [ 235.841939][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.852960][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.878229][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.896797][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.933998][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.044998][ T24] usb 1-1: USB disconnect, device number 20 [ 236.839770][ T24] usb 4-1: USB disconnect, device number 9 [ 237.032748][ T7240] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 237.272140][ T30] audit: type=1800 audit(1748179618.141:28): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.406" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 237.868681][ T5835] usb 2-1: string descriptor 0 read error: -71 [ 237.876494][ T5835] smsusb:smsusb_probe: board id=8, interface number 13 [ 237.973973][ T5835] usb 2-1: USB disconnect, device number 14 [ 238.289192][ T7254] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 238.490807][ T7267] loop8: detected capacity change from 0 to 7 [ 238.501263][ T6040] Dev loop8: unable to read RDB block 7 [ 238.533079][ T6040] loop8: unable to read partition table [ 238.547933][ T6040] loop8: partition table beyond EOD, truncated [ 238.579374][ T7267] Dev loop8: unable to read RDB block 7 [ 238.612498][ T7267] loop8: unable to read partition table [ 238.627999][ T7271] capability: warning: `syz.4.415' uses 32-bit capabilities (legacy support in use) [ 238.645503][ T7267] loop8: partition table beyond EOD, truncated [ 238.756797][ T7267] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 239.912432][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 240.052426][ T24] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 240.209232][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 240.286777][ T24] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 240.288814][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 240.341127][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 240.347329][ T24] usb 1-1: config 0 has no interface number 0 [ 240.360577][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 240.372463][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.388353][ T10] usb 2-1: Product: syz [ 240.399479][ T10] usb 2-1: Manufacturer: syz [ 240.428033][ T10] usb 2-1: SerialNumber: syz [ 240.440407][ T10] usb 2-1: config 0 descriptor?? [ 240.450934][ T10] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 240.552455][ T24] usb 1-1: New USB device found, idVendor=05c6, idProduct=9033, bcdDevice=b8.c6 [ 240.568051][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.576289][ T24] usb 1-1: Product: syz [ 240.580581][ T24] usb 1-1: Manufacturer: syz [ 240.782340][ T24] usb 1-1: SerialNumber: syz [ 240.865401][ T10] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 240.939033][ T10] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 241.161446][ T24] usb 1-1: config 0 descriptor?? [ 241.350948][ T10] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 241.851689][ T24] usb 1-1: USB disconnect, device number 21 [ 242.172378][ T5880] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.324350][ T5880] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.374020][ T5880] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.417873][ T7329] netlink: 'syz.0.431': attribute type 3 has an invalid length. [ 242.428750][ T5880] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.513757][ T5880] usb 4-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 242.593001][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.632936][ T5880] usb 4-1: config 0 descriptor?? [ 243.213259][ T5880] asus 0003:0B05:1822.000B: hidraw0: USB HID v0.00 Device [HID 0b05:1822] on usb-dummy_hcd.3-1/input0 [ 243.319317][ T5880] asus 0003:0B05:1822.000B: Asus input not registered [ 243.505107][ T5880] asus 0003:0B05:1822.000B: probe with driver asus failed with error -12 [ 243.516435][ T7341] syzkaller1: entered promiscuous mode [ 243.521925][ T7341] syzkaller1: entered allmulticast mode [ 243.592588][ T5880] usb 4-1: USB disconnect, device number 10 [ 244.064413][ T7350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.437'. [ 244.372371][ T5904] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 244.372396][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 244.592469][ T24] usb 4-1: device descriptor read/64, error -71 [ 244.646326][ T5904] usb 5-1: config 0 has no interfaces? [ 244.768402][ T7360] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[7360] [ 244.902565][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 245.096597][ T5904] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 245.109003][ T7362] syz_tun: entered allmulticast mode [ 245.123559][ T7362] xfrm0: entered allmulticast mode [ 245.123898][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.139125][ T7362] dvmrp1: entered allmulticast mode [ 245.146481][ T24] usb 4-1: device descriptor read/64, error -71 [ 245.157141][ T5904] usb 5-1: Product: syz [ 245.161341][ T5904] usb 5-1: Manufacturer: syz [ 245.166124][ T5904] usb 5-1: SerialNumber: syz [ 245.200198][ T5904] usb 5-1: config 0 descriptor?? [ 245.254387][ T7361] syz_tun: left allmulticast mode [ 245.267655][ T24] usb usb4-port1: attempt power cycle [ 245.369427][ T5880] usb 2-1: USB disconnect, device number 15 [ 245.714445][ T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.743188][ T24] usb 4-1: device descriptor read/8, error -71 [ 245.858211][ T7376] netlink: 'syz.4.436': attribute type 4 has an invalid length. [ 246.002807][ T5878] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 246.022515][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 246.053130][ T24] usb 4-1: device descriptor read/8, error -71 [ 246.183167][ T24] usb usb4-port1: unable to enumerate USB device [ 246.421312][ T5878] usb 1-1: config 0 has no interfaces? [ 246.468936][ T5878] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 246.478698][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.487076][ T5878] usb 1-1: Product: syz [ 246.492176][ T5878] usb 1-1: Manufacturer: syz [ 246.500194][ T5878] usb 1-1: SerialNumber: syz [ 246.516605][ T5878] usb 1-1: config 0 descriptor?? [ 247.508955][ T5878] usb 5-1: USB disconnect, device number 19 [ 249.007203][ T7397] could not allocate digest TFM handle sha512-neon [ 249.596788][ T24] usb 1-1: USB disconnect, device number 22 [ 249.902530][ T5878] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 250.155855][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.455'. [ 250.278587][ T7424] netlink: 'syz.4.456': attribute type 1 has an invalid length. [ 250.324361][ T7424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.390030][ T7424] netlink: 60 bytes leftover after parsing attributes in process `syz.4.456'. [ 250.455237][ T7429] netlink: 844 bytes leftover after parsing attributes in process `syz.1.457'. [ 250.672118][ T7431] xt_hashlimit: overflow, rate too high: 0 [ 251.962415][ T5835] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 252.125217][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 252.142685][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.188428][ T5835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.243810][ T5835] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.293878][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.361518][ T5835] usb 4-1: Product: syz [ 252.391760][ T5835] usb 4-1: Manufacturer: syz [ 252.416817][ T5835] usb 4-1: SerialNumber: syz [ 252.607424][ T7454] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 252.638126][ T7454] batman_adv: batadv0: Adding interface: gretap1 [ 252.679755][ T5835] usb 4-1: cannot find UAC_HEADER [ 252.710769][ T7454] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.747559][ T7454] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 252.768078][ T5835] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 252.830461][ T5835] usb 4-1: USB disconnect, device number 16 [ 252.838724][ T7456] tipc: Started in network mode [ 252.852631][ T7456] tipc: Node identity 000000000000002d0000000000000001, cluster identity 4711 [ 252.861885][ T7456] tipc: Enabling of bearer rejected, failed to enable media [ 252.900305][ T6040] udevd[6040]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.955556][ T7462] netlink: 'syz.1.469': attribute type 1 has an invalid length. [ 253.032136][ T7462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.092627][ T7462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.469'. [ 253.111886][ T7475] netlink: 112 bytes leftover after parsing attributes in process `syz.0.472'. [ 253.121452][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 253.259368][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 253.359110][ T7482] netlink: 'syz.1.475': attribute type 3 has an invalid length. [ 253.787348][ T5878] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 254.015048][ T5878] usb 5-1: config 0 has no interfaces? [ 254.119332][ T5878] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 254.132403][ T5835] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 254.152219][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.177223][ T5878] usb 5-1: Product: syz [ 254.184806][ T5878] usb 5-1: Manufacturer: syz [ 254.266151][ T7498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.479'. [ 254.298308][ T5878] usb 5-1: SerialNumber: syz [ 254.357265][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.480'. [ 254.367936][ T5878] usb 5-1: config 0 descriptor?? [ 254.381227][ T5835] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 254.423491][ T7500] bond_slave_1: entered promiscuous mode [ 254.441304][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.468369][ T5835] usb 4-1: config 0 descriptor?? [ 254.478509][ T5835] cp210x 4-1:0.0: cp210x converter detected [ 254.494259][ T7500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.503064][ T7500] bond_slave_1: left promiscuous mode [ 254.522522][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 254.744433][ T10] usb 3-1: config 0 has no interfaces? [ 254.842169][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 254.852921][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.860933][ T10] usb 3-1: Product: syz [ 254.876615][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.906828][ T10] usb 3-1: Manufacturer: syz [ 254.924253][ T10] usb 3-1: SerialNumber: syz [ 254.939942][ T10] usb 3-1: config 0 descriptor?? [ 254.952849][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.975485][ T30] audit: type=1326 audit(1748179635.841:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.3.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x0 [ 255.002771][ T7505] tipc: Enabling of bearer rejected, already enabled [ 255.093452][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.132926][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.213468][ T5835] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 255.222051][ T5835] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 255.249186][ T5835] usb 4-1: cp210x converter now attached to ttyUSB0 [ 255.334290][ T5835] usb 4-1: USB disconnect, device number 17 [ 255.510810][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.517306][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.535673][ T5835] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 255.654480][ T5835] cp210x 4-1:0.0: device disconnected [ 255.748510][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.1.485'. [ 256.054997][ T7521] netlink: 128 bytes leftover after parsing attributes in process `syz.0.487'. [ 256.312379][ T5835] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 256.474502][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.499716][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.543081][ T5835] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 256.578237][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.623993][ T5835] usb 1-1: config 0 descriptor?? [ 256.934628][ T5835] usbhid 1-1:0.0: can't add hid device: -71 [ 256.942990][ T5835] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 256.971349][ T5835] usb 1-1: USB disconnect, device number 23 [ 257.004254][ T5883] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 257.156970][ T5878] usb 5-1: USB disconnect, device number 20 [ 257.182356][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 257.224381][ T5883] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.305506][ T5883] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 