last executing test programs: 2m30.21765445s ago: executing program 4 (id=2535): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e", 0x7}, {&(0x7f0000002240)="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", 0x29a}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="04", 0x3a98, 0x10008095, 0x0, 0x0) 2m29.105199086s ago: executing program 4 (id=2541): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x2000000006c0, 0x0, 0x0, 0x2000000006f0, 0x200000000720], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000000000002000000000000000000000000000000000840000000006000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fefdffff00000000"]}, 0x108) 2m28.902635746s ago: executing program 4 (id=2542): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e", 0x7}, {&(0x7f0000002240)="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", 0x34a}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="04", 0x1, 0x10008095, 0x0, 0x0) 2m27.872768434s ago: executing program 4 (id=2547): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}, 0x108) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@multicast2}]}, @ssrr={0x89, 0x3, 0xce}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x74e, 0x1, 0x10000000, 0x8000, {{0x10, 0x4, 0x2, 0x25, 0x40, 0x67, 0x0, 0xc0, 0x2f, 0x0, @private=0xa010102, @multicast2, {[@end, @timestamp={0x44, 0x28, 0xfb, 0x0, 0x6, [0xfffffffe, 0x0, 0xd, 0xdf15, 0x6, 0x8000, 0x4, 0x7, 0x5]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', r1, 0x1, 0x10, 0x1, 0xb6, {{0x31, 0x4, 0x2, 0x0, 0xc4, 0x66, 0x0, 0xc, 0x2f, 0x0, @broadcast, @multicast1, {[@cipso={0x86, 0x46, 0xffffffffffffffff, [{0x1, 0xf, "2eaa01826dbe8fea6e6d1211be"}, {0x6, 0xa, "cbe537c80a53a78a"}, {0x7, 0x3, "fa"}, {0x7, 0xa, "d5237c15c331d448"}, {0x7, 0x10, "75c796aedd3b3bf9929ed82d1f53"}, {0x2, 0x8, "f0611a5e403e"}, {0x1, 0x2}]}, @timestamp={0x44, 0x24, 0x39, 0x0, 0x0, [0x6, 0x1, 0x6, 0xbab, 0xfc, 0x4, 0x4, 0x5]}, @lsrr={0x83, 0x23, 0x31, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @loopback, @multicast2]}, @ssrr={0x89, 0x7, 0x7, [@rand_addr=0x64010102]}, @generic={0xa, 0x2}, @cipso={0x86, 0x19, 0x2, [{0x6, 0x5, "13fca7"}, {0x6, 0xe, "2814a380a824d05415d0a9a5"}]}]}}}}}) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 2m27.85404005s ago: executing program 4 (id=2548): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r2, 0x0, 0x800, 0x6, &(0x7f0000000140)="b4d91ff52c44", 0x5}) 2m27.793207961s ago: executing program 4 (id=2549): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x18}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x18) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2a, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010100}, @IFA_FLAGS={0x8, 0x8, 0x330}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r9, 0x47ba, 0x0, 0x28, 0x0, 0x0) r12 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0xb96d, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r15 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r15, r2], 0x2, 0x0, 0x1}) io_uring_enter(r12, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0xfffffffa, 0x3, 0x6, 0x6, 0xed49}) 2m11.984228177s ago: executing program 32 (id=2549): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x18}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x18) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r6 = shmat(r5, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2a, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010100}, @IFA_FLAGS={0x8, 0x8, 0x330}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) r9 = syz_io_uring_setup(0xbdc, &(0x7f0000000280)={0x0, 0xec25, 0x400, 0x3, 0x40000330}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) io_uring_enter(r9, 0x47ba, 0x0, 0x28, 0x0, 0x0) r12 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0xb96d, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r15 = syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_submit(r13, r14, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r15, r2], 0x2, 0x0, 0x1}) io_uring_enter(r12, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0xfffffffa, 0x3, 0x6, 0x6, 0xed49}) 11.936818524s ago: executing program 2 (id=3073): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="f30fbd020f060f001966b80d010f00d066bad00466ed0f2382d9c8c4e17d50f80f8c8c2e000066ba4200ed"}], 0x1, 0x6a, 0x0, 0x39) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r7, 0x2ded, 0xef92, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 10.60514915s ago: executing program 2 (id=3080): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003100)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp={{0x9}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0x4, 0xdde, 0x8, 0x7, 0x809a, 0x4, 0x3, 0x5, 0x2, 0x200, 0x7, 0x2, 0x2, 0x1000, 0x6, 0x4, 0x2, 0x3, 0x1c4, 0x6, 0x94, 0x4, 0x8, 0x0, 0xb236, 0x5, 0x1, 0x8000, 0x7, 0x4, 0xc, 0x0, 0x9f8, 0x7fff, 0x8001, 0x8, 0x1, 0xa1, 0x7fffffff, 0x7, 0x8001, 0x200, 0x500000, 0x8, 0x1, 0xa000000, 0x1, 0x401, 0x7, 0xb, 0x9, 0x3, 0xe, 0x9, 0x9, 0x9, 0x8, 0x2, 0xf, 0x4, 0x9, 0x6, 0x1ff, 0xff, 0xffffffff, 0xfff, 0x10, 0x3, 0x80000001, 0x8, 0x38000, 0x9, 0x3, 0x8, 0xffffffb9, 0xb, 0x4, 0x80000000, 0x4, 0x6a1, 0x9, 0x8, 0x7, 0xffff, 0xffff60d6, 0xccff, 0x5, 0x7, 0x6, 0xf730, 0x1ff, 0xfff, 0x94, 0x6, 0x1, 0x1, 0x6, 0x7, 0x5, 0x40, 0x49, 0xf, 0x3, 0x10, 0xb, 0x6, 0xffff0000, 0x7, 0x2, 0x3, 0x4, 0x2a8b, 0x4, 0x8, 0x5, 0x1, 0x2, 0xf, 0xe98d, 0x0, 0x8, 0x7, 0x80000000, 0x2, 0x9caa, 0x5, 0x4, 0x10, 0x9, 0x8, 0x8, 0xfcf, 0x9, 0x6, 0x7, 0x1, 0x0, 0xffff, 0xb19, 0x10000, 0x2, 0x354, 0x101, 0x1, 0x7, 0x1, 0x1000, 0x2, 0x4e, 0xc0, 0x6ae, 0xc889, 0x8, 0x3, 0xae33, 0x8, 0x9, 0xfffffff9, 0x9, 0x6, 0x8, 0xe, 0xfff, 0x10001, 0x5, 0x2, 0x80000001, 0x7, 0x7f6, 0x5, 0x7, 0x473, 0x401, 0x3ab, 0x7, 0x6, 0x5, 0xfffffff9, 0x6, 0x4ce, 0xf72a, 0x8, 0x7ff, 0x7, 0x1, 0x5, 0x7ff, 0x8, 0x1, 0x3, 0x0, 0x0, 0x8, 0x1, 0x1, 0xf9ae, 0x80000000, 0xd, 0x1, 0x40, 0x6, 0x7a8, 0x7, 0x6, 0x2, 0x9, 0x0, 0x6, 0x8, 0xc5f8, 0xca83, 0x3, 0xa0000000, 0x9, 0x2, 0x6, 0x8, 0x8, 0x3, 0x6, 0x7, 0x81, 0xffffffee, 0x3, 0x8, 0xa, 0x98, 0x3, 0xc3, 0xfffffffa, 0xf4, 0x86, 0xaca, 0x8001, 0x7, 0x200000, 0x80000001, 0x0, 0x10001, 0x2, 0xfffffffe, 0xfe6, 0x2, 0x1ff, 0x7fffffff, 0x5, 0xbdfd, 0x8, 0x7, 0x1, 0x1, 0x8, 0x5a, 0x0, 0x1]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000d80)=""/247, 0xf7}], 0x1}, 0x3}], 0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0xbd5, &(0x7f0000000640)={0x0, 0x4a826, 0x800, 0x1, 0x26b}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.973080457s ago: executing program 5 (id=3093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b7, &(0x7f0000006680)) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async, rerun: 64) rt_tgsigqueueinfo(0x0, 0x0, 0x6, 0x0) (async, rerun: 64) r1 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) (async, rerun: 32) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x7, @private1, 0x4}, 0x1c, 0x0}}], 0x1, 0x200400c5) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (rerun: 32) r3 = io_uring_setup(0x167, &(0x7f0000000300)={0x0, 0xdfd8, 0x1c080, 0x0, 0x44a}) io_uring_enter(r3, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) (async, rerun: 64) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) (rerun: 64) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast2=0xac14140a}}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000006c0)={0x24, &(0x7f0000000400)={0x0, 0x0, 0x4, "a7212277"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r2, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x0, 0x10, 0xcb, {0xcb, 0xb, "bc125a364b6cc9867fd1947e2e61d8be615a4114b9c2d396bd4b683117493eb7247f0a21068dc51995588003a585006864ec8c9a5883fb6794069c139537a53c9cefe6cad4a0ffb757d33c1e70655e2472368e803259cacb1e7ed8e84ec803884eaa5e8df8e3181099521dd558bba61156939004712e4cb2b7cf2fafe2cb2e404c090683047c87e4258810113abafa3af548e8990517058d70f0ba743bbae152ba73d4d1872b36189bb74b158967ccb9d1203c834fb48f3321561aadbbfc84cb51fe1beadbd3410049"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f00000003c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x0, 0x1, 0x8}, @local=@item_4={0x3, 0x2, 0x8, "199bfd42"}, @local=@item_4={0x3, 0x2, 0x8, "d90d741b"}, @global=@item_4={0x3, 0x1, 0x1, "bb997b63"}, @main=@item_012={0x2, 0x0, 0xb, "81d0"}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_4={0x3, 0x2, 0xb, "1df55e23"}, @main=@item_012={0x1, 0x0, 0xc, '0'}, @main=@item_4={0x3, 0x0, 0xb, "cff0bc9d"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8e0, 0x9, 0x1, {0x22, 0xa92}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x7, 0x9, "0cda2681a009185a6b"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000580)={0x20, 0x1, 0xb9, "48150432a22fc7b719b052eeb3f33cf0cdbed09ce649efb11e3fa1b4db36689cad1e06215e2db05e33bfb5ba864c04d62f3d84270cc7e0146e5793bf96bba99af8de2f2f01447de25b099654fe85e63f68c7d7d3fed09d4be287499bb3433b2980b4e1b6f7e2f649a35cb57dabac49d237e27ba8b6c684dc64c2872d9405be945b7667f5a816628cb4e920ad0ee3691fcbc6d9133d56b2d75abf8459abad4c802512ac0596fbebf5ccf8a2f2a656bed3c28ad354658c05750f"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x1}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x14, 0x0, 0x211, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x40090) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 5.769642373s ago: executing program 3 (id=3094): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000001040)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/25, 0x19}, {&(0x7f0000000440)=""/123, 0x7b}, {0x0}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/145, 0x91}], 0x8, &(0x7f0000000ec0)=""/137, 0x89, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 5.685073439s ago: executing program 3 (id=3095): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'ip6tnl0\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, 