257.311536][ T5880] usb 3-1: USB disconnect, device number 19 [ 257.343152][ T5883] usb 4-1: config 0 has no interface number 0 [ 257.362442][ T5883] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 257.402904][ T5883] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 257.492532][ T5883] usb 4-1: config 0 interface 88 has no altsetting 0 [ 257.497528][ T7533] program syz.4.493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.519844][ T5883] usb 4-1: language id specifier not provided by device, defaulting to English [ 257.566514][ T5883] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 257.587555][ T7533] binder: 7532:7533 ioctl c00c620f 2000000024c0 returned -22 [ 257.598792][ T7533] binder: BINDER_SET_CONTEXT_MGR already set [ 257.605013][ T7533] binder: 7532:7533 ioctl 4018620d 200000000040 returned -16 [ 257.622334][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 257.642230][ T5883] usb 4-1: Product: syz [ 257.652999][ T5883] usb 4-1: SerialNumber: syz [ 257.669485][ T5883] usb 4-1: config 0 descriptor?? [ 257.697428][ T7536] binder: 7532:7536 ioctl c0306201 2000000001c0 returned -14 [ 257.821391][ T7544] netdevsim netdevsim1: Direct firmware load for . [ 257.821391][ T7544] failed with error -2 [ 257.832678][ T7544] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 257.832678][ T7544] [ 257.922003][ T5883] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input14 [ 258.098283][ T5883] usb 4-1: USB disconnect, device number 18 [ 258.216355][ T7533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 258.222875][ T7533] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 258.296010][ T7533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 258.314827][ T7533] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 258.396870][ T7533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 258.414267][ T7533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 258.456903][ T7533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 258.489223][ T7533] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 258.515749][ T7533] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 258.525768][ T7533] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 258.812719][ T5883] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 258.954677][ T7565] fuse: Unknown parameter 'goup_idbE(~0O~' [ 258.954677][ T7564] fuse: Unknown parameter 'goup_idbE(~0O~' [ 259.022879][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 259.030874][ T5883] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 259.052396][ T5883] usb 1-1: config 0 has no interface number 0 [ 259.058614][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.091912][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 259.103971][ T5883] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.117433][ T5883] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.130593][ T5883] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 259.141420][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.159518][ T5883] usb 1-1: config 0 descriptor?? [ 259.188811][ T5883] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 259.212930][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 259.281013][ T7575] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 259.372465][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 259.387927][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 259.429058][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 259.444281][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 259.465244][ T24] usb 2-1: Product: syz [ 259.497349][ T24] usb 2-1: Manufacturer: syz [ 259.502062][ T24] usb 2-1: SerialNumber: syz [ 259.554397][ T24] usb 2-1: config 0 descriptor?? [ 259.561028][ T7566] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 259.588440][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 259.595456][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 259.862599][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 260.127797][ T7598] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 260.172756][ T10] usb 2-1: USB disconnect, device number 16 [ 260.344990][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 260.422553][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 260.502429][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 260.507415][ T7605] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 260.582496][ T56] Bluetooth: hci4: command 0x0406 tx timeout [ 260.637135][ T7605] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 261.251005][ T7613] netdevsim netdevsim3: Direct firmware load for . [ 261.251005][ T7613] failed with error -2 [ 261.262181][ T7613] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 261.262181][ T7613] [ 261.518780][ T5880] usb 1-1: USB disconnect, device number 24 [ 261.581979][ T30] audit: type=1326 audit(1748179642.441:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 261.794973][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 261.820658][ T5880] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 261.879378][ T30] audit: type=1326 audit(1748179642.441:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 261.947196][ T56] Bluetooth: hci0: command 0x0406 tx timeout [ 262.042389][ T30] audit: type=1326 audit(1748179642.441:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 262.143299][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.190861][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 262.232896][ T30] audit: type=1326 audit(1748179642.441:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 262.263210][ T10] usb 3-1: config 7 has an invalid interface number: 89 but max is 0 [ 262.272811][ T10] usb 3-1: config 7 has no interface number 0 [ 262.278980][ T10] usb 3-1: config 7 interface 89 has no altsetting 0 [ 262.292833][ T30] audit: type=1326 audit(1748179642.441:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 262.322799][ T10] usb 3-1: New USB device found, idVendor=04bb, idProduct=0944, bcdDevice=32.2e [ 262.352026][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.370693][ T10] usb 3-1: Product: syz [ 262.375199][ T10] usb 3-1: Manufacturer: Є [ 262.379734][ T10] usb 3-1: SerialNumber: syz [ 262.422704][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 262.427058][ T30] audit: type=1326 audit(1748179642.441:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 262.502481][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 262.586722][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 262.662405][ T56] Bluetooth: hci4: command 0x0406 tx timeout [ 262.709456][ T30] audit: type=1326 audit(1748179642.441:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 262.835210][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.865109][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.885199][ T30] audit: type=1326 audit(1748179642.441:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 262.907283][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.039092][ T30] audit: type=1326 audit(1748179642.441:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 263.061185][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.071390][ T30] audit: type=1326 audit(1748179642.441:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7614 comm="syz.4.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023558e969 code=0x7ffc0000 [ 263.131830][ T10] usb 3-1: USB disconnect, device number 20 [ 263.576101][ T7643] syz_tun: entered allmulticast mode [ 263.660946][ T7644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.752083][ T7642] syz_tun: left allmulticast mode [ 264.312418][ T5883] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 264.537746][ T5883] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 264.629449][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.648944][ T7657] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 264.729413][ T5883] usb 5-1: New USB device found, idVendor=16d0, idProduct=ec7b, bcdDevice=7f.3a [ 264.729523][ T7657] team0: Port device syz_tun added [ 264.753315][ T7651] netlink: 'syz.2.524': attribute type 27 has an invalid length. [ 264.761120][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.809607][ T5883] usb 5-1: Product: syz [ 264.828659][ T5883] usb 5-1: Manufacturer: syz [ 264.835545][ T5883] usb 5-1: SerialNumber: syz [ 264.846974][ T5883] usb 5-1: config 0 descriptor?? [ 264.854416][ T7658] use of bytesused == 0 is deprecated and will be removed in the future, [ 264.863208][ T7658] use the actual size instead. [ 265.214954][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.502577][ T5883] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 265.934503][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 265.945041][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.961803][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 266.010796][ T5883] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 266.023519][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.047918][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.077703][ T5883] usb 2-1: Product: syz [ 266.098844][ T5883] usb 2-1: Manufacturer: syz [ 266.118088][ T5883] usb 2-1: SerialNumber: syz [ 266.143015][ T5883] usb 2-1: config 0 descriptor?? [ 266.157873][ T7664] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 266.167091][ T5883] usb 2-1: ucan: probing device on interface #0 [ 266.177188][ T5883] usb 2-1: ucan: invalid EP count (1) [ 266.189176][ T5883] usb 2-1: ucan: probe failed; try to update the device firmware [ 266.242518][ T5835] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 266.547388][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.529'. [ 266.563324][ T7651] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.599887][ T7651] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.612080][ T5835] usb 1-1: config 0 has no interfaces? [ 266.662467][ T7651] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.680745][ T7651] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.768823][ T5835] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 266.823843][ T7651] vti0: left promiscuous mode [ 266.828636][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.844633][ T5835] usb 1-1: Product: syz [ 266.855050][ T5835] usb 1-1: Manufacturer: syz [ 266.865290][ T5835] usb 1-1: SerialNumber: syz [ 266.882368][ T7651] vti0: left allmulticast mode [ 266.888241][ T7651] ip6erspan0: left promiscuous mode [ 266.897573][ T5835] usb 1-1: config 0 descriptor?? [ 266.938365][ T7683] bond_slave_0: entered promiscuous mode [ 266.944096][ T7683] bond_slave_1: entered promiscuous mode [ 266.984558][ T7683] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.083997][ T7683] bond_slave_0: left promiscuous mode [ 267.089500][ T7683] bond_slave_1: left promiscuous mode [ 267.209072][ T7673] usb 5-1: USB disconnect, device number 21 [ 267.583525][ T7689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.532'. [ 268.002366][ T5835] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 268.156737][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.178137][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.191015][ T5835] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 268.203830][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.221957][ T5835] usb 5-1: config 0 descriptor?? [ 268.263503][ T24] usb 2-1: USB disconnect, device number 17 [ 268.451222][ T5835] usbhid 5-1:0.0: can't add hid device: -71 [ 268.465022][ T5835] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 269.026497][ T5835] usb 5-1: USB disconnect, device number 22 [ 269.242134][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 269.242146][ T30] audit: type=1326 audit(1748179650.111:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.2.542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3444f8e969 code=0x0 [ 269.336505][ T5835] usb 1-1: USB disconnect, device number 25 [ 269.365804][ T7673] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 269.509495][ T7721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.538482][ T7673] usb 2-1: Using ep0 maxpacket: 8 [ 269.584647][ T7673] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 269.603062][ T7673] usb 2-1: config 0 interface 0 has no altsetting 0 [ 269.619718][ T7673] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 269.629020][ T7673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.650866][ T7673] usb 2-1: Product: syz [ 269.654283][ T7723] netlink: 'syz.4.544': attribute type 4 has an invalid