0x0, 0x4048043) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="06000000000000000000fcffff7f00000008000000000c4c3fa6fe350000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x800, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x10, 0xfff1}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "d89933c8221bed90b593a1f978374fb9"}]}}]}, 0x48}}, 0x24044094) 4.883931607s ago: executing program 2 (id=3097): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00&00000000000000010000,user1id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180100001000010400"/20, @ANYRES32=r5, @ANYRES16=r4], 0x119}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.410668176s ago: executing program 2 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000100)="fd673c77db3b4ff2ae95c8cb4682895094ad10e1b27297a0f7318c1397f44f2e65", 0x21}], 0x1, 0x0, 0x0, 0x804c044}, 0x4095) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x4e, 0x4) r2 = dup(r1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES64=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4.096954261s ago: executing program 5 (id=3101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0xfffffffffffffd65) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, {0x2, 0x0, @private}, 'syz_tun\x00'}) 3.96892792s ago: executing program 5 (id=3102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x8040) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg', 0x3) futex_waitv(&(0x7f0000000ec0)=[{0x3, 0x0, 0x82}, {0x3, 0x0, 0x104}, {0x5, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x800, 0x0, 0x82}, {0x80000001, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x10000, 0x0, 0x82}, {0x7, 0x0, 0x2}, {0xfffffffffffff801, 0x0, 0x2}, {0xffffffffffffffc0, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x81, 0x0, 0x2}, {0x7f, 0x0, 0x82}, {0xb3, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x1000, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0x6, 0x0, 0x2}, {0x7ff, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x8, 0x0, 0x80}, {0x0, 0x0, 0x2}, {0x8, 0x0, 0x82}, {0x8452, 0x0, 0x82}, {0xe6c, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0x453f, 0x0, 0x2}, {0x400, 0x0, 0x82}, {0xfffffffffffffc00, 0x0, 0x82}, {0x8000000000000001, 0x0, 0x82}, {0x6, 0x0, 0x82}, {0xe12c, 0x0, 0x2}, {0x8000, 0x0, 0x2}, {0xfffffffffffffff8, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0xa10, 0x0, 0x82}, {0x100, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7985, 0x0, 0x2}, {0x2, 0x0, 0x82}], 0x36, 0x0, &(0x7f0000001440)={0x77359400}, 0x1) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 3.831360732s ago: executing program 3 (id=3103): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x34) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240008d1}], 0x1, 0x0) io_setup(0xff, 0x0) io_submit(0x0, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 3.575217434s ago: executing program 3 (id=3105): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) creat(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000440)='./file6\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xffff0000, 0x2842) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0013040300b45852807a41032a5f"]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd44, 0x1000009, 0xffffeffffffffffb, 0x5, 0x10000, 0x3, 0x9, 0xa, 0x5, 0x0, 0x400000007fffff, 0x0, 0x401, 0x0, 0x9, 0x10000008d], 0xddcd0000, 0x100814}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r3, 0x80000001, 0x4) renameat2(r2, &(0x7f0000000b80)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file1\x00', 0x2) 3.366709511s ago: executing program 2 (id=3106): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=0x0], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0xf, 0x8, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) recvmsg(r1, &(0x7f0000000880)={&(0x7f00000000c0)=@ll, 0x80, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/146, 0x92}, {&(0x7f0000000380)=""/196, 0xc4}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f00000006c0)=""/204, 0xcc}], 0x9, &(0x7f0000000540)=""/42, 0x2a}, 0x103) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) (async) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r8, 0x0, 0x8e80, 0xfffffffffffffff0}) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in=@remote, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x1900000000000000}, {}, 0x0, 0x3506, 0xa, 0x2, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r8, 0x0, &(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2b8000000000002}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000206e059b010000000000010902340001000000080904000001070000000921000009e7220200090581030000000002e1ad95eb27f3c6e3c0bd2486d4c7285e346866244b70d9e7488a009dacc54dd96471504fc128bf0c68db929319fc04d64ecadb3a50719da3ea99d7d98557691b5232013a5cd03bee0b4807a96d5865384bb7305b1d49933f7054717e332a4734bbd5a1e2995a85962467863c7ded8f23141dd85cf45f9721f19c9f79e0aab88037c47b6244dfb13c91373e12ad9138ef642f3be95bc8e09518111637870afd686c38"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) (async) dup2(r1, r1) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4011af"], 0x0, 0x0, 0x0, 0x0}) 3.12048418s ago: executing program 3 (id=3107): ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000080)={{{0x6}}, 0x55, 0x2b8cbf70, &(0x7f0000000000)="cb16e272dbb18a9ecf6e056f26e42d22a62881c9e4681ad3770670ab8061cf0f343a4801ea756b9280150007c23df0449f22c8083a829af8e9376d4f80e542998853b4f3edd5e41a9d064bed387482c81dd89750cf"}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x6, 0x4, 0x100000, 0x6, {0x0, 0x2710}, {0x1, 0x0, 0x3, 0x40, 0x6, 0x8, "90b402b1"}, 0xfff, 0x4, {0xffffffffffffffff}, 0x2, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0xc540, 0x4, 0xe4, 0xffffffff, 0x200, 0x7, 0xfffffff7, 0x7, 0x15, 0x7, 0x8, 0x10, 0x2, 0x4, 0xfffffff7, 0x9, 0x8, 0x2, 0x6, 0x1fca, 0x73d, 0x8, 0x0, 0x4, 0x9, 0x7, 0x800, 0x1, 0xff, 0x5, 0x2, 0x6]}) close_range(0xffffffffffffffff, r1, 0x0) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r2) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'macsec0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="0ae1e8de13975c7545838d4642b4c4201b0bd42426cb5e78e65c651b4bc5ac077ad38706cf1b39dc82b48ebbaf6fcd0149315ec5c103a1e42812f86a093bfd400d06b1e5eb7929dcb5ca8cbb5c943048cf725199ebbc43af3677a4735c7a7c1e71b2a3fd142c3953847fa15103739ddf4fcf5d0c207e7149d44790a1380bc6e788fa7e6a4e79660f20f5f05754c8", 0x8e}], 0x1, &(0x7f0000000580)=[@hopopts_2292={{0x40, 0x29, 0x36, {0x2c, 0x4, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6de}, @pad1, @hao={0xc9, 0x10, @mcast1}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r5}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0x40, 0x0, [@mcast2]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xb8e}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2f, 0x9, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x6, [0xffffffffffffffc5]}}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x18, {0x3, 0x4, 0xbb, 0x8, [0x45, 0x7ff]}}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x110}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x7, @private1, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000700)="cdb200f39a3be493932f9b3279ef970fa7b9df2dca9fd91f2fba4f6b", 0x1c}, {&(0x7f0000000740)="a0cab4995d811ea5e744ac4b4ff27ea279ecefd0c4a2a20439da0459007429b486f37c58ce4c4cbc7f1897e1174dd296b733cd0cca8032822f1942cfc5b0374755ab217e35eb1552898c6982522e389059c2f02445d5700d3d7cf25c3ec1a99a3f5e2e4529f7dfe53c90b5874a6e80bc3ad74bcd986dcc4f38cb26dc00b8092b9d896ce1312e8abcea48b8c3d038e390e37e5593564006204d222cb7deaca7afc3c5c0aa70d039f989f6038e69d8e0566f849dedeabbbef8684f8e899c348ef6516951ac59d71f1f21334a70ea9fd41233874d9794dffa0882", 0xd9}, {&(0x7f0000000840)="cf5c2788cdcf6919376eae0df6ca18f52b7a2a7e5292de188efd7c24c3a72b8c1077fc7cdd525b7e0048d574fe46fb18c751c409f4eb9060a1d754", 0x3b}, {&(0x7f0000000880)="5fe628d2a70d5e295bbdd20dd401cafbdda63d2886211e8f2e7999dc52fda26a91c0bdcc185f5114c8fd549af2831b1bd6867ffc27dbbab1259d9ca69db94f9eb9a3d5d6addae15d368e0394a5cd1a5efb63a61208393b7869f42db1f15e508a0a1b966b6471138e9f57c03bddcc8b218c125b82370cd36faa302e230b5442e62d48cdea3ebc81f7e261167e4132c307b42799bb1b14ec996d2db76a202058365ac420b8335b29ca909ac2c047b87865ef90965b8390", 0xb6}, {&(0x7f0000000940)="10bd0facc6e0633c306f7743d375e1bcd75f4ae70e01747b08c613c5e06ee2521d27a59574018ffe7f5f557fef6c4ec29107a33a30bd5ddcd0b30ba9efc8c5062d06fe549be9bc2bd7d11abd4c92708a9c350589fe32ecf7560643b6912535a840b0c0c57e93b45f29b5cdf2a2efd1902213d4c0e690d205c339ac6427070bf3f5c7f47411b3d56a41ed22d5c7a56e4a821ebb4c84fdfcea0996547927c7d02efa30a699dfa71fb7fbd7cfc78e2cb8d03741796e7077e76c216969021ba4e09a6ad7f2be0ce5cef052c292ca8db8f4eddf1b447695e0ac687f76067b987e711b", 0xe0}, {&(0x7f0000000a40)="8c7faeb664f2e942555a721ade962496505cb10dbda532a1746d32749829088e107f839f42ef48a086201a03b2123f48cb970f98260c6852072651cb751217656b34312d2b59b46ec388a52e8dc3ed619f1e6a051e685740abee74093bac4dc59ba37f4ce679044101fb591a726005261d75ce332c1676a62cf1d4df071e7c300d0b9f6527c7", 0x86}], 0x6}}], 0x2, 0x8810) openat$userio(0xffffffffffffff9c, &(0x7f0000000c00), 0x80080, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000c40)) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000c80)={'wg2\x00'}) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000cc0)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x200) syz_usb_connect(0x1, 0xa2, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0x8d, 0xfa, 0x39, 0x0, 0x19d2, 0x1167, 0x5764, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x2, 0x5, 0x3, 0xc0, 0x6, [{{0x9, 0x4, 0x5b, 0x5, 0x0, 0xff, 0xff, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x8001, 0x8, 0x5, 0xb7}, [@ncm={0x6, 0x24, 0x1a, 0x1, 0x1}, @dmm={0x7, 0x24, 0x14, 0x5, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x4, 0x7fff}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7fff, 0x4, 0x1}, @acm={0x4}]}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x3, 0x2, "e95692ce870d"}]}]}}, {{0x9, 0x4, 0x0, 0xd2, 0x2, 0xe5, 0x9f, 0xd8, 0x2, [@hid_hid={0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x91e}}], [{{0x9, 0x5, 0xe, 0x1, 0x8, 0x80, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x400}]}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x1, 0x7f, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x59eb}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x110, 0x44, 0x2, 0x5, 0x0, 0xf4}, 0x13, &(0x7f0000000e00)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x5, 0x3, 0x2}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x447}}]}) writev(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000ec0)="a3adb65ffd3f02c7e3915424e07f0b79e195b5110806855b99fd657942d29d415b4f35feef11fa0df9671722162f165cd9129d8f89cce6c2c4515b0e5a35ada0ce9dd5365809c342f7081800952233e918a1434ceb33d79dc592f3bfed634ac275bb24a8cc7859a5317e23f4a79dcabb24b5356cb896808c8bca4fcab29d047a0e26e5fcc86275307dcd138767e2244886416cc1fd1afdbd02b05c9fc04b43e1072b08237215170a25127ddccf3542f958174167c4b7f0ffaadd2f84fbfed0d90df297d11f52ef2d677c93f21ef5", 0xce}, {&(0x7f0000000fc0)="9392e718b41165e9d0a5cab538b1cf5e82b51549c73978f40e73fd1dfefe9ad534286404d455917189f2df4c23c7c539a5a8591cb8039faad00ee560cb4966cb1041347306aedf44b81926bdabb936a95147a20fe011e9f727b7de1c156253a8c5b4740d6f2b68fcd3df265c7ce2c3d25e567060d51412cba4742bc7ed2c0d9191f795ec3a7350551aec3ef19ca3c3780b337c9e1ab65e5d11e2f27d26a01dc7669f963db2ab0e8f8711f2", 0xab}, {&(0x7f0000001080)="2efae582b9a7d1cf2e074de050aa694c81c04cfb6004ab4342125420bc57c70687ee6aba48ebadacfcff95d30cb3b4d4a4924eff451f3534baf0b8e2c984fc59f12a1e6cfd628a4c96f083aaaf2d45a2e32a92a91e3da7a6cdbf258f46aa888cdcb9f7b78527824673d81a0cb32f03b6561e842e969304aef5d1ef81b28b173859ffe85101abe9742ecf7af31dd4162471471424138c", 0x96}, {&(0x7f0000001140)="9b8a6606b3aa1d7812588e553627510c046113c213592905a0228c919ea6e029b5e6bc98a98a5e0622759a4ce4481ba08b5971e1dac671595daa83baae3640c4951530866f88bbcfba48f0f5d5ef0157e1a93ecdbdfd1684592e1c3b832476505bc38b24c41a68fb6dfd648ea737", 0x6e}, {&(0x7f00000011c0)="a7aa272193106f4097740c868e93947f635c3b86580a1a1e95835469c8ee3b4a2b54b5de8bb01f2832b7a67bc24b718ef354c06ffd76495fb6f7ccbe79db653913ad8a664fb87da7608b2593e216d760404e5c4c31c0b00a0f8f7181b3d7249ad3acf729ced0131d26b8b59f2540492335b9cdfe72", 0x75}, {&(0x7f0000001240)="27a7a0acaa0ed3084ecb50e8cd119070404f15b89ce81e0cffffef1ba4f03163dfe643667c4f31ea2e7d84fc52c0c90ca53fa70a488c3adcaa2bc8fac42888875637d659d71fd43828e4da96a725333a4ada9e203ada8d297e38be04a28baaff06039f72b1d5ea94a3fb9152b9ef87e0fc7c64fc83cf4610fbd0fb787734bfd6a1d0", 0x82}, {&(0x7f0000001300)="0d6d7812a2a83a276e10c1217171fed3a0bd7855ce07a40356e3cd9708d5e19aa15f39f48f2328b2669bac162b708edd18445537694652824f292a5cae55c03121a88371e6d1e70f1b3eaffe4c347f69876aed4a05293efd7db262291933f663101e254191f8c699b380fd066f931dc4f5ea79bb8f04be3056be7dd86ea3624c2140def6426c81d316770c816cc6d5e065fe8bea", 0x94}, {&(0x7f00000013c0)="41be3cafdd3db1a00532d9a2b6ae2c34be881ac30dfe23ea0d4a0e567975270c892f79c0c32a662951bb6555e95d5accb01b470cb6edcbdb07cdf0c3b9db70f2ce00241c8b4c85889468a9071d9b0cd52813d2be23198fc13d1f7074fbaaae3b6f3201df6e51b38b4e8fd3a723bde354a27cd4e162326fd2fdbec35434aa4b32982d90865c6e56ba19742b16ea36a9cd155db38d5151b70b225f3675697afface48220e39d0c005f8f35faed930427446807a8574698317a36827c6b0f96abeb4f0b893c148df46c3f0efd12987126bc4f6cbe4ad736a0c18af89082827c1751d0b3d216805ad95b0cff4015ce706e8f6e4f7ef0357fe966adbeaf3432b7b26af81d762d034d2b3fb1469e1238747e9e05be669c3a03d194b7dd9319f013fb5ef46e9329527f7fd7c232e5e103719ef6dc9c4d9f7979ca8c6a9ade9b0eb65ccdb16e9d6fb3579975eadbd53e8f09c43d035f71646ba1042171b374a8060cb7b0c55977b1a567800c106f099ff27fa601fc393ea71e155cfb18886c7ed3ecb7a87d2a042b19398c47f1d1f6ec380f41f257cc67db60fb8f9094a79da94ea83a4b58bf5cb990f0c468e00cf3d970fbccb89b6c621c600108832ed645f5be8e7d9e7827dd4a2872b5c687a4fa8f0eb7d0d35960cdaaae858bc80cfd8653e19f162a13333a5653ac173b63e9318411a5a5c9b76c60e841f0e9b6745054777f14c2f0de9779db9e8a3f1b875642211a049ec18637cd757a38cc94c71b34e91862b37b1cb8208fb66dfa35a5d503d4abe9da9412746b9a99e69d43ccacaba071072fcf4c9b1a250e1ddb16adaa78d5dd7b382fe4287b1fdb7a2d7adbe966c056de5705fc400f4fa21d410a544a552a5733417539df1c84afc8518e561ec683151a8c2f3076f902d1853fadb77ede55db2eb868c3c537ba18e5149314e195afc8a80110f37ce8f327e58323f83eaebb455a7d625f2b7e7fd320b101885181ee831e363cea9d4bd16e148d5613027e69b2a1e21f1b4d09407d9744b2844af92f3959ea6800eae629190440a53c371370898a6c2b87c7c18ba80ab73a9a995f9bff1052894cd84ffdf4415079ec6e3ee77ba6582af786efc073cf04769e04c251b7c5efeecd0f73e1026fa40ca2c42ecd5b3e1f03e7da03f7c6562f842d35588551c23aaa47e48aebf57241a9430cc27910df969e1ecb8c4fa4f88389d45ddfab8d8fe6314c5a567e6c06badec179fb9f34d57d5dc362dc495373b2f8e8e864453e529235e4cd096f032f9f14c03b00c9f4b41069cc7d16727b9c12a9479619ec0c37fc6ad76134ea12b25bfe6eea2025b98ce6057065e053942c07f5d76de7b5c7fc0b42bcd6dd23e6542dc17092f1736e2a20337629446ae7ca0fa6df7f8151556a49604a2078237a09df35847b37313e7b4c413568c54624a894d54cdae06219c4d5c5ebe381517c6c7398468e73cf96ccc9eef6aff5b0fefdc57f4f3263fc76f945d152d5d1173229968c1b9893d0098899494e9bba21678e37b10929170f6c71693237223156a4de92926e5fba692bf68bf217a8ccccdcde29b5fa9784418ed3cf743698a72bdae4130bdf177ff9af2b516c681ad0d0b6399b81faf6631302e8509915e4f292b64da957ceebbc0f2e18e6a4aa4f67a255a0726cc16bdc72d024835d05e7a3248f56b2bf54c06bf7684567e092528010653f2d36e7d5aa77031191e3457fb58371d5365c3f2c983ee909724522d85a8dec38e283e03715068efb5a50a96f2b16f02678c624bdd55c800ed20d2581da90088e9cf317192bffda408b40bd1d5cec2ba8cc8d13fa9525bc962734f1696355722d6efbe9c87df7eecd09b48c418063c48c53d982cd9c169e5918601e5c164eaf77db1ad714c8cd29f3f0993334c4d325a83374e81d9aa199d89df1faf8add9605c182c2ccdfbba7a7d80d8ca66a5c10d2d571524387fffe8e7fec7fb25591bfbdf5bb110a16836bf9f191f7bdbfbd33f5b463e4628c3be5221ec387418dcb9e9e6d2d68d26700dd269c22e89353b5c14974ab67983e5ec5166c2a2299136481c13e0871d336cf9864f76b43be8d1ed171f1deeb0e375df4c806e554622c808f623ce1f44a471d6917c3e56122b485ebc8c4ca2bfe1000aba9e6426cdbfe2a6b302d0c05c3eaae2947c78aa6e596ced43638d0bde383ee48bc146fca69e71f019339da3fafbb05d22c8d9e30bce8d4aa99fefdf8ddb3cec210e007fddd0ac672ed4323359031ff180e8b96380968090578ead5f950e46074876342502f97ae97cba7d7f4fc97fb3666f9e88d57b4a2946d3f45eba9f9d9186436c7687bf17a4bed3aca7488735f5f82db8519dcc3d8c44916b764aa37271be58e967ba36fc6361770c50675e382f30bb54235aa56e80977b78413648909b045d5bdad65601173a3e4c444dfdc574c020dbf83bd0bc112c301fbf9e9c2d1c25d8bbdece0bb98727b2a117e513f677c79d1a843a39b47f56a07b9c0a01b4a0ee7721e9a579ce9dff2ff90e0e9b53d12e3efc6a0e70e472fd65c22481c8351327fc5d0bfcef6ad12c709975e088af42f61da48b7b5b21e2c6508fddcf923a9a66940efcbc665c79828b23d016a2e1cae77c5eaaef09e79d8ea79a56f02e60a00053f5dee45b27881ff482c479c00d2047d4b6f2435fe6a5914847917ae4ef3c498da48ff238d0bc57b4cede2737968c5f8ff7f8b80723db3012ac2e75e49ed34e118ed6adb31aec031fab438b12709c64aff21d9c7f09220b94ecf56e01ffd208cdad4f1b087ecfdcafa7a40f31020a18843626407c170f459254717dcdfdae5cbfe8d61e94ebb8f088e22f6107d3ecbc3ff837b9cadef8e36df0e740a8d24999b3d68e9d16f29d65287609c27a0e8609b1a6aa1ee1d5e33549e57292f488a438f1e025fb44b80186ddede057edc2bc629db098f3cedc81f14a5e4a585667fcc36473ebad44631806946fd3814168cb16a5ea202804c51906cf2ee2b216ad9c694ca32c6ad1af9aa05e67f7949b10f51c78fe643851486aecacff60fcb8a599e28dd05c91b450ffd92fec428c2a4212052371af5e7f827a5c47935cb96324b89a600fd5c9646f52af6245053294d61fbb07740f6d2d43727bb07e4152d11ab81299d5f516166886dc89133bbfedb46542a75682ca6532c5a3d10e6244acc3894e84fbbde55820d6e2f1399cf9b2c2f6dc141085a35b202f495cff2dd3d3799245a5a6b26db62d3f70f0be584679d80205eed730340c978a19de6aad51531513e4658b7d0020f91021818e336f586948c513ea1cf5b855e531a69d8c7d840ae7951d7c7fa4ad5603349361445d4fce2f99dde9ad2562c4bab8823179d436e15743378e909af6a2c449ffdd3d7e06e7dbda65b6b19d4f44ad006282e8c0caae38f17a84fb53a32375da8622e0e9acfa9bb787194cb8b397174f680cbbd4c7c4a8a7131f2e16baf805058018aaff9a2d0b35f90afedeb002fef94ab936349334d672b1e6596b94b66266fe75f70160f2618dc98c1854fdbcface241a8d20af2afef3e63648bb9b22897972af359adb382219467db3c4093450e98f20ae81978511076bebbd38bd48244ff59f8a404370de4138c3433277d839d35ce52c59454be1d0b23df239b2db7439c08379de535e2e981a8cccf918303ea375f30b016d06c507adea08b0e170466d14d6fe935071c6268d55364a83a53971247ba2ed309867e36f6c86c418002ae22f8bf4f3e3bceb08eae1ad7170d9d70e2e71703106ab1fccbb8ab2f65550ca8bee43dad6828610d5a21278c9302414bf39d07a3650a8be002a72c7911ccb9dacbe3c8efd3d92db4d92344733dbd3fed43463cac0ac379657d82575d08e4ba25c61424dd24588514f70151faab4ffa20f655f71b0a7f9d5ef5d261ecda5fc952aba66a7b862c12f22659694c73e157ed10dce6898be93d382281b4618345be3b32f95534357b640197c7a59eb7b2fc3d4cd36f15c5afc8277172dda599afdb5c2e798a51a0eab8d88263408586b777e454723c726a1ddacb393d7712419ef132fdc12ecbec463e2d918338d64d011baa26c41a9d20de3b66ccd3fc3ec78c21629307dc11bc5339d56baa0a0925ba219084ddcdd4709f6a0519467e2ce6a81fb599c62e1c89a4f7033b6d7806a4b3b8170287ac05fe0691b2e5222b7251f3358a8217d2eca057f419be9d8982a55d68420dd3811c4df95d613dc22cf3ed59f1cfdb271e1d0a88812fb0e8ac2c4143b4c05df490218817d7acbd36b69c2cd29da293146481daa43b05c09aaded164bc4cfe36763b6e7d0b69434193ac4fc0431bffe9b7cd03c6c9c9cc8d27f9f61a32552e6c66c9e6782e29f200d5e6eea2de96c249c538514fbb894b043082d71595ccd9dd74b954450c9f74bf6ef0a47af5f1f0f47dbda25ec4f6f230479c7b586ad8a2508b948343d56b4dc5d66b4bacf560af42f781ed42eb24ef2f10713ac5b196730f5dd60767a7035094add9536ed0dbda8bc6bb31a5378ebbdd6060fafea824714ca8634ece60571e1dbf8862db92a89646270e11d0a68fa883886c3acb58a57d23c36a5e626d62b108709cb02a7fb9b4acd12bf481ca9ec0f589943f17adad4b6f23a3e87cc854ce86c0801814dec63a48b920849e91531cde4b3599e7e2e914f9ac7d99c66843dbcfd03bfa9d02680b3ac57479