length. [ 269.662407][ T7673] usb 2-1: Manufacturer: syz [ 269.682482][ T7673] usb 2-1: SerialNumber: syz [ 269.704078][ T7673] usb 2-1: config 0 descriptor?? [ 269.723495][ T7673] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 269.832980][ T7725] usb usb8: usbfs: process 7725 (syz.4.545) did not claim interface 0 before use [ 269.924994][ T7673] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 269.935422][ T7673] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 269.947347][ T7728] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 269.949205][ T7673] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 270.072481][ T7668] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 270.376162][ T7668] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 270.463535][ T7668] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 270.488715][ T7668] usb 1-1: New USB device found, idVendor=16d0, idProduct=ec7b, bcdDevice=7f.3a [ 270.520425][ T7668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.555723][ T7668] usb 1-1: Product: syz [ 270.563596][ T7668] usb 1-1: Manufacturer: syz [ 270.572526][ T7668] usb 1-1: SerialNumber: syz [ 270.592372][ T7670] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 270.663664][ T7668] usb 1-1: config 0 descriptor?? [ 270.762555][ T7670] usb 3-1: Using ep0 maxpacket: 8 [ 270.779423][ T7670] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 270.787832][ T7670] usb 3-1: config 0 has no interface number 0 [ 270.797862][ T7670] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.809755][ T7670] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 270.855114][ T7670] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.876728][ T7670] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.893731][ T7670] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 270.905811][ T7670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.928236][ T7670] usb 3-1: config 0 descriptor?? [ 270.949124][ T7670] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 271.676755][ T7748] team0: entered promiscuous mode [ 271.682187][ T7748] team_slave_0: entered promiscuous mode [ 271.689148][ T7748] team_slave_1: entered promiscuous mode [ 271.722950][ T7748] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.763679][ T7748] team0: left promiscuous mode [ 271.787573][ T7748] team_slave_0: left promiscuous mode [ 271.799157][ T7748] team_slave_1: left promiscuous mode [ 272.387417][ T30] audit: type=1326 audit(1748179653.261:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 272.549616][ T24] usb 1-1: USB disconnect, device number 26 [ 272.652374][ T30] audit: type=1326 audit(1748179653.261:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 272.796620][ T30] audit: type=1326 audit(1748179653.261:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 272.827541][ T30] audit: type=1326 audit(1748179653.261:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 272.862439][ T30] audit: type=1326 audit(1748179653.261:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 272.918126][ T30] audit: type=1326 audit(1748179653.261:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 272.940349][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.982590][ T30] audit: type=1326 audit(1748179653.261:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 273.004815][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.065941][ T30] audit: type=1326 audit(1748179653.261:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 273.088125][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.200346][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 273.267374][ T24] usb 3-1: USB disconnect, device number 21 [ 273.377485][ T30] audit: type=1326 audit(1748179653.261:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7746 comm="syz.3.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9018e969 code=0x7fc00000 [ 273.402412][ T7670] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 273.431339][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 273.432549][ T7673] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 273.572479][ T7670] usb 1-1: Using ep0 maxpacket: 32 [ 273.612381][ T7673] usb 4-1: Using ep0 maxpacket: 16 [ 273.620222][ T7670] usb 1-1: unable to get BOS descriptor or descriptor too short [ 273.660128][ T7673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 273.701713][ T7670] usb 1-1: config 127 has an invalid interface number: 158 but max is 0 [ 273.812133][ T7670] usb 1-1: config 127 has no interface number 0 [ 273.842849][ T7673] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 273.893654][ T7670] usb 1-1: config 127 interface 158 has no altsetting 0 [ 273.963916][ T7670] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5 [ 273.975047][ T24] usb 2-1: USB disconnect, device number 18 [ 274.003543][ T7673] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 274.015650][ T7670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.075156][ T7673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.092340][ T7670] usb 1-1: Product: syz [ 274.096523][ T7670] usb 1-1: Manufacturer: syz [ 274.101132][ T7670] usb 1-1: SerialNumber: syz [ 274.130428][ T7673] usb 4-1: Product: syz [ 274.147405][ T7771] ======================================================= [ 274.147405][ T7771] WARNING: The mand mount option has been deprecated and [ 274.147405][ T7771] and is ignored by this kernel. Remove the mand [ 274.147405][ T7771] option from the mount to silence this warning. [ 274.147405][ T7771] ======================================================= [ 274.152638][ T7673] usb 4-1: Manufacturer: syz [ 274.182333][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.231566][ T7771] fuse: Bad value for 'user_id' [ 274.256833][ T7771] fuse: Bad value for 'user_id' [ 274.348761][ T7673] usb 4-1: SerialNumber: syz [ 274.393534][ T7673] usb 4-1: config 0 descriptor?? [ 274.399311][ T7761] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 274.420647][ T7673] hub 4-1:0.0: bad descriptor, ignoring hub [ 274.437565][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.442468][ T24] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 274.446520][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.487683][ T56] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 274.511785][ T7670] comedi comedi0: could not switch to alternate setting 1 [ 274.519981][ T7670] usbduxfast 1-1:127.158: driver 'usbduxfast' failed to auto-configure device. [ 274.530829][ T7673] hub 4-1:0.0: probe with driver hub failed with error -5 [ 274.540902][ T7670] usb 1-1: USB disconnect, device number 27 [ 274.642356][ T7673] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 274.984103][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.555'. [ 275.014377][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 275.059076][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 275.077864][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 275.244192][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 275.262477][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.328885][ T24] usb 2-1: Product: syz [ 275.345222][ T24] usb 2-1: Manufacturer: syz [ 275.356289][ T24] usb 2-1: SerialNumber: syz [ 275.370871][ T24] usb 2-1: config 0 descriptor?? [ 275.385730][ T7772] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.421740][ T7772] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.462046][ T24] usb 2-1: ucan: probing device on interface #0 [ 275.650942][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 275.671730][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.683104][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.691778][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.694615][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.828404][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.850506][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.903250][ T7793] support for the xor transformation has been removed. [ 275.932033][ T7793] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 275.952815][ T7670] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 276.070621][ T24] usb 2-1: ucan: device reported invalid device info [ 276.095049][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 276.138509][ T7670] usb 3-1: device descriptor read/64, error -71 [ 276.182109][ T7801] kvm: user requested TSC rate below hardware speed [ 276.293539][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.310845][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.328529][ T7668] usb 2-1: USB disconnect, device number 19 [ 276.353216][ T7673] usb 4-1: USB disconnect, device number 19 [ 276.413233][ T7670] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 276.422476][ T5883] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 276.577192][ T7670] usb 3-1: device descriptor read/64, error -71 [ 276.592735][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 276.601724][ T5883] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 276.612147][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.635482][ T5883] usb 5-1: Product: syz [ 276.644381][ T5883] usb 5-1: Manufacturer: syz [ 276.652337][ T5883] usb 5-1: SerialNumber: syz [ 276.703340][ T7670] usb usb3-port1: attempt power cycle [ 276.717625][ T7808] netlink: 156 bytes leftover after parsing attributes in process `syz.3.571'. [ 276.745797][ T7808] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 276.826148][ T5883] r8152-cfgselector 5-1: Unknown version 0x0000 [ 276.835245][ T5883] r8152-cfgselector 5-1: config 0 descriptor?? [ 277.063275][ T7670] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 277.137919][ T7670] usb 3-1: device descriptor read/8, error -71 [ 277.407066][ T7670] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 277.422662][ T5883] r8152-cfgselector 5-1: Unknown version 0x0000 [ 277.435809][ T5883] r8152-cfgselector 5-1: bad CDC descriptors [ 277.442917][ T7670] usb 3-1: device descriptor read/8, error -71 [ 277.472388][ T5883] r8152-cfgselector 5-1: USB disconnect, device number 23 [ 277.564964][ T7670] usb usb3-port1: unable to enumerate USB device [ 277.799824][ T7817] input: syz1 as /devices/virtual/input/input16 [ 278.122401][ T7670] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 278.306910][ T7670] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 278.322527][ T7670] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 278.360331][ T7670] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 278.394326][ T7670] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 278.404695][ T7670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 278.413271][ T7670] usb 1-1: Product: syz [ 278.413290][ T7824] random: crng reseeded on system resumption [ 278.417588][ T7670] usb 1-1: Manufacturer: syz [ 278.429508][ T7670] usb 1-1: SerialNumber: syz [ 278.443164][ T7823] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 278.509532][ T56] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 278.519149][ T56] Bluetooth: hci2: Injecting HCI hardware error event [ 278.527696][ T5841] Bluetooth: hci2: hardware error 0x00 [ 278.661210][ T7670] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 278.914331][ T5883] usb 1-1: USB disconnect, device number 28 [ 278.936366][ T7817] usblp0: removed [ 279.008173][ T7843] trusted_key: encrypted_key: insufficient parameters specified [ 279.212351][ T7670] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 279.367856][ T7670] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 279.376008][ T7670] usb 3-1: config 0 has no interface number 0 [ 279.382264][ T7670] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 279.428256][ T7670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.461972][ T7670] usb 3-1: config 0 descriptor?? [ 279.525993][ T7670] usb 3-1: selecting invalid altsetting 1 [ 279.540639][ T7849] xt_hashlimit: overflow, rate too high: 0 [ 279.557520][ T7670] dvb_ttusb_budget: ttusb_init_controller: error [ 279.569463][ T7670] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 279.841225][ T7670] DVB: Unable to find symbol cx22700_attach() [ 279.913006][ T5883] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 279.967501][ T7670] DVB: Unable to find symbol tda10046_attach() [ 279.997492][ T7670] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 280.005981][ T7676] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 280.083925][ T5883] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 280.102379][ T5883] usb 1-1: config 0 has no interface number 0 [ 280.108489][ T5883] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 280.181715][ T5883] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.192475][ T7676] usb 5-1: Using ep0 maxpacket: 8 [ 280.215470][ T7676] usb 5-1: config index 0 descriptor too short (expected 7467, got 43) [ 280.225114][ T5883] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 280.239828][ T5883] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 280.264224][ T5883] usb 1-1: Manufacturer: syz [ 280.264413][ T7676] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 280.301470][ T5883] usb 1-1: config 0 descriptor?? [ 280.309846][ T7676] usb 5-1: config 0 has no interface number 0 [ 280.319044][ T5883] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 280.340128][ T5883] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 280.352582][ T7676] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 280.377892][ T7676] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 280.419189][ T7676] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.436505][ T7676] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.449643][ T7676] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 280.459261][ T7676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.482157][ T7676] usb 5-1: config 0 descriptor?? [ 280.518754][ T7676] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 280.582675][ T5841] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 280.639064][ T7867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.649696][ T7867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.728994][ T7676] usb 5-1: USB disconnect, device number 24 [ 280.759237][ T7676] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 280.846722][ T5883] usb 1-1: USB disconnect, device number 29 [ 281.320715][ T7883] netlink: 'syz.0.591': attribute type 10 has an invalid length. [ 281.384940][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 281.404033][ T7890] macvtap2: entered promiscuous mode [ 281.409665][ T7890] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 281.463050][ T7890] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 281.506848][ T7895] tipc: Started in network mode [ 281.519118][ T7895] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 281.555643][ T7895] tipc: Enabling of bearer rejected, failed to enable media [ 281.562649][ T7890] netlink: 'syz.4.594': attribute type 30 has an invalid length. [ 281.576469][ T7893] bond_slave_1: entered promiscuous mode [ 281.576513][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.594'. [ 281.673564][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.594'. [ 281.675523][ T7890] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 281.868743][ T7893] bond0: (slave bond_slave_1): Releasing backup interface [ 281.923912][ T7893] bond_slave_1 (unregistering): left promiscuous mode [ 281.997604][ T7670] usb 3-1: USB disconnect, device number 26 [ 282.073801][ T7907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.599'. [ 282.247566][ T7907] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 282.263920][ T7907] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 282.309306][ T7907] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 282.494368][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 282.550530][ T7925] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.558388][ T7925] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.638061][ T7926] netlink: 844 bytes leftover after parsing attributes in process `syz.3.604'. [ 282.676911][ T5841] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 282.912604][ T7670] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 283.125103][ T7670] usb 2-1: Using ep0 maxpacket: 16 [ 283.215781][ T7670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024 [ 283.331429][ T7927] futex_wake_op: syz.2.606 tries to shift op by -33; fix this program [ 283.382366][ T7670] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 283.528746][ T7927] netdevsim netdevsim2: Direct firmware load for . [ 283.528746][ T7927] failed with error -2 [ 283.553936][ T7670] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 283.564338][ T7670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.577988][ T7670] usb 2-1: Product: syz [ 283.608058][ T7927] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 283.608058][ T7927] [ 283.637389][ T7670] usb 2-1: Manufacturer: syz [ 283.702113][ T7670] usb 2-1: SerialNumber: syz [ 283.729040][ T7670] usb 2-1: config 0 descriptor?? [ 283.735829][ T7933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 283.753555][ T7670] hub 2-1:0.0: bad descriptor, ignoring hub [ 283.759456][ T7670] hub 2-1:0.0: probe with driver hub failed with error -5 [ 283.768952][ T7670] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 284.020538][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.607'. [ 284.968594][ T7969] netlink: 56 bytes leftover after parsing attributes in process `syz.2.617'. [ 285.001344][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.617'. [ 285.216077][ T7972] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 285.692573][ T5883] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 285.958895][ T5883] usb 3-1: config 0 has no interfaces? [ 285.975351][ T5883] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 286.004549][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.027231][ T5883] usb 3-1: Product: syz [ 286.053721][ T7673] usb 2-1: USB disconnect, device number 20 [ 286.077076][ T5883] usb 3-1: Manufacturer: syz [ 286.143217][ T5883] usb 3-1: SerialNumber: syz [ 286.216987][ T7996] syz_tun: entered allmulticast mode [ 286.233017][ T7996] xfrm0: entered allmulticast mode [ 286.253379][ T7996] dvmrp1: entered allmulticast mode [ 286.262275][ T7992] syz_tun: left allmulticast mode [ 286.297412][ T5883] usb 3-1: config 0 descriptor?? [ 286.594683][ T8014] netlink: 'syz.4.633': attribute type 1 has an invalid length. [ 286.660918][ T8014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 286.752375][ T7673] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 286.893802][ T8014] bond3: (slave gretap2): making interface the new active one [ 286.944195][ T8014] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 287.005765][ T7673] usb 2-1: config 0 has no interfaces? [ 287.013834][ T7673] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 287.027415][ T7673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.036177][ T7673] usb 2-1: Product: syz [ 287.040489][ T7673] usb 2-1: Manufacturer: syz [ 287.062487][ T7673] usb 2-1: SerialNumber: syz [ 287.081384][ T7673] usb 2-1: config 0 descriptor?? [ 287.338165][ T8027] futex_wake_op: syz.3.629 tries to shift op by -33; fix this program [ 287.353611][ T8027] netdevsim netdevsim3: Direct firmware load for . [ 287.353611][ T8027] failed with error -2 [ 287.367734][ T8027] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 287.367734][ T8027] [ 288.892223][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801e2b8c00: rx timeout, send abort [ 289.208696][ T5883] usb 3-1: USB disconnect, device number 27 [ 289.298711][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 289.393808][ T7670] usb 2-1: USB disconnect, device number 21 [ 289.616635][ T8058] netlink: 56 bytes leftover after parsing attributes in process `syz.1.643'. [ 290.032542][ T7670] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 290.217845][ T7670] usb 2-1: config 0 has no interfaces? [ 290.232377][ T7673] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 290.245998][ T7670] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 290.255296][ T7670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.318979][ T7670] usb 2-1: Product: syz [ 290.333037][ T7670] usb 2-1: Manufacturer: syz [ 290.338173][ T7670] usb 2-1: SerialNumber: syz [ 290.358954][ T7670] usb 2-1: config 0 descriptor?? [ 290.415104][ T7673] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 290.426469][ T7673] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 290.452831][ T7673] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 290.479029][ T7673] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.526223][ T7673] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.535834][ T7673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.554667][ T7673] usb 3-1: Product: 灑䫽첕⨮鵶횎刉䵩蓴騵朝蓃欵妛䳯૮梿췁鐵閚鬧 [ 290.576625][ T7673] usb 3-1: Manufacturer: Ц [ 290.581156][ T7673] usb 3-1: SerialNumber: 侌՛룂髆㇯ꉋ沛뻎 [ 290.604391][ T8076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.650'. [ 290.655936][ T8069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 290.876301][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.888185][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.905765][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.916736][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.936251][ T7673] cdc_ncm 3-1:1.0: bind() failure [ 290.946344][ T7673] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 290.955313][ T7673] cdc_ncm 3-1:1.1: bind() failure [ 290.972428][ T7673] usb 3-1: USB disconnect, device number 28 [ 290.982457][ T7670] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 291.032410][ T7668] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 291.136025][ T7670] usb 5-1: config 0 has no interfaces? [ 291.145695][ T7670] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 291.155188][ T7670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.179412][ T7670] usb 5-1: Product: syz [ 291.188119][ T7668] usb 1-1: config 0 has no interfaces? [ 291.195838][ T7670] usb 5-1: Manufacturer: syz [ 291.201340][ T7670] usb 5-1: SerialNumber: syz [ 291.207434][ T7668] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 291.217739][ T7668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.230962][ T7670] usb 5-1: config 0 descriptor?? [ 291.323417][ T7668] usb 1-1: Product: syz [ 291.338507][ T7668] usb 1-1: Manufacturer: syz [ 291.357046][ T7668] usb 1-1: SerialNumber: syz [ 291.371587][ T7668] usb 1-1: config 0 descriptor?? [ 291.647270][ T8093] netlink: 'syz.0.652': attribute type 4 has an invalid length. [ 291.696038][ T8092] netlink: 64 bytes leftover after parsing attributes in process `syz.2.655'. [ 291.719631][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 292.002735][ T7668] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 292.152438][ T7668] usb 4-1: Invalid ep0 maxpacket: 64 [ 292.282415][ T7668] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 292.433674][ T7668] usb 4-1: Invalid ep0 maxpacket: 64 [ 292.440426][ T7668] usb usb4-port1: attempt power cycle [ 292.551961][ T7670] usb 2-1: USB disconnect, device number 22 [ 292.792404][ T7668] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 292.813581][ T7668] usb 4-1: Invalid ep0 maxpacket: 64 [ 292.838041][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d045c00: rx timeout, send abort [ 292.952617][ T7668] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 292.984280][ T7668] usb 4-1: Invalid ep0 maxpacket: 64 [ 292.994603][ T7668] usb usb4-port1: unable to enumerate USB device [ 293.346274][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d045c00: abort rx timeout. Force session deactivation [ 293.360996][ T5883] usb 5-1: USB disconnect, device number 25 [ 293.762032][ T5835] usb 1-1: USB disconnect, device number 30 [ 294.092390][ T5883] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 294.306295][ T5883] usb 3-1: config 0 has no interfaces? [ 294.332411][ T5883] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 294.341669][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.441564][ T5883] usb 3-1: Product: syz [ 294.450104][ T5883] usb 3-1: Manufacturer: syz [ 294.460444][ T5883] usb 3-1: SerialNumber: syz [ 294.504755][ T5883] usb 3-1: config 0 descriptor?? [ 294.619871][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.631771][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.640913][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.650156][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.659176][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.668942][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.688495][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.716648][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.741375][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 294.741558][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 295.043581][ T7668] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 295.251497][ T7668] usb 5-1: Using ep0 maxpacket: 16 [ 295.324870][ T7668] usb 5-1: config 0 has no interfaces? [ 295.337917][ T7668] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 295.347099][ T7668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.358173][ T7668] usb 5-1: Product: syz [ 295.518028][ T7668] usb 5-1: Manufacturer: syz [ 295.525471][ T7668] usb 5-1: SerialNumber: syz [ 295.533905][ T7668] usb 5-1: config 0 descriptor?? [ 295.727028][ T5835] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 295.853132][ T8136] dns_resolver: Unsupported content type (8) [ 296.248664][ T5835] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 296.297317][ T5835] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 296.349628][ T5835] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.393458][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.513540][ T5835] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.683367][ T5835] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 296.719402][ T8152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.729051][ T8152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.588061][ T5835] usb 3-1: USB disconnect, device number 29 [ 297.849021][ T7668] usb 5-1: USB disconnect, device number 26 [ 298.078260][ T8166] macvlan2: entered promiscuous mode [ 298.079144][ T8168] loop8: detected capacity change from 0 to 7 [ 298.104270][ T8166] macvlan2: entered allmulticast mode [ 298.202929][ T5835] usb 4-1: USB disconnect, device number 24 [ 298.248894][ T8168] Dev loop8: unable to read RDB block 7 [ 298.256516][ T8168] loop8: unable to read partition table [ 298.307956][ T8168] loop8: partition table beyond EOD, truncated [ 298.356197][ T8168] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 298.628155][ T8185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.674518][ T5835] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 299.074195][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 299.096075][ T5835] usb 4-1: config 132 has an invalid interface number: 4 but max is 0 [ 299.108420][ T5835] usb 4-1: config 132 has no interface number 0 [ 299.126031][ T5835] usb 4-1: config 132 interface 4 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 299.198945][ T5835] usb 4-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 299.222705][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.286431][ T5835] usb 4-1: Product: syz [ 299.302972][ T7668] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 299.421288][ T5835] usb 4-1: Manufacturer: syz [ 299.432960][ T5835] usb 4-1: SerialNumber: syz [ 299.452870][ T8172] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 299.489707][ T7668] usb 5-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 299.500341][ T7668] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.530996][ T7668] usb 5-1: New USB device found, idVendor=16d0, idProduct=ec7b, bcdDevice=7f.3a [ 299.540409][ T7670] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.555232][ T7668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.565231][ T7668] usb 5-1: Product: syz [ 299.569407][ T7668] usb 5-1: Manufacturer: syz [ 299.592586][ T7668] usb 5-1: SerialNumber: syz [ 299.610259][ T7668] usb 5-1: config 0 descriptor?? [ 299.722170][ T7670] usb 2-1: config 0 has no interfaces? [ 299.725050][ T5835] usb 4-1: USB disconnect, device number 25 [ 299.734135][ T7670] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 299.743454][ T7670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.751431][ T7670] usb 2-1: Product: syz [ 299.755855][ T7670] usb 2-1: Manufacturer: syz [ 299.760447][ T7670] usb 2-1: SerialNumber: syz [ 299.863005][ T7670] usb 2-1: config 0 descriptor?? [ 300.084657][ T8193] futex_wake_op: syz.2.679 tries to shift op by -33; fix this program [ 300.130557][ T8193] netdevsim netdevsim2: Direct firmware load for . [ 300.130557][ T8193] failed with error -2 [ 300.146982][ T8193] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 300.146982][ T8193] [ 300.159584][ T7670] IPVS: starting estimator thread 0... [ 300.897982][ T8194] IPVS: using max 44 ests per chain, 105600 per kthread [ 301.502388][ T8202] __nla_validate_parse: 43 callbacks suppressed [ 301.502408][ T8202] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.682'. [ 301.532406][ T8202] netlink: zone id is out of range [ 301.537696][ T8202] netlink: get zone limit has 8 unknown bytes [ 301.852411][ T5835] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 301.945068][ T7670] usb 5-1: USB disconnect, device number 27 [ 302.093525][ T5835] usb 1-1: config index 0 descriptor too short (expected 8192, got 77) [ 302.125716][ T5835] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.148618][ T5835] usb 1-1: config 0 has no interfaces? [ 302.275195][ T5835] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 302.284477][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.294507][ T5835] usb 1-1: Product: syz [ 302.312393][ T5883] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 302.321257][ T5835] usb 1-1: Manufacturer: syz [ 302.350619][ T5835] usb 1-1: SerialNumber: syz [ 302.393561][ T5835] usb 1-1: config 0 descriptor?? [ 302.462436][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 302.468929][ T5883] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 302.488062][ T5883] usb 4-1: config 0 has no interface number 0 [ 302.501782][ T5883] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 302.513872][ T5883] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 302.526305][ T5883] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.538538][ T5883] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 302.557172][ T5883] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 302.568315][ T8222] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.584331][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.600379][ T5883] usb 4-1: config 0 descriptor?? [ 302.628223][ T8203] AppArmor: change_hat: Invalid input '0x0000000000>000Q2^' [ 302.642913][ T5883] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 302.655333][ T7668] usb 2-1: USB disconnect, device number 23 [ 302.997645][ T5883] usb 4-1: USB disconnect, device number 26 [ 303.025691][ T5883] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 303.402479][ T7668] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 303.713897][ T7668] usb 5-1: Using ep0 maxpacket: 8 [ 303.886222][ T7668] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 303.907998][ T7668] usb 5-1: config 0 has no interface number 1 [ 303.941365][ T7668] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.995447][ T7668] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 304.079333][ T8243] xt_hashlimit: overflow, rate too high: 0 [ 304.092021][ T7668] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 304.145883][ T7668] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 304.202054][ T7668] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.278710][ T7668] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 304.324053][ T7668] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 304.362432][ T7668] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 304.412176][ T7668] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 304.421870][ T7668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.438056][ T7668] usb 5-1: Product: syz [ 304.464642][ T7668] usb 5-1: Manufacturer: syz [ 304.469264][ T7668] usb 5-1: SerialNumber: syz [ 304.503104][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 304.522970][ T7668] usb 5-1: config 0 descriptor?? [ 304.547807][ T8232] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 304.574713][ T7668] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.598477][ T7668] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.614720][ T5835] usb 1-1: USB disconnect, device number 31 [ 304.692438][ T5878] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 304.706106][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 304.727681][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.746969][ T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 304.749796][ T7668] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 304.782511][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.831918][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.847472][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.872859][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 304.878047][ T24] usb 3-1: Product: syz [ 304.889170][ T5878] usb 4-1: config 6 has an invalid interface number: 152 but max is 3 [ 304.901823][ T24] usb 3-1: Manufacturer: syz [ 304.923426][ T24] usb 3-1: SerialNumber: syz [ 304.929643][ T5878] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 304.947113][ T24] usb 3-1: config 0 descriptor?? [ 304.952144][ T5878] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 304.964594][ T8249] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 304.972832][ T5878] usb 4-1: config 6 has no interface number 0 [ 304.982182][ T24] usb 3-1: ucan: probing device on interface #0 [ 304.989102][ T5835] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 305.004500][ T24] usb 3-1: ucan: invalid EP count (1) [ 305.011275][ T24] usb 3-1: ucan: probe failed; try to update the device firmware [ 305.019221][ T5878] usb 4-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 305.033701][ T5878] usb 4-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 305.047301][ T5878] usb 4-1: config 6 interface 152 has no altsetting 0 [ 305.057806][ T5878] usb 4-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 305.068459][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.078091][ T5878] usb 4-1: Product: syz [ 305.084181][ T5878] usb 4-1: Manufacturer: syz [ 305.088795][ T5878] usb 4-1: SerialNumber: syz [ 305.132380][ T5835] usb 1-1: device descriptor read/64, error -71 [ 305.315139][ T5878] ushc 4-1:6.152: probe with driver ushc failed with error -71 [ 305.325286][ T5878] usb 4-1: USB disconnect, device number 27 [ 305.373487][ T5835] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 305.512505][ T5835] usb 1-1: device descriptor read/64, error -71 [ 305.623170][ T5835] usb usb1-port1: attempt power cycle [ 305.840679][ T8276] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 306.033044][ T5835] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 306.270237][ T7673] usb 5-1: USB disconnect, device number 28 [ 306.352946][ T5835] usb 1-1: device descriptor read/8, error -71 [ 306.592348][ T5835] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 306.613752][ T5835] usb 1-1: device descriptor read/8, error -71 [ 306.732631][ T5835] usb usb1-port1: unable to enumerate USB device [ 307.143793][ T7668] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 307.222446][ T7673] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 307.277022][ T5878] usb 3-1: USB disconnect, device number 30 [ 307.314265][ T7668] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.354166][ T7668] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 307.373447][ T7668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 307.393139][ T7673] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 307.403910][ T7668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 307.420555][ T7673] usb 5-1: config 0 has no interface number 0 [ 307.427874][ T7673] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.438896][ T7668] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.452104][ T7673] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.465288][ T7673] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 307.476676][ T7668] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 307.486304][ T7668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 307.494524][ T7673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.503014][ T7668] usb 2-1: Product: syz [ 307.508709][ T7668] usb 2-1: Manufacturer: syz [ 307.514781][ T7673] usb 5-1: config 0 descriptor?? [ 307.519929][ T7668] usb 2-1: SerialNumber: syz [ 307.532193][ T7668] usb 2-1: config 0 descriptor?? [ 307.746968][ T7668] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 307.753912][ T7668] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 307.831743][ T8305] blktrace: Concurrent blktraces are not allowed on sg0 [ 307.934414][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.715'. [ 307.948185][ T7668] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 307.962710][ T8307] macsec1: entered allmulticast mode [ 307.968807][ T7668] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 307.987870][ T8307] macvlan1: entered allmulticast mode [ 307.994763][ T8307] veth1_vlan: entered allmulticast mode [ 308.000962][ T7668] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 308.025582][ T7673] prodikeys 0003:041E:2801.000C: unknown main item tag 0x4 [ 308.052377][ T7673] prodikeys 0003:041E:2801.000C: unknown main item tag 0x3 [ 308.060870][ T8307] macvlan1: left allmulticast mode [ 308.066326][ T8307] veth1_vlan: left allmulticast mode [ 308.073500][ T7670] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 308.097034][ T7673] prodikeys 0003:041E:2801.000C: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 308.121864][ T7673] hid_prodikeys: hid-prodikeys: failed to find output report [ 308.121864][ T7673] [ 308.151095][ T7668] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 308.232424][ T7670] usb 1-1: Using ep0 maxpacket: 16 [ 308.247063][ T7670] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 308.257381][ T7670] usb 1-1: config 0 has no interface number 0 [ 308.267142][ T7670] usb 1-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x44, changing to 0x4 [ 308.304506][ T7670] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 308.307667][ T24] usb 5-1: USB disconnect, device number 29 [ 308.324645][ T7670] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid maxpacket 16706, setting to 1024 [ 308.353285][ T7670] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 308.372064][ T7670] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 308.381794][ T7670] usb 1-1: Product: syz [ 308.388963][ T7670] usb 1-1: SerialNumber: syz [ 308.404343][ T7670] usb 1-1: config 0 descriptor?? [ 308.644697][ T7670] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.665451][ T7670] usb 1-1: invalid MIDI in EP 0 [ 308.794743][ T7670] snd-usb-audio 1-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 308.828600][ T7670] usb 1-1: USB disconnect, device number 36 [ 308.874504][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.964330][ T8317] netlink: 72 bytes leftover after parsing attributes in process `syz.4.717'. [ 309.068798][ T8320] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 309.138614][ T8317] bridge_slave_0: left allmulticast mode [ 309.147553][ T8317] bridge_slave_0: left promiscuous mode [ 309.155885][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.167286][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.184957][ T8286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.195332][ T8286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.208522][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.271380][ T7668] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 309.291434][ T7668] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 309.319326][ T7668] usb 2-1: USB disconnect, device number 24 [ 309.332272][ T8317] bridge_slave_1: left allmulticast mode [ 309.341515][ T8317] bridge_slave_1: left promiscuous mode [ 309.381245][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.487073][ T8317] bond0: (slave bond_slave_0): Releasing backup interface [ 309.523033][ T5835] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 309.545796][ T8317] team0: Port device team_slave_0 removed [ 309.606946][ T8317] team0: Port device team_slave_1 removed [ 309.635739][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.652604][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.666671][ T8317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.682546][ T7668] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 309.698233][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.714222][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 309.729848][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.739353][ T8317] batman_adv: batadv0: Removing interface: gretap1 [ 309.778363][ T8317] bond3: (slave gretap2): Releasing active interface [ 309.783455][ T5835] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 309.826604][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.842424][ T7668] usb 2-1: Using ep0 maxpacket: 32 [ 309.849883][ T7668] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 309.864105][ T5835] usb 3-1: Product: syz [ 309.879688][ T5835] usb 3-1: Manufacturer: syz [ 309.880796][ T7668] usb 2-1: config 0 has no interface number 0 [ 309.901447][ T7668] usb 2-1: config 0 interface 184 has no altsetting 0 [ 309.913938][ T7668] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 309.927252][ T5835] usb 3-1: SerialNumber: syz [ 309.927811][ T7668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.952229][ T7668] usb 2-1: Product: syz [ 309.957727][ T7668] usb 2-1: Manufacturer: syz [ 309.964507][ T7668] usb 2-1: SerialNumber: syz [ 309.965473][ T5835] usb 3-1: config 0 descriptor?? [ 309.991256][ T8327] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 309.995006][ T7668] usb 2-1: config 0 descriptor?? [ 310.046656][ T7668] smsc75xx v1.0.0 [ 310.058653][ T5835] usb 3-1: ucan: probing device on interface #0 [ 310.085039][ T5835] usb 3-1: ucan: invalid EP count (1) [ 310.105100][ T5835] usb 3-1: ucan: probe failed; try to update the device firmware [ 310.199904][ T8345] futex_wake_op: syz.0.721 tries to shift op by -33; fix this program [ 310.216881][ T8345] netdevsim netdevsim0: Direct firmware load for . [ 310.216881][ T8345] failed with error -2 [ 310.227820][ T8345] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 310.227820][ T8345] [ 310.489893][ T7668] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 310.509390][ T7668] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 310.592626][ T5835] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 310.737030][ T8355] Invalid option length (0) for dns_resolver key [ 310.753038][ T5835] usb 5-1: Using ep0 maxpacket: 16 [ 310.781044][ T5835] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 310.799587][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.828800][ T7668] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 310.850787][ T5835] usb 5-1: Product: syz [ 310.867690][ T5835] usb 5-1: Manufacturer: syz [ 310.887035][ T7668] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 310.888476][ T5835] usb 5-1: SerialNumber: syz [ 310.931758][ T5835] r8152-cfgselector 5-1: Unknown version 0x0000 [ 310.947384][ T5835] r8152-cfgselector 5-1: config 0 descriptor?? [ 310.952341][ T7668] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 311.002641][ T7668] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 311.071097][ T7668] usb 2-1: USB disconnect, device number 25 [ 311.387452][ T7668] r8152-cfgselector 5-1: USB disconnect, device number 30 [ 312.298497][ T5835] usb 3-1: USB disconnect, device number 31 [ 312.605206][ T8389] netlink: 'syz.3.737': attribute type 5 has an invalid length. [ 312.627195][ T8389] ip6erspan0: entered promiscuous mode [ 312.669040][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.737'. [ 313.542883][ T8407] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 314.303989][ T5835] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 314.402393][ T5878] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 314.512839][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 314.550026][ T5835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 314.575900][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 314.616327][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.627694][ T5835] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 314.648499][ T5835] usb 1-1: config 127 has 0 interfaces, different from the descriptor's value: 1 [ 314.662728][ T5878] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 314.731858][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.748813][ T5878] usb 4-1: Product: syz [ 314.758980][ T5878] usb 4-1: Manufacturer: syz [ 314.764952][ T5835] usb 1-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4 [ 314.774094][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.784894][ T5878] usb 4-1: SerialNumber: syz [ 314.799315][ T5835] usb 1-1: Product: syz [ 314.804548][ T5878] usb 4-1: config 0 descriptor?? [ 314.809689][ T5835] usb 1-1: Manufacturer: syz [ 314.814650][ T8420] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 314.893124][ T5878] usb 4-1: ucan: probing device on interface #0 [ 314.899407][ T5835] usb 1-1: SerialNumber: syz [ 315.011408][ T5878] usb 4-1: ucan: invalid EP count (1) [ 315.031702][ T5878] usb 4-1: ucan: probe failed; try to update the device firmware [ 315.220567][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 315.275572][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.284823][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.327170][ T8411] team0: Port device syz_tun removed [ 315.348091][ T8432] xt_hashlimit: overflow, rate too high: 0 [ 315.486303][ T5835] usb 1-1: USB disconnect, device number 37 [ 316.061670][ T7668] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 316.191870][ T8449] fuse: Unknown parameter 'grou00000000000000000000' [ 316.205389][ T8449] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 316.302989][ T7668] usb 5-1: config 0 has no interfaces? [ 316.415764][ T7668] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 316.430229][ T7668] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.458810][ T7668] usb 5-1: Product: syz [ 316.471013][ T7668] usb 5-1: Manufacturer: syz [ 316.492209][ T7668] usb 5-1: SerialNumber: syz [ 316.554021][ T8455] netlink: 'syz.1.756': attribute type 5 has an invalid length. [ 316.568780][ T8455] ip6erspan0: entered promiscuous mode [ 316.632110][ T7668] usb 5-1: config 0 descriptor?? [ 316.656641][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.756'. [ 317.020237][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.026615][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.084502][ T7668] usb 4-1: USB disconnect, device number 28 [ 317.365967][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.753'. [ 317.375249][ T8442] openvswitch: netlink: Flow key attr not present in new flow. [ 317.567114][ T8468] dvmrp1: left allmulticast mode [ 318.152513][ T8468] xfrm0: left allmulticast mode [ 318.712581][ T8477] netlink: 'syz.1.760': attribute type 10 has an invalid length. [ 318.858964][ T7673] usb 5-1: USB disconnect, device number 31 [ 318.928582][ T8480] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 318.943422][ T8477] team0: Port device syz_tun added [ 319.131927][ T8486] netlink: 'syz.0.764': attribute type 4 has an invalid length. [ 319.140524][ T8484] dummy0: entered promiscuous mode [ 319.152775][ T8484] macsec1: entered promiscuous mode [ 319.176608][ T8484] macsec1: entered allmulticast mode [ 319.188644][ T8484] dummy0: entered allmulticast mode [ 319.198377][ T8484] dummy0: left allmulticast mode [ 319.210565][ T8484] dummy0: left promiscuous mode [ 319.525097][ T8498] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[8498] [ 319.541199][ T8498] netlink: 88 bytes leftover after parsing attributes in process `syz.3.759'. [ 319.555342][ T8496] netlink: 'syz.2.769': attribute type 1 has an invalid length. [ 319.568238][ T8498] netlink: 'syz.3.759': attribute type 21 has an invalid length. [ 319.576234][ T8498] netlink: 128 bytes leftover after parsing attributes in process `syz.3.759'. [ 319.585664][ T8498] netlink: 'syz.3.759': attribute type 4 has an invalid length. [ 319.593605][ T8498] netlink: 3 bytes leftover after parsing attributes in process `syz.3.759'. [ 319.676706][ T8496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.842490][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 320.012689][ T24] usb 5-1: config 0 has no interfaces? [ 320.065959][ T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 320.182639][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.207278][ T24] usb 5-1: Product: syz [ 320.211565][ T24] usb 5-1: Manufacturer: syz [ 320.216532][ T24] usb 5-1: SerialNumber: syz [ 320.223958][ T24] usb 5-1: config 0 descriptor?? [ 320.805750][ T8521] loop8: detected capacity change from 0 to 7 [ 320.841807][ T8521] Dev loop8: unable to read RDB block 7 [ 320.869414][ T8521] loop8: unable to read partition table [ 320.895884][ T8521] loop8: partition table beyond EOD, truncated [ 320.928483][ T8521] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 320.962485][ T5835] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 321.532801][ T5835] usb 1-1: config 5 has an invalid interface number: 