005859fb7789c78723bf185062b3787a3a5c21a2f203f78742bd8eb670ba380e6ec97d9a071f7f9aed44edfc21bb75e04b24abe77222fd27d3abbf873f842c1b16742e050a54362eb9f9c6ffbf5d167c3632461e0d765fd0d73c1d0737a3cfeb3984efe7c81fc1e77a70c92ee63353dbeac5633c1c0a690c387b747e0bb478e4b2f5302a849c0545cbec1523fe53ec5d0e51eb22924f857ae911d80184386628b1b1396f51aa235973963415d7f0f91bf587135ce84774e4fce182d6fae4df309100c31d51a802f85244880690891935eb211c3227d757ffc013074aae50eb3e37edfb0ba5072bcc54964fefb5091800eeb9c0a53f957054cd3f8a0a912776821807042db367fa91d1222245434b8a530ed76b351d46c79d2740bdcbc2438420024d582f2cb5c70bc38fc26e0073d2b98ce895510670e24dc4c86d1f4269d92023fc80b49250f461e420a9f6fe7bf2a9277fb87099b7a3f671d5f8afb68c60dc4500fed446076d7a032c6b896e0189471a6376efbcae0d63c5113213f41f85a3977311676c9fe17fa1055451f2c409bdf15269ef9975407f3abcdd0aa1bbf54b2104441b692ecbdee4c2b3288c18bcaafd1cffff45bdf5cf4ed346770d58dd3c061976426c5a823a9693549233d1eb47d8955057ca2bfc70c82d1e13cd4cbabe6d7adcfa9388d256a7e58454f2129fba9e8e0c19ca2e69075efc2c9516c31be9a77d62442dabcf3cad73bdaecefc86d9ef7bb90d9e501725118ad6ce176f400b1eac9760beb186df4ad58c2cee652b01e9561bdff0adcedcea8aca0a2720f8704be005739c3b0ac92faedc67cbc0029f8967d74f85cd4b91634c2be3bc72f4f302807a2ffa603fc6b58a255b632e079b3967a2f1d73d8fb03792e3db43a60ff71197fd7e0f3c49fba8b30d53cf69ffd1c7425b838a69c7b52a618c94d61fe01f3120577443d0a3fa7901bc9c67b7382c7d68235292c9ffa21a01caebcc5c04f62fec04c71e07a4704017022dab6134c7016956934cd667bab50b116046abb59e3c08c0d5f4cf70c75dde511d67b9a9c810589d6f491802bc6780e6088d593a506bd8fd5dc3ed87", 0x1000}, {&(0x7f00000023c0)="12048610de1070bada4b8ba290cc1d3049b792ae2d17dab3980ab5a04969699990675730a42c2d3adfbe3816b047f2521f3a7ddaa463eee462c0e61b79227239797f144021e62a0c8544090d8fd709bab86e8f42421ba78e958bb67f5f1cb386926e2f46c503ca6db59876c2fd66077255e79ee84f09e89197cea69f49533ffa00e34f15609ce0a6e803eff2890ec316d24fbd", 0x93}], 0x9) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000002580), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x68, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000027}, 0x240000c0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000026c0)={{0x2, 0x4e21, @rand_addr=0x5}, {0x306, @broadcast}, 0x40, {0x2, 0x4e24, @multicast2}, 'caif0\x00'}) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000002740)={0x0, 0x8, 0x48551dd6, 0x4c89, 0x8, 0x4, 0x80, 0x100, {0x0, @in6={{0xa, 0x4e23, 0x7f, @mcast1, 0x7}}, 0x2, 0x6, 0x99b, 0x7, 0x40}}, &(0x7f0000002800)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000002840)={r8, @in6={{0xa, 0x4e23, 0x7, @remote, 0x9}}, 0x1a, 0x7de5, 0x4, 0x3ff, 0x20, 0x7, 0x7}, 0x9c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002900)={'macsec0\x00'}) r10 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r10, 0xc038943b, &(0x7f0000002980)={0x2, 0x8, '\x00', 0x1, &(0x7f0000002940)=[0x0]}) write$cgroup_int(r2, &(0x7f00000029c0), 0x12) sendmsg$kcm(r2, &(0x7f0000002ec0)={&(0x7f0000002a00)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002a80)="92ced0c574740d0de052dcf0a120304efc1b3bc5b68b6fe75ac30787383db2904e4ed1", 0x23}, {&(0x7f0000002ac0)="dd6cfcf13a4c5e7c9d15b3ef3cef759595b0e43f982e5b9e5913de87ceea29efdf84a3ea70cf1306846adaf7a5b953c2d8aefbec0c0f84593a4622f003003b5db201173d8fb6006f5a010613a086977380f2cb734399d80132a923b52aac7018a95de6855d66611f43ac787216899e8e76f75990e60ed706c74b358252fdaad8db7e711d27a755de4b1892823045ee8285a07c6ec0da6bf433737bd84bdea4775100b9ed07698180867dea34a805d9301007792a9eda22f292a202e636cf97b795a4bfcb93448953026712f754710c406e1b38b2351fd21aefb3a8c5ceb68d3ce8cc4892ee923e0ab61bfbdc0b1b8cdcfc7822fc85", 0xf5}], 0x2, &(0x7f0000002c00)=[{0xb8, 0x1, 0x3dc, "b7e907b1fc8ef1970e488e3a2b36e6299b50cf04198a2e2319f87abd9af86bec15147523970c9a418a89a78def45ecfefb74ab824089eb269eba0ad6d5b3b8b794299ee58bb1d16da3f6087154327b0a74856e8400eab68e3538f8425fee1928f8effced30694ac8473b361309aae8506cfdf87b6fa65cf280d63dc19afcca2bae57f242f139654bff3d8228858ffaa15a98fde51ab64993198ef5f855c5bca1e64c9deb7d33a5"}, {0xe0, 0x109, 0xeed, "a48ab3c8da77ab393845965cad4822f2c5497b5526b83ccbad019acbfd8903d18eb0d9cb2d838c73d9a4a5b3510f2bdc092ad6853ae8319288ee882c71d116e60d9ca04379af0bd731114ff36ca2bd8d283054af951940b811cff42bc5470a0e3cf7d286316917ab581d64be475d1527a60f211c9071819425bf251ca5183f98b665dd60b5ff96b46d4221dca01ba4fa7e5bc5b0dc2929f13099ba3ff0d1dc2f34da83865c99d4746e456dc768f1238337f026a504cacea9279f87478497490fcbb83734f2371bbab6f3"}, {0x98, 0x189, 0x54357c19, "5cf08340c21eb1a1c9f2feeb2d57cf2a8d0fe7c3c8085679e87f470e325e5246513a131458ef4a9e752da84316a03c6669eea293c92ca534b3106e27479c7800ff93ba3cca284121dcd41b6410e11fbab0092cf04865801e45429f57e275b52ab13a314c76f5f2aef15793d14244a61ca9bf12515bb02a155e355f900e6624474cafe578dc62"}, {0x68, 0x86, 0x200, "8491624dc8d06cddd8aacd594eddb8aeb85aafce5a949271f9ed92fb0fd769c7942edd70b01720e7a7ffe85f7648dd407229f883d8bd257191cfebd4ffab556f081837f53c0e66143f9e7f8768a1928b9c5bfa"}, {0x20, 0x115, 0x5, "00a3f1152c0ff4c2ec41"}], 0x2b8}, 0x10005) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000002f00)={0x0, @reserved}) 2.822546934s ago: executing program 1 (id=3108): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xa96) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) (fail_nth: 6) 2.453213887s ago: executing program 1 (id=3109): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x111, &(0x7f0000000380)={0x0, 0x5887, 0x1000, 0xfffffffc, 0x346}, &(0x7f0000001140)=0x0, &(0x7f0000001080)=0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x41, 0x400, 0x8, 0x25dfdbfd, {0x13}, [@typed={0x8, 0x9a, 0x0, 0x0, @uid=r5}, @typed={0x4, 0x108}, @generic="6607e3227e29371e7c083931ba49b713d90833aac858f845ebb29670b50683e0b7d796698feec9b7065a4a309d9b9e6760ea83bb0f865ff0fc675b05ec1454", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@local}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030f00000000000000ec33"], 0x34}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r1, 0x3516, 0x67f, 0x64, 0x0, 0x0) 1.855680739s ago: executing program 1 (id=3111): socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) pselect6(0x40, &(0x7f0000000040)={0x80000000, 0x0, 0x3, 0x2, 0x4, 0x7, 0xffffffffffffff81, 0x9e}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1b) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000780)=[@text64={0x40, &(0x7f0000000740)="660fd3a148d50000c423756d68039cf2450f2ba4b00080000036470f07410f01c5460f0170e4b96f0a00000f320f07c4c1305dab00000000c4617853e8", 0x3d}], 0x1, 0xe9, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) getsockopt$inet6_opts(r0, 0x29, 0x1, 0x0, &(0x7f0000000580)) (rerun: 64) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000640)={0x2, 0x0, [{0xeeee8000, 0x4d, &(0x7f0000000140)=""/77}, {0x60000, 0x7f, &(0x7f00000005c0)=""/127}]}) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xcbe5, 0x10100, 0x0, 0xfffffffd, 0x0, r5}, &(0x7f0000000580)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x80, &(0x7f0000000100)=0x8, 0x0, 0x4) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@cpuid={0x64, 0x18, {0x7fff, 0x40}}, @nested_vmresume={0x130, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control_nat=0x6006, 0x10000, 0x2eb, 0x9}}, @nested_vmlaunch={0x12f, 0x18, 0x800003}, @wr_drn={0x68, 0x20, {0x3, 0xa}}, @in_dx={0x69, 0x20, {0x4a12, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x25, 0x2}}, @nested_load_code={0x12e, 0x62, {0x1, "2e0f01ba00800000656436460f0766ba610066ed0fc73c1b264d0fc79fef000000c744240029010000c7442402d1000000ff2c2466b824000f00d80f01c50f35c4e26597943df0000000"}}, @nested_vmresume={0x130, 0x18, 0x6}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x2c, 0xffffffffffffffff, 0x1, 0x6}}], 0x192}) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000040)={0x180000000000000, 0x25000, 0x4, 0x9, 0xd}) (async) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000780)={0x1, r10}) (async) close_range(r9, r10, 0x0) 1.765037003s ago: executing program 0 (id=3112): modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x0, 0x4000, 0x1}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000000000903000000ffdbdf251c0fe812dd4f6d0184b7938b051622623f925485f20d78c62370b56109a5e3bb725efbd70eb3f08c5654ef5f0e4c8a36f1ec22fe7e009233567d9acc328f1f4594be10d5794d63068b6b38c797480c932811927c1cfffeffffb0f46412ed32e23b719606bf9600733ea58281d579dd229da0e2c447b29e008dc9f31f3bc6d08a31a0063fe0b5a4ed5d19681b9475fdc562936f3543d61450ca0acdea0bf3f019468452fc04f400222ecdd117ef390211c906106a1a05bf2f532d7ab2d2e836a2b6cd71", @ANYRES32=0x0, @ANYBLOB="094100001803020008000a00", @ANYRES32=0x0, @ANYBLOB="08002c000200000008002900a24f0600"], 0x38}, 0x1, 0x0, 0x0, 0x2000c090}, 0xc4) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="0a00060008021100000100000600120009000000"], 0x30}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) modify_ldt$read(0x0, &(0x7f0000002140)=""/4098, 0xfffffffffffffe8e) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.689874215s ago: executing program 5 (id=3113): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket(0x11, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) ioctl$SNDCTL_TMR_SELECT(0xffffffffffffffff, 0x40045408) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40004041, 0x0) sendmsg$xdp(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x8, 0x0, 0x11}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000480)="8b7a026762c70126eb1c190b4d9b4a6d08f0b0b9d901ddea5172220e8ab81aa27a796ef8b0965f1103092562d6df7308d2a21f1e77127349e714d60ebd580ed37fa5deb46154777d7aff1592979f851f4a4573b860443587b751dfbb691387d129d6d291f6077b8835b27d877542348b6428e57d6245da827100dc637308c671cc2b7c6a841105f79a590ba589d6bf5848c057ff004067956cbf0646e271ccdcc1ee265e14df8f0439908c3b1c230c2a934a2966f35166315b5445474e0a3c03b94d484fa0524266911684d68e7913963b4d25babf9d367c172f1b7f503613", 0xdf}, {&(0x7f0000000580)="738cc281b85a16faddbb2d8b8d70a6db923f882aa6472cf38e42c1dcad17c01e5089c450a6aae192dfd781ffcf91006a47b49cbef952be669e78c1b65eac4d1fd74b2c37d295e734124b386c8c6e1b990098df0dd98aeb0fe6f711bb98ce94a97afb19e2ced67f4150a7d2c9a202235f71dfe3fdb24ad29e476c24466a05dd5814a93fe862d261d154e2be404a2dfda6c6b94d799e78e1688fd2348269e49b6d9c800b49ac8519b0c780384b4d37017cd44056c4bb61fc8d6146f573b58ef1c8da44107c608e", 0xc6}], 0x2, 0x0, 0x0, 0x40000}, 0x4000084) getpeername$packet(r0, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0xf9ef, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r4], 0x0}, 0x94) connect$vsock_stream(r0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r5 = fsopen(&(0x7f0000000080)='rootfs\x00', 0x1) fsmount(r5, 0x1, 0x2) 1.604771293s ago: executing program 1 (id=3114): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xa, 0x90202) 1.32744762s ago: executing program 1 (id=3115): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x34) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240008d1}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x0, 0x0) 1.055703611s ago: executing program 1 (id=3116): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)={0x20, 0x3, 0x2, '~K'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x30, 0x2, "1eba"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000027c0)={0x2c, &(0x7f0000002600)={0x20, 0x18, 0x1, "aa"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x208400, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 680.813343ms ago: executing program 0 (id=3117): io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x400022a}) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000ff0300000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa000014003500626f6e643000"/40], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000180), 0x8) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000380)={&(0x7f0000000240)={&(0x7f0000000440)="4e85944518a4443c43ae59aa43b8618ca51be593be33d1ddadb04111dec98c315b710334f18866d5ed3e69c1c2b85690bb2e959d612cddb7a6f50f800bbae16911ff54adec6bc356261c8c6ff0f4d82ef34a5c803f6765e5c863b60e82e7420751d3845ceb18dfbab156444f126a7fcde79b5f42d9c1fea006016c5b3d7a2219375fbe6bdd480d9c045797c5f760682b3572eb1d3b6e745ec83e666a8842af8fb754e523c79912c66ed6e7df97a518e549b79bbe6cfd5cc76e80dd6218fce4cfd3656dc8077d76c504429669c706beaef6f68419ddeb4e6293cdda0641dfb07b926a93c7", 0xe4, 0x0, 0x1, 0xa}}, 0x1) listen(r0, 0x0) 640.830209ms ago: executing program 0 (id=3118): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) (async) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x29c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfe, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x270, 0x2, [@TCA_U32_SEL={0x244, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x8, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x400004}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x5, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x5b, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0xd4db, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0xc, 0xa}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x4, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x0, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x14, 0x5, {0x5, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x802}, 0x24040084) (async) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) (async) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async, rerun: 32) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4606, &(0x7f0000000080)={0x2}) (async) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x224141, 0x0) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'hsr0\x00', 0x3}, 0x18) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000440)={r7, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x7, 0xb, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="aa8d8f624adb5a", 0x0, 0x3, 0x20, 0xc, 0x0}) 554.626798ms ago: executing program 0 (id=3119): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x3c, 0x3, '\x00', [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x28) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x9, 0x240081) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f00000000c0)={0x5, {0x0, 0x80000000, 0x0, 0xff}}) (async) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x6, @remote, 0x4}}, 0x24) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x329501, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) fcntl$getown(0xffffffffffffffff, 0x9) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000840) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000300)={0xc, r6}) (async) flock(r4, 0x3) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r5) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f00000004c0)={{r5}, r8, 0x6, @unused=[0x2, 0x0, 0x5, 0x9], @subvolid=0x4}) syz_open_dev$vim2m(&(0x7f00000014c0), 0x2, 0x2) (async) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000001500)={{0x0, 0x8001}, {0xd05, 0x2}, 0x8000}) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x30, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_FAMILY={0x5, 0xd, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async, rerun: 32) ioctl$IOMMU_VFIO_GET_API_VERSION(r4, 0x3b64) (rerun: 32) timer_create(0x5, &(0x7f0000001780)={0x0, 0x3, 0x4, @thr={&(0x7f0000001640)="c83b46a9f4af63", &(0x7f0000001680)="cb74f3aec76cf6c55e27f3214ac0d82214b07195920816e0dfe788440b1e2a68e99c3bcd779d43a420e8a34344d9faf13cf44850ffbf2fdcb27805ff9233c912a4ae0e3dce50d39243a9682c68d86927934b666c68af991bde8a86385b51ae859d7e55f24e67d60679da4c95b9c7e57ee934f965ba14f85dc1a79622f06d56149be2649b5b89c86925b18fb348602b40755d3ac0a437a3bca8c2b297cb55f9c75b8b9e5ab5bcaa56f7eeb15a5fe2411084721f2fb828cbe725feb9eb25daed73c6e10dac5256c2df4676"}}, &(0x7f00000017c0)=0x0) timer_settime(r9, 0x1, &(0x7f0000001800)={{0x77359400}}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000001840)) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r4) (rerun: 64) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x20, r10, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x3a}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x40090) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a80), r4) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x40, r11, 0x0, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 348.935891ms ago: executing program 0 (id=3120): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x14a}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="6f433f8987fc9e", 0x7}, {&(0x7f0000002240)="6e2ebb87dca38cb8b3378e86c02cafa0bd62c7a2cddda54f6a0a1c1b92bae9731f4063d80b5110c9d03f91a7a36de1b85a723f5902e290250ad0f1ba3a09733260816749c0336324bd84b178c88fa2d67602e2444a7e61aa569282cd7ce83e6c2faa97a4f99d042e50e79936490023788174b7af0c760ea8723eed6912bd85156d534474c9e5629951d6e4287bd996f0f801217b1567d0a160a44f5c122d4512a0c8cde478f738110e77ae94c9add0b05940b71bfecd3f0a7caa562d694634388ee577c44c873818cd358c9ce80ca10c5292a03540a6350546bfe7f8b54f57db5f2a969f2624f588643e2ad9be66d45d45354c164bb186522bf2130f43c84ad5d56f74afd23a06362f2b30dcc2ac95c3b5264aaccf66d52fc57615449e5362c1c6aea5d903a198742c9c8507ddb0cab935043afdb803d0d9ce631a557e82bbc1c1409723e5c975d85c867aec479700b5ef4933ed", 0x154}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="04", 0x3a98, 0x10008095, 0x0, 0x0) 330.230436ms ago: executing program 5 (id=3121): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='sessionid\x00') preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000340)=""/152, 0x98}], 0x1, 0x1, 0xe3d0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(0xffffffffffffffff, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x80, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x3, 0x8, 0x4, 0x1, 0x40], [0x8, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xc, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x94, 0x4) r5 = syz_io_uring_setup(0x117b, &(0x7f00000000c0)={0x0, 0x29d8, 0x10100, 0x200003, 0x60}, &(0x7f0000000140)=0x0, &(0x7f00000006c0)=0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00'}, 0x18) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0, 0x0, 0xfffd}, {0x0}, {0x0}]}, 0x4}, 0x1) r9 = socket(0x10, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r9, 0x0, 0x0, 0x56, 0x200440c0, 0x1}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) 262.308431ms ago: executing program 2 (id=3122): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008"], 0x30}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0)=0x7fff, 0x4) sendto(r4, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="00000000786b236800000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000080000bf91000000000000b7020000010000008500000085000000b70000000000000095000000"], &(0x7f0000000240)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001bc0)=""/4106, 0x41100, 0xd}, 0x94) recvfrom$inet(r3, &(0x7f0000000680)=""/4096, 0x1000, 0x12080, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) 140.712314ms ago: executing program 0 (id=3123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = io_uring_setup(0x191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="746172676574205043493a31643a613a3135f33c783ad66734f2422e3100e7f7196554dd94853600e20666f88edd06c81953aaf3f8a6a17dfdf0e3688163b2e39eb79f67"], 0x15) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd29, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x44000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000f40)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x130, 0x0, 0x200, 0x398, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xffffffff, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r4, 0x8, 0xfffffffffffffff7, 0x9}) write$P9_RREADLINK(r6, &(0x7f0000000100)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) 