13 but max is 0 [ 321.540933][ T5835] usb 1-1: config 5 has no interface number 0 [ 321.599295][ T5835] usb 1-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=4b.77 [ 321.736843][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 321.899623][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.907888][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd86800: rx timeout, send abort [ 322.105228][ T8536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.114438][ T8536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.407924][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807dd86800: abort rx timeout. Force session deactivation [ 322.709940][ T24] usb 5-1: USB disconnect, device number 32 [ 323.474454][ T8558] netlink: 'syz.1.787': attribute type 5 has an invalid length. [ 323.485940][ T5835] usb 1-1: string descriptor 0 read error: -71 [ 323.506545][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 323.535603][ T5835] smsusb:smsusb_probe: board id=8, interface number 13 [ 323.578525][ T5835] usb 1-1: USB disconnect, device number 38 [ 324.026206][ T7668] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 324.185723][ T7668] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 324.251474][ T7668] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 324.297033][ T7668] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 324.309896][ T7668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.379710][ T7668] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 324.465219][ T7668] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 324.886743][ T8562] input: syz0 as /devices/virtual/input/input19 [ 324.900949][ T8584] netlink: 844 bytes leftover after parsing attributes in process `syz.0.795'. [ 324.910549][ T7673] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 324.955816][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 325.084329][ T7673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.095822][ T7673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.111581][ T7673] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 325.126261][ T7673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.152030][ T7673] usb 5-1: config 0 descriptor?? [ 325.165981][ T24] usb 2-1: config 0 has no interfaces? [ 325.175906][ T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 325.192838][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.201862][ T24] usb 2-1: Product: syz [ 325.213371][ T24] usb 2-1: Manufacturer: syz [ 325.225971][ T24] usb 2-1: SerialNumber: syz [ 325.247857][ T24] usb 2-1: config 0 descriptor?? [ 325.367607][ T7673] usbhid 5-1:0.0: can't add hid device: -71 [ 325.392459][ T7673] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 325.405434][ T7673] usb 5-1: USB disconnect, device number 33 [ 326.122357][ T7673] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 326.175342][ T8594] tipc: Invalid UDP bearer configuration [ 326.175378][ T8594] tipc: Enabling of bearer rejected, failed to enable media [ 326.294347][ T7673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 326.307222][ T7673] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 326.320710][ T7673] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 326.331325][ T7673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.367672][ T7673] usb 1-1: Product: syz [ 326.380309][ T7673] usb 1-1: Manufacturer: syz [ 326.390096][ T7673] usb 1-1: SerialNumber: syz [ 326.417495][ T8599] netlink: 156 bytes leftover after parsing attributes in process `syz.2.800'. [ 326.437417][ T8599] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 326.474053][ T7673] usb 1-1: config 0 descriptor?? [ 326.488007][ T8590] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 326.502594][ T7673] usb 1-1: ucan: probing device on interface #0 [ 326.509130][ T7673] usb 1-1: ucan: invalid EP count (1) [ 326.515477][ T7673] usb 1-1: ucan: probe failed; try to update the device firmware [ 326.652140][ T8561] delete_channel: no stack [ 326.674730][ T7673] usb 4-1: USB disconnect, device number 29 [ 326.921340][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021b71400: rx timeout, send abort [ 327.248130][ T8609] netlink: 'syz.3.803': attribute type 5 has an invalid length. [ 327.297094][ T8609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.803'. [ 327.429641][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021b71400: abort rx timeout. Force session deactivation [ 327.561048][ T5835] usb 2-1: USB disconnect, device number 26 [ 328.332429][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 328.630015][ T24] usb 4-1: config 0 has no interfaces? [ 328.681622][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 328.716278][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.749445][ T24] usb 4-1: Product: syz [ 328.760747][ T24] usb 4-1: Manufacturer: syz [ 328.780317][ T24] usb 4-1: SerialNumber: syz [ 328.905285][ T7668] usb 1-1: USB disconnect, device number 39 [ 329.032009][ T24] usb 4-1: config 0 descriptor?? [ 329.072376][ T7670] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 329.263980][ T7670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.278047][ T7670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.356385][ T7670] usb 3-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 329.387342][ T7670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.441586][ T7670] usb 3-1: config 0 descriptor?? [ 329.519317][ T8635] netlink: 'syz.3.807': attribute type 4 has an invalid length. [ 329.618444][ T24] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 329.633508][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 329.633523][ T30] audit: type=1326 audit(1748179710.451:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 329.670819][ T7670] usbhid 3-1:0.0: can't add hid device: -71 [ 329.678328][ T7670] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 329.689934][ T7670] usb 3-1: USB disconnect, device number 32 [ 329.696055][ T8640] netlink: 'syz.4.814': attribute type 10 has an invalid length. [ 329.717525][ T8640] team0: Port device wlan1 added [ 329.796806][ T30] audit: type=1326 audit(1748179710.461:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 329.870066][ T30] audit: type=1326 audit(1748179710.461:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 329.898026][ T30] audit: type=1326 audit(1748179710.461:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 329.898323][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.930039][ T30] audit: type=1326 audit(1748179710.461:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 329.952612][ T24] usb 1-1: config 0 has no interface number 0 [ 329.959924][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 329.969204][ T30] audit: type=1326 audit(1748179710.461:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 329.991507][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.001827][ T30] audit: type=1326 audit(1748179710.461:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 330.025012][ T24] usb 1-1: config 0 descriptor?? [ 330.038601][ T24] usb 1-1: selecting invalid altsetting 1 [ 330.052198][ T24] dvb_ttusb_budget: ttusb_init_controller: error [ 330.059069][ T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 330.069072][ T30] audit: type=1326 audit(1748179710.461:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 330.176057][ T30] audit: type=1326 audit(1748179710.461:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 330.272919][ T30] audit: type=1326 audit(1748179710.461:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8632 comm="syz.1.813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f15df98e969 code=0x7ffc0000 [ 330.515911][ T24] DVB: Unable to find symbol cx22700_attach() [ 330.913347][ T24] DVB: Unable to find symbol tda10046_attach() [ 330.946304][ T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 331.027933][ T7670] usb 4-1: USB disconnect, device number 30 [ 331.150913][ T8667] syz_tun: entered allmulticast mode [ 331.211862][ T8666] syz_tun: left allmulticast mode [ 331.342435][ T7670] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 331.492397][ T7670] usb 4-1: Using ep0 maxpacket: 8 [ 331.503922][ T7670] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.530545][ T7670] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.571239][ T7670] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 331.606975][ T7670] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 331.647781][ T7670] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 331.663346][ T8676] FAULT_INJECTION: forcing a failure. [ 331.663346][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.671023][ T7670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.702528][ T8676] CPU: 0 UID: 0 PID: 8676 Comm: syz.1.827 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 331.702553][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.702570][ T8676] Call Trace: [ 331.702580][ T8676] [ 331.702588][ T8676] dump_stack_lvl+0x189/0x250 [ 331.702617][ T8676] ? __lock_acquire+0xaac/0xd20 [ 331.702642][ T8676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.702666][ T8676] ? __pfx__printk+0x10/0x10 [ 331.702682][ T8676] ? __might_fault+0xb0/0x130 [ 331.702714][ T8676] should_fail_ex+0x414/0x560 [ 331.702735][ T8676] _copy_from_user+0x2d/0xb0 [ 331.702753][ T8676] ___sys_sendmsg+0x158/0x2a0 [ 331.702773][ T8676] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.702812][ T8676] ? __fget_files+0x2a/0x420 [ 331.702828][ T8676] ? __fget_files+0x3a0/0x420 [ 331.702850][ T8676] __x64_sys_sendmsg+0x19b/0x260 [ 331.702869][ T8676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.702897][ T8676] ? do_syscall_64+0xba/0x210 [ 331.702916][ T8676] do_syscall_64+0xf6/0x210 [ 331.702933][ T8676] ? clear_bhb_loop+0x60/0xb0 [ 331.702948][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.702960][ T8676] RIP: 0033:0x7f15df98e969 [ 331.702971][ T8676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.702982][ T8676] RSP: 002b:00007f15e07e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.702995][ T8676] RAX: ffffffffffffffda RBX: 00007f15dfbb5fa0 RCX: 00007f15df98e969 [ 331.703004][ T8676] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 331.703012][ T8676] RBP: 00007f15e07e5090 R08: 0000000000000000 R09: 0000000000000000 [ 331.703019][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.703026][ T8676] R13: 0000000000000000 R14: 00007f15dfbb5fa0 R15: 00007f15dfcdfa28 [ 331.703044][ T8676] [ 332.093381][ T7670] hub 4-1:1.0: bad descriptor, ignoring hub [ 332.099391][ T7670] hub 4-1:1.0: probe with driver hub failed with error -5 [ 332.116789][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 332.135771][ T7670] cdc_wdm 4-1:1.0: skipping garbage [ 332.152679][ T7670] cdc_wdm 4-1:1.0: skipping garbage [ 332.162793][ T7673] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 332.186230][ T7670] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 332.204642][ T7670] cdc_wdm 4-1:1.0: Unknown control protocol [ 332.297572][ T7670] usb 4-1: USB disconnect, device number 31 [ 332.334875][ T24] usb 1-1: USB disconnect, device number 40 [ 332.350731][ T7673] usb 5-1: config 5 has an invalid interface number: 13 but max is 0 [ 332.359645][ T7673] usb 5-1: config 5 has no interface number 0 [ 332.385890][ T7673] usb 5-1: New USB device found, idVendor=2040, idProduct=b980, bcdDevice=4b.77 [ 332.475656][ T7673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.681381][ T8689] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 332.752539][ T7674] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 332.840915][ T7670] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 332.922333][ T7674] usb 2-1: Using ep0 maxpacket: 16 [ 332.972352][ T7668] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 332.980049][ T7670] usb 4-1: device descriptor read/64, error -71 [ 333.012741][ T7674] usb 2-1: config 0 has no interfaces? [ 333.018268][ T7674] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 333.027631][ T7674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.053222][ T7674] usb 2-1: config 0 descriptor?? [ 333.158863][ T7668] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 333.168684][ T7668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.177392][ T7668] usb 3-1: Product: syz [ 333.181779][ T7668] usb 3-1: Manufacturer: syz [ 333.186589][ T7668] usb 3-1: SerialNumber: syz [ 333.207783][ T7668] usb 3-1: config 0 descriptor?? [ 333.232568][ T7670] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 