12.376803ms ago: executing program 3 (id=3124): clock_gettime(0x5, &(0x7f0000000140)) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="01002cbd70010080000034000000080073000000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80) (async) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="01002cbd70010080000034000000080073000000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x80) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x40, "20854e8c4b94a5715f8227fd4236376e9708596b6fea1c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b"}, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x40, "20854e8c4b94a5715f8227fd4236376e9708596b6fea1c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b"}, 0x0}) 0s ago: executing program 5 (id=3125): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="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", 0x104}], 0x1, &(0x7f0000000980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, r1, r0, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r0, r1]}}, @cred={{0xffffffffffffff7d, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x108, 0x4040001}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x68, 0x3c, 0x0, 0x4, 0xbff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x7) (async) fsetxattr$security_capability(r1, 0x0, 0x0, 0x0, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f000022e000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) (async) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) (async) close(r5) socket$kcm(0xa, 0x3, 0x87) (async) socket$kcm(0xa, 0x3, 0x87) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'team_slave_0\x00', @broadcast}) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000100)={0x3, 0x1}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0100000000006000000003088700fee1a400000000000000007d01ff0200c247738f43ffe408f4e96f", @ANYRESDEC=r3, @ANYRES64=r3], 0xfdef) unshare(0x64028880) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/uts\x00') (async) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/uts\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r6}}, 0x20) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r6}}, 0x20) kernel console output (not intermixed with test programs): ig 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 396.024862][ T10] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.041979][ T10] usb 6-1: config 5 interface 246 has no altsetting 0 [ 396.149145][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 396.159283][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.189186][ T10] usb 6-1: Product: syz [ 396.193757][ T10] usb 6-1: Manufacturer: syz [ 396.198492][ T10] usb 6-1: SerialNumber: syz [ 396.631803][ T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 396.634026][ T1307] usb 6-1: Failed to submit usb control message: -71 [ 396.721352][ T1307] usb 6-1: unable to send the bmi data to the device: -71 [ 396.724671][ T10] usb 6-1: USB disconnect, device number 5 [ 396.813281][ T1307] usb 6-1: unable to get target info from device [ 396.859200][ T1307] usb 6-1: could not get target info (-71) [ 396.895535][ T1307] usb 6-1: could not probe fw (-71) [ 397.358407][T13389] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2721'. [ 397.726836][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 397.726853][ T30] audit: type=1326 audit(1764829436.163:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 397.858946][ T30] audit: type=1326 audit(1764829436.213:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 397.968759][ T30] audit: type=1326 audit(1764829436.253:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 398.338804][ T30] audit: type=1326 audit(1764829436.253:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 398.466134][T13419] netlink: 'syz.2.2723': attribute type 8 has an invalid length. [ 398.565562][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'. [ 398.600678][ T30] audit: type=1326 audit(1764829436.253:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 398.664418][T13421] netlink: 'syz.2.2723': attribute type 8 has an invalid length. [ 398.725108][T13419] bond0: entered promiscuous mode [ 398.727716][T13421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'. [ 398.769213][T13419] bond_slave_0: entered promiscuous mode [ 398.779033][T13419] bond_slave_1: entered promiscuous mode [ 398.820025][ T30] audit: type=1326 audit(1764829436.253:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 398.826656][T13419] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 398.899596][T13419] bond3: entered promiscuous mode [ 398.960252][ T30] audit: type=1326 audit(1764829436.253:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 398.982716][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.016456][T13419] bond0: left promiscuous mode [ 399.027885][T13419] bond_slave_0: left promiscuous mode [ 399.061465][T13419] bond_slave_1: left promiscuous mode [ 399.067157][T13419] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 399.083086][ T30] audit: type=1326 audit(1764829436.253:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 399.140674][T13419] bond3: left promiscuous mode [ 399.168805][ T30] audit: type=1326 audit(1764829436.253:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 399.230356][ T30] audit: type=1326 audit(1764829436.253:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13393 comm="syz.5.2722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 399.253951][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.398120][T13421] bond0: entered promiscuous mode [ 399.409098][T13421] bond_slave_0: entered promiscuous mode [ 399.508907][T13421] bond_slave_1: entered promiscuous mode [ 399.525535][T13421] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 399.543036][T13421] bond3: entered promiscuous mode [ 399.704129][T13421] bond0: left promiscuous mode [ 399.728764][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 399.798918][ T915] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 399.853477][T13421] bond_slave_0: left promiscuous mode [ 399.966423][ T915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 400.002609][ T915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 400.038812][ T915] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 400.052262][T13421] bond_slave_1: left promiscuous mode [ 400.076645][T13421] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 400.129983][ T915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 400.140453][T13421] bond3: left promiscuous mode [ 400.168761][ T915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 400.238310][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2726'. [ 400.270755][ T915] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 400.301881][ T915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.331414][ T915] usb 6-1: Product: syz [ 400.374714][ T915] usb 6-1: Manufacturer: syz [ 400.413698][ T915] usb 6-1: SerialNumber: syz [ 400.482215][ T915] usb 6-1: config 0 descriptor?? [ 400.501581][T13394] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 400.530530][ T915] usb 6-1: ucan: probing device on interface #0 [ 400.562215][ T915] usb 6-1: ucan: invalid endpoint configuration [ 400.582415][ T915] usb 6-1: ucan: probe failed; try to update the device firmware [ 400.714498][ T915] usb 6-1: USB disconnect, device number 6 [ 401.193514][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 401.498427][T13456] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 401.606890][T13460] tipc: MTU too low for tipc bearer [ 402.668844][ T5840] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 403.028787][ T5840] usb 2-1: device descriptor read/64, error -71 [ 403.298832][ T5840] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 403.728727][ T5840] usb 2-1: device descriptor read/64, error -71 [ 403.861520][ T5840] usb usb2-port1: attempt power cycle [ 404.268787][ T5840] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 404.278761][ T5902] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 404.349342][ T5840] usb 2-1: device descriptor read/8, error -71 [ 404.498750][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 404.547432][ T5902] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 404.567058][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.597777][ T5902] usb 3-1: config 0 descriptor?? [ 404.598772][ T5840] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 404.649288][ T5840] usb 2-1: device descriptor read/8, error -71 [ 404.676891][ T5902] gspca_main: sunplus-2.14.0 probing 041e:400b [ 404.788247][ T5840] usb usb2-port1: unable to enumerate USB device [ 405.789514][ T5902] gspca_sunplus: reg_r err -110 [ 405.794785][ T5902] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 406.218779][ T5973] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 406.412720][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.424299][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.437941][ T5973] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 406.524617][ T5902] usb 3-1: USB disconnect, device number 45 [ 406.641288][ T182] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 406.716810][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.792173][ T5973] usb 4-1: config 0 descriptor?? [ 406.848753][ T182] usb 6-1: Using ep0 maxpacket: 16 [ 406.859884][ T182] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.889575][ T182] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.923969][ T182] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 407.079622][T13551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.122995][ T182] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 407.133828][ T182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.209323][ T182] usb 6-1: config 0 descriptor?? [ 407.282511][ T5973] usbhid 4-1:0.0: can't add hid device: -71 [ 407.290203][ T5973] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 407.301022][ T5973] usb 4-1: USB disconnect, device number 42 [ 407.518924][ T5840] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 407.657401][ T182] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 407.669211][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 407.674878][ T182] microsoft 0003:045E:07DA.0018: no inputs found [ 407.684464][ T5840] usb 1-1: config 162 has an invalid interface number: 79 but max is 1 [ 407.694180][ T5840] usb 1-1: config 162 has an invalid interface number: 183 but max is 1 [ 407.712924][ T182] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 407.722445][ T5840] usb 1-1: config 162 has no interface number 0 [ 407.750699][ T5840] usb 1-1: config 162 has no interface number 1 [ 407.788956][ T5840] usb 1-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 407.924722][ T5840] usb 1-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 407.992530][ T5840] usb 1-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 408.013338][T13560] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 408.038388][ T5840] usb 1-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 408.091765][ T5840] usb 1-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 408.122755][ T5840] usb 1-1: config 162 interface 183 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.280930][ T5840] usb 1-1: config 162 interface 79 has no altsetting 0 [ 408.312270][ T5840] usb 1-1: config 162 interface 183 has no altsetting 0 [ 408.344620][ T5840] usb 1-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 408.358467][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.389146][ T5840] usb 1-1: Product: syz [ 408.401074][ T5840] usb 1-1: Manufacturer: syz [ 408.416265][ T5840] usb 1-1: SerialNumber: syz [ 408.659281][ T5840] pl2303 1-1:162.79: required endpoints missing [ 408.682812][ T5840] pl2303 1-1:162.183: required interrupt-in endpoint missing [ 408.707680][ T5840] usb 1-1: USB disconnect, device number 47 [ 408.868433][ T182] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 408.948093][T13577] netlink: 'syz.2.2768': attribute type 10 has an invalid length. [ 409.023227][T13577] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 409.073665][ T182] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.101001][ T182] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 409.113050][T13576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.131785][ T182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 409.177719][ T182] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 409.234922][ T915] usb 6-1: USB disconnect, device number 7 [ 409.460838][ T182] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 409.546251][ T182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.746899][ T182] usb 4-1: Product: syz [ 409.761883][ T182] usb 4-1: Manufacturer: syz [ 409.784683][ T182] usb 4-1: SerialNumber: syz [ 409.881199][ T182] usb 4-1: config 0 descriptor?? [ 409.923729][ T182] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 409.959867][ T182] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 410.033552][ T182] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 411.299211][ T5973] usb 4-1: USB disconnect, device number 43 [ 411.318037][ T5973] garmin_gps 4-1:0.0: device disconnected [ 411.428772][ T5902] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 411.599153][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 411.611258][ T5902] usb 6-1: config 0 has no interfaces? [ 411.633886][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 411.649319][ T5902] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 411.663011][ T5902] usb 6-1: Manufacturer: syz [ 411.688167][ T5902] usb 6-1: config 0 descriptor?? [ 411.708761][ T915] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 411.848751][ T915] usb 2-1: device descriptor read/64, error -71 [ 411.878780][ T182] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 411.912530][ T44] usb 6-1: USB disconnect, device number 8 [ 412.029073][ T5973] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 412.048830][ T182] usb 4-1: Using ep0 maxpacket: 16 [ 412.065827][ T182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.080515][ T182] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.101117][ T915] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 412.101439][ T182] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 412.149023][ T182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.196483][ T182] usb 4-1: config 0 descriptor?? [ 412.204327][ T5973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 412.234085][ T5973] usb 3-1: not running at top speed; connect to a high speed hub [ 412.254123][ T5973] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 412.267063][ T5973] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.288752][ T915] usb 2-1: device descriptor read/64, error -71 [ 412.298058][ T5973] usb 3-1: config 1 has no interface number 0 [ 412.317837][ T5973] usb 3-1: config 1 interface 138 altsetting 252 endpoint 0x7 has invalid wMaxPacketSize 0 [ 412.334129][ T5973] usb 3-1: config 1 interface 138 has no altsetting 0 [ 412.359789][ T5973] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 412.369863][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.378069][ T5973] usb 3-1: Product: syz [ 412.398115][ T5973] usb 3-1: Manufacturer: syz [ 412.408877][ T5973] usb 3-1: SerialNumber: syz [ 412.424880][ T915] usb usb2-port1: attempt power cycle [ 412.775938][ T182] bigben 0003:146B:0902.0019: unexpected rdesc, please submit for review [ 412.868779][ T915] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 412.879717][ T182] bigben 0003:146B:0902.0019: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 412.900063][ T915] usb 2-1: device descriptor read/8, error -71 [ 412.929205][ T5973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.970830][ T182] bigben 0003:146B:0902.0019: missing HID_OUTPUT_REPORT 0 [ 413.051502][ T182] bigben 0003:146B:0902.0019: no output report found [ 413.075457][ T5973] usb 3-1: USB disconnect, device number 46 [ 413.098903][ T182] usb 4-1: USB disconnect, device number 44 [ 413.150938][T11973] udevd[11973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 413.168820][ T915] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 413.247124][ T915] usb 2-1: device descriptor read/8, error -71 [ 413.295273][T13639] fido_id[13639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 413.426228][ T915] usb usb2-port1: unable to enumerate USB device [ 413.738736][ T915] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 413.858751][ T5902] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 413.908920][ T915] usb 1-1: Using ep0 maxpacket: 16 [ 413.945136][ T915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.963676][ T915] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 413.984981][ T915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.005994][ T915] usb 1-1: config 0 descriptor?? [ 414.029139][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 414.036217][ T5902] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 414.058795][ T5902] usb 4-1: config 2 has no interface number 0 [ 414.079335][ T5902] usb 4-1: config 2 interface 31 has no altsetting 0 [ 414.091508][ T5902] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 414.102223][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.110618][ T5902] usb 4-1: Product: syz [ 414.145989][ T5902] usb 4-1: Manufacturer: syz [ 414.167813][ T5902] usb 4-1: SerialNumber: syz [ 414.492945][ T915] mcp2221 0003:04D8:00DD.001A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 414.575104][ T30] kauditd_printk_skb: 85 callbacks suppressed [ 414.575118][ T30] audit: type=1326 audit(1764829453.023:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 414.598759][ T5902] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 414.645259][ T30] audit: type=1326 audit(1764829453.073:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 414.711649][ T5902] usb 4-1: USB disconnect, device number 45 [ 414.745810][ T30] audit: type=1326 audit(1764829453.073:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 414.772140][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 414.812543][ T30] audit: type=1326 audit(1764829453.073:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 414.840215][ T5973] usb 1-1: USB disconnect, device number 48 [ 414.894101][ T30] audit: type=1326 audit(1764829453.073:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 414.939438][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 414.947571][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 414.959212][ T30] audit: type=1326 audit(1764829453.073:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 414.983069][ T182] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 415.001242][ T10] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 415.010407][ T10] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 415.029151][ T10] usb 2-1: Product: syz [ 415.033356][ T10] usb 2-1: Manufacturer: syz [ 415.037976][ T10] usb 2-1: SerialNumber: syz [ 415.042892][ T30] audit: type=1326 audit(1764829453.073:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 415.078737][ T30] audit: type=1326 audit(1764829453.073:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 415.138758][ T30] audit: type=1326 audit(1764829453.073:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 415.161206][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.174706][ T182] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 415.197181][ T182] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 415.207856][ T30] audit: type=1326 audit(1764829453.073:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13655 comm="syz.5.