333.269436][ T8685] [U] .h0FwZ,iqgҏV2sO [ 333.277926][ T8685] [U] ` w*BBOLhU [ 333.282454][ T8685] [U] w$n|#%o.z\̧mРw [ 333.291374][ T8685] [U] R{ꫢ S [ 333.372413][ T7670] usb 4-1: device descriptor read/64, error -71 [ 333.482736][ T7670] usb usb4-port1: attempt power cycle [ 333.707150][ T8695] loop6: detected capacity change from 0 to 7 [ 333.720000][ T8258] Dev loop6: unable to read RDB block 7 [ 333.728577][ T8258] loop6: unable to read partition table [ 333.734612][ T8258] loop6: partition table beyond EOD, truncated [ 333.748280][ T8695] Dev loop6: unable to read RDB block 7 [ 333.754716][ T8695] loop6: unable to read partition table [ 333.760676][ T8695] loop6: partition table beyond EOD, truncated [ 333.767615][ T8695] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 333.832892][ T7670] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 333.863300][ T7670] usb 4-1: device descriptor read/8, error -71 [ 334.302614][ T7670] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 334.429155][ T7673] usb 5-1: string descriptor 0 read error: -71 [ 334.503083][ T7673] smsusb:smsusb_probe: board id=8, interface number 13 [ 334.512431][ T7670] usb 4-1: device not accepting address 35, error -71 [ 334.519383][ T7668] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 334.533125][ T7670] usb usb4-port1: unable to enumerate USB device [ 334.539843][ T7673] usb 5-1: USB disconnect, device number 34 [ 334.703468][ T7668] usb 1-1: Using ep0 maxpacket: 8 [ 334.779672][ T7668] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 334.788951][ T7668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.797479][ T7668] usb 1-1: Product: syz [ 334.801678][ T7668] usb 1-1: Manufacturer: syz [ 334.809380][ T7668] usb 1-1: SerialNumber: syz [ 334.831275][ T7668] usb 1-1: config 0 descriptor?? [ 335.125669][ T7668] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 335.395040][ T8684] [U] [ 335.404525][ T7673] usb 2-1: USB disconnect, device number 27 [ 335.411186][ T8713] futex_wake_op: syz.3.836 tries to shift op by -33; fix this program [ 335.425501][ T8713] netdevsim netdevsim3: Direct firmware load for . [ 335.425501][ T8713] failed with error -2 [ 335.450332][ T8713] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 335.450332][ T8713] [ 335.929720][ T8703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.952169][ T8703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.098119][ T7673] usb 3-1: USB disconnect, device number 33 [ 336.372507][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 336.472360][ T5835] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 336.502510][ T24] usb 2-1: device descriptor read/64, error -71 [ 336.773565][ T5835] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.822569][ T5835] usb 4-1: config 0 has no interface number 0 [ 336.858142][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 336.942729][ T5835] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 337.058837][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.144361][ T5835] usb 4-1: config 0 descriptor?? [ 337.154531][ T5835] usb 4-1: selecting invalid altsetting 1 [ 337.161032][ T5835] dvb_ttusb_budget: ttusb_init_controller: error [ 337.175525][ T7668] usb write operation failed. (-71) [ 337.182375][ T24] usb 2-1: device descriptor read/64, error -71 [ 337.196500][ T7668] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 337.224076][ T7668] dvbdev: DVB: registering new adapter (Terratec H7) [ 337.298572][ T7668] usb 1-1: media controller created [ 337.302872][ T24] usb usb2-port1: attempt power cycle [ 337.336214][ T5835] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 337.340179][ T7668] usb read operation failed. (-71) [ 337.386896][ T7668] usb write operation failed. (-71) [ 337.389962][ T8723] usb read operation failed. (-71) [ 337.397695][ T8723] ------------[ cut here ]------------ [ 337.403209][ T8723] DEBUG_LOCKS_WARN_ON(__owner_task(owner) != get_current()) [ 337.422921][ T8723] WARNING: CPU: 0 PID: 8723 at kernel/locking/mutex.c:918 __mutex_unlock_slowpath+0x22e/0x700 [ 337.440869][ T8723] Modules linked in: [ 337.445065][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.3.840 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 337.457225][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.467801][ T8723] RIP: 0010:__mutex_unlock_slowpath+0x22e/0x700 [ 337.474765][ T8723] Code: 0f b6 04 03 84 c0 0f 85 d1 00 00 00 83 3d 7d 74 27 04 00 75 19 90 48 c7 c7 e0 d1 6a 8b 48 c7 c6 60 d9 6a 8b e8 73 5e 2c f6 90 <0f> 0b 90 90 90 48 89 da e9 29 ff ff ff 48 89 d3 90 e8 ac b9 5d f9 [ 337.494821][ T8723] RSP: 0018:ffffc90003a3f700 EFLAGS: 00010246 [ 337.500887][ T8723] RAX: abeb948675ff2100 RBX: 1ffffffff1efec8a RCX: 0000000000080000 [ 337.509026][ T8723] RDX: ffffc9000c84b000 RSI: 000000000000ac87 RDI: 000000000000ac88 [ 337.517064][ T8723] RBP: ffffc90003a3f810 R08: 0000000000000003 R09: 0000000000000004 [ 337.525069][ T8723] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: ffffc90003a3f7a0 [ 337.533154][ T8723] R13: 1ffff92000747ee8 R14: 1ffffffff33020d4 R15: ffff88807c620000 [ 337.541139][ T8723] FS: 00007f8f910ac6c0(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 337.550102][ T8723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.556721][ T8723] CR2: 00007f8f9108bd58 CR3: 0000000027662000 CR4: 00000000003526f0 [ 337.564735][ T8723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 337.572950][ T8723] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 337.580925][ T8723] Call Trace: [ 337.584470][ T8723] [ 337.587401][ T8723] ? __pfx__printk+0x10/0x10 [ 337.591988][ T8723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 337.598065][ T8723] ? usb_control_msg+0x2bf/0x3e0 [ 337.603046][ T8723] ? __az6007_read+0xd4/0x160 [ 337.607734][ T8723] az6007_i2c_xfer+0xb65/0xb90 [ 337.612518][ T8723] __i2c_transfer+0x871/0x2170 [ 337.617276][ T8723] ? __pfx___i2c_transfer+0x10/0x10 [ 337.622575][ T8723] ? __kasan_kmalloc+0x93/0xb0 [ 337.627377][ T8723] ? __i2c_smbus_xfer+0xa25/0x1e50 [ 337.632511][ T8723] __i2c_smbus_xfer+0xfb0/0x1e50 [ 337.637443][ T8723] ? __lock_acquire+0x9e0/0xd20 [ 337.642333][ T8723] ? do_raw_spin_lock+0x121/0x290 [ 337.647531][ T8723] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 337.652914][ T8723] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 337.658824][ T8723] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 337.664736][ T8723] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 337.671062][ T8723] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 337.676662][ T8723] i2c_smbus_xfer+0x275/0x3c0 [ 337.681342][ T8723] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 337.686746][ T8723] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 337.691765][ T8723] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 337.697331][ T8723] i2cdev_ioctl+0x5d3/0x7f0 [ 337.701825][ T8723] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 337.706878][ T8723] ? __fget_files+0x2a/0x420 [ 337.711477][ T8723] ? bpf_lsm_file_ioctl+0x9/0x20 [ 337.716446][ T8723] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 337.721473][ T8723] __se_sys_ioctl+0xf9/0x170 [ 337.726097][ T8723] do_syscall_64+0xf6/0x210 [ 337.730602][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 337.735294][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.741180][ T8723] RIP: 0033:0x7f8f9018e969 [ 337.745617][ T8723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.765248][ T8723] RSP: 002b:00007f8f910ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.773672][ T8723] RAX: ffffffffffffffda RBX: 00007f8f903b5fa0 RCX: 00007f8f9018e969 [ 337.781841][ T8723] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000006 [ 337.790143][ T8723] RBP: 00007f8f90210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 337.798127][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.806133][ T8723] R13: 0000000000000000 R14: 00007f8f903b5fa0 R15: 00007f8f904dfa28 [ 337.814133][ T8723] [ 337.817150][ T8723] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 337.824437][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.3.840 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 337.836309][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.846349][ T8723] Call Trace: [ 337.849614][ T8723] [ 337.852534][ T8723] dump_stack_lvl+0x99/0x250 [ 337.857116][ T8723] ? __asan_memcpy+0x40/0x70 [ 337.861706][ T8723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.866895][ T8723] ? __pfx__printk+0x10/0x10 [ 337.871491][ T8723] panic+0x2db/0x790 [ 337.875390][ T8723] ? __pfx_panic+0x10/0x10 [ 337.879798][ T8723] ? show_trace_log_lvl+0x4fb/0x550 [ 337.884993][ T8723] __warn+0x31b/0x4b0 [ 337.888968][ T8723] ? __mutex_unlock_slowpath+0x22e/0x700 [ 337.894594][ T8723] ? __mutex_unlock_slowpath+0x22e/0x700 [ 337.900215][ T8723] report_bug+0x2be/0x4f0 [ 337.904533][ T8723] ? __mutex_unlock_slowpath+0x22e/0x700 [ 337.910162][ T8723] ? __mutex_unlock_slowpath+0x22e/0x700 [ 337.915791][ T8723] ? __mutex_unlock_slowpath+0x230/0x700 [ 337.921417][ T8723] handle_bug+0x84/0x160 [ 337.925680][ T8723] exc_invalid_op+0x1a/0x50 [ 337.930177][ T8723] asm_exc_invalid_op+0x1a/0x20 [ 337.935014][ T8723] RIP: 0010:__mutex_unlock_slowpath+0x22e/0x700 [ 337.941251][ T8723] Code: 0f b6 04 03 84 c0 0f 85 d1 00 00 00 83 3d 7d 74 27 04 00 75 19 90 48 c7 c7 e0 d1 6a 8b 48 c7 c6 60 d9 6a 8b e8 73 5e 2c f6 90 <0f> 0b 90 90 90 48 89 da e9 29 ff ff ff 48 89 d3 90 e8 ac b9 5d f9 [ 337.960857][ T8723] RSP: 0018:ffffc90003a3f700 EFLAGS: 00010246 [ 337.966918][ T8723] RAX: abeb948675ff2100 RBX: 1ffffffff1efec8a RCX: 0000000000080000 [ 337.974882][ T8723] RDX: ffffc9000c84b000 RSI: 000000000000ac87 RDI: 000000000000ac88 [ 337.982841][ T8723] RBP: ffffc90003a3f810 R08: 0000000000000003 R09: 0000000000000004 [ 337.990806][ T8723] R10: dffffc0000000000 R11: fffffbfff1bba984 R12: ffffc90003a3f7a0 [ 337.998780][ T8723] R13: 1ffff92000747ee8 R14: 1ffffffff33020d4 R15: ffff88807c620000 [ 338.006749][ T8723] ? __pfx__printk+0x10/0x10 [ 338.011330][ T8723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.017320][ T8723] ? usb_control_msg+0x2bf/0x3e0 [ 338.022257][ T8723] ? __az6007_read+0xd4/0x160 [ 338.026954][ T8723] az6007_i2c_xfer+0xb65/0xb90 [ 338.031710][ T8723] __i2c_transfer+0x871/0x2170 [ 338.036463][ T8723] ? __pfx___i2c_transfer+0x10/0x10 [ 338.041644][ T8723] ? __kasan_kmalloc+0x93/0xb0 [ 338.046400][ T8723] ? __i2c_smbus_xfer+0xa25/0x1e50 [ 338.051504][ T8723] __i2c_smbus_xfer+0xfb0/0x1e50 [ 338.056442][ T8723] ? __lock_acquire+0x9e0/0xd20 [ 338.061291][ T8723] ? do_raw_spin_lock+0x121/0x290 [ 338.066327][ T8723] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 338.071689][ T8723] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 338.077574][ T8723] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 338.083458][ T8723] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 338.089775][ T8723] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 338.095140][ T8723] i2c_smbus_xfer+0x275/0x3c0 [ 338.099808][ T8723] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 338.104997][ T8723] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 338.110008][ T8723] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 338.115547][ T8723] i2cdev_ioctl+0x5d3/0x7f0 [ 338.120032][ T8723] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 338.125057][ T8723] ? __fget_files+0x2a/0x420 [ 338.129640][ T8723] ? bpf_lsm_file_ioctl+0x9/0x20 [ 338.134568][ T8723] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 338.139577][ T8723] __se_sys_ioctl+0xf9/0x170 [ 338.144151][ T8723] do_syscall_64+0xf6/0x210 [ 338.148646][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 338.153308][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.159198][ T8723] RIP: 0033:0x7f8f9018e969 [ 338.163599][ T8723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.183205][ T8723] RSP: 002b:00007f8f910ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 338.191608][ T8723] RAX: ffffffffffffffda RBX: 00007f8f903b5fa0 RCX: 00007f8f9018e969 [ 338.199580][ T8723] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000006 [ 338.207542][ T8723] RBP: 00007f8f90210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 338.215501][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.223460][ T8723] R13: 0000000000000000 R14: 00007f8f903b5fa0 R15: 00007f8f904dfa28 [ 338.231428][ T8723] [ 338.234746][ T8723] Kernel Offset: disabled [ 338.239065][ T8723] Rebooting in 86400 seconds..