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 415.235433][ T182] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 415.257841][ T182] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 415.271898][ T182] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 415.301683][ T182] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 415.310915][ T182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.319148][ T10] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 415.351020][ T10] usb 2-1: Handspring Visor / Palm OS: port 0, is for HotSync use [ 415.368788][ T182] usb 6-1: Product: syz [ 415.373065][ T182] usb 6-1: Manufacturer: syz [ 415.377681][ T182] usb 6-1: SerialNumber: syz [ 415.382366][ T10] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 415.404125][ T10] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 415.424647][ T182] usb 6-1: config 0 descriptor?? [ 415.433495][T13661] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 415.446543][ T182] usb 6-1: ucan: probing device on interface #0 [ 415.483416][ T182] usb 6-1: ucan: invalid endpoint configuration [ 415.495168][ T182] usb 6-1: ucan: probe failed; try to update the device firmware [ 415.520574][T13654] fuse: Unknown parameter '0x0000000000000004' [ 415.591675][ T10] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 415.614172][ T10] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 415.652805][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 415.680164][ T5902] usb 6-1: USB disconnect, device number 9 [ 415.708463][ T10] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 415.754304][ T10] usb 2-1: USB disconnect, device number 47 [ 415.786555][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 415.830334][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 415.861768][ T10] visor 2-1:1.0: device disconnected [ 416.755674][T13672] netlink: 'syz.0.2798': attribute type 5 has an invalid length. [ 417.818793][ T182] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 417.988984][ T182] usb 2-1: Using ep0 maxpacket: 16 [ 417.996550][ T182] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.044894][ T182] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 418.083958][ T182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.113520][ T5158] Bluetooth: hci2: ISO packet for unknown connection handle 266 [ 418.131739][ T182] usb 2-1: config 0 descriptor?? [ 418.258937][T13718] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.2812'. [ 418.288122][T13718] openvswitch: netlink: Message has 16 unknown bytes. [ 418.391881][T13721] input: syz1 as /devices/virtual/input/input25 [ 418.399360][T13721] input: failed to attach handler leds to device input25, error: -6 [ 418.566275][ T182] mcp2221 0003:04D8:00DD.001B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 418.824042][T13732] netlink: 'syz.5.2814': attribute type 13 has an invalid length. [ 419.080123][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 419.270271][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 419.316896][ T10] usb 4-1: config 0 has no interfaces? [ 419.361517][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 419.388320][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 419.408818][ T10] usb 4-1: Manufacturer: syz [ 419.420831][ T10] usb 4-1: config 0 descriptor?? [ 419.810088][ T915] usb 2-1: USB disconnect, device number 48 [ 421.175524][T13732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 421.236351][T13732] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 421.256305][T13732] gretap1: entered promiscuous mode [ 421.305400][T13732] gretap1: entered allmulticast mode [ 421.341861][T13736] netpci0: tun_chr_ioctl cmd 1074025672 [ 421.352440][T13736] netpci0: ignored: set checksum disabled [ 423.004273][ T10] usb 4-1: USB disconnect, device number 46 [ 423.516028][T13792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2828'. [ 423.604894][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 423.874115][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 423.886198][ T24] usb 3-1: config 1 has an invalid interface number: 29 but max is 0 [ 423.904679][ T24] usb 3-1: config 1 has no interface number 0 [ 423.924034][ T24] usb 3-1: config 1 interface 29 has no altsetting 0 [ 423.962363][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 423.976855][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.002559][ T24] usb 3-1: Product: syz [ 424.018036][ T24] usb 3-1: Manufacturer: syz [ 424.032804][ T24] usb 3-1: SerialNumber: syz [ 424.317274][ T24] peak_usb 3-1:1.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 424.379108][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 424.534780][ T24] peak_usb 3-1:1.29 can0: sending command failure: -22 [ 424.538807][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 424.541852][ T24] peak_usb 3-1:1.29 can0: sending command failure: -22 [ 424.554177][ T24] peak_usb 3-1:1.29 can0: sending command failure: -22 [ 424.597616][ T10] usb 4-1: config 0 has no interfaces? [ 424.618111][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 424.639937][ T24] peak_usb 3-1:1.29: probe with driver peak_usb failed with error -22 [ 424.668743][ T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 424.695192][ T10] usb 4-1: Manufacturer: syz [ 424.763741][ T10] usb 4-1: config 0 descriptor?? [ 425.035205][T13808] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 425.831185][T13828] loop2: detected capacity change from 0 to 7 [ 425.864869][T13248] loop2: [POWERTEC] p1 p2 p3 p4 [ 425.880715][T13248] loop2: p1 size 4718592 extends beyond EOD, truncated [ 425.914022][T13248] loop2: p2 start 1701408863 is beyond EOD, truncated [ 425.926957][T13248] loop2: p3 start 524288 is beyond EOD, truncated [ 425.965029][T13248] loop2: p4 start 16777216 is beyond EOD, truncated [ 426.063760][T13828] loop2: [POWERTEC] p1 p2 p3 p4 [ 426.099759][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 426.132828][T13828] loop2: p1 size 4718592 extends beyond EOD, truncated [ 426.151560][ T24] usb 3-1: USB disconnect, device number 47 [ 426.197625][T13828] loop2: p2 start 1701408863 is beyond EOD, truncated [ 426.248604][T13828] loop2: p3 start 524288 is beyond EOD, truncated [ 426.272534][T13828] loop2: p4 start 16777216 is beyond EOD, truncated [ 426.324998][T13833] netlink: 'syz.0.2840': attribute type 5 has an invalid length. [ 426.391328][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 426.475613][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 426.499169][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 426.499194][ T30] audit: type=1326 audit(1764829464.953:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.2839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f049a18f749 code=0x0 [ 426.527148][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.544433][ T915] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 426.710445][ T915] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 426.731366][ T915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.770307][ T915] usb 6-1: config 0 descriptor?? [ 426.959299][ T10] usb 4-1: USB disconnect, device number 47 [ 426.988367][ T915] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 427.192695][ T915] [drm:udl_init] *ERROR* Selecting channel failed [ 427.287947][ T915] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 427.325684][ T915] [drm] Initialized udl on minor 2 [ 427.414152][T13852] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 427.416384][ T915] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.515441][ T915] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 427.581930][ T24] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 427.602288][ T915] usb 6-1: USB disconnect, device number 10 [ 427.617917][ T24] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 428.235077][ T30] audit: type=1326 audit(1764829466.683:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 428.348790][ T30] audit: type=1326 audit(1764829466.723:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 428.392142][ T30] audit: type=1326 audit(1764829466.723:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 428.414579][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.447449][ T30] audit: type=1326 audit(1764829466.723:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 428.502274][T13875] sch_tbf: burst 0 is lower than device veth1 mtu (1550) ! [ 428.539664][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2849'. [ 428.578786][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 428.658825][ T182] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 428.681969][ T30] audit: type=1326 audit(1764829466.723:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 428.761316][ T30] audit: type=1326 audit(1764829466.723:2278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 428.867760][ T182] usb 3-1: Using ep0 maxpacket: 32 [ 428.914200][ T182] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 428.945964][ T182] usb 3-1: config 0 has no interface number 0 [ 428.978334][ T30] audit: type=1326 audit(1764829466.723:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 429.000979][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.011291][ T182] usb 3-1: config 0 interface 12 has no altsetting 0 [ 429.041078][ T182] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 429.053734][ T182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.067567][ T182] usb 3-1: Product: syz [ 429.075365][ T30] audit: type=1326 audit(1764829466.723:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 429.097882][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.146349][ T182] usb 3-1: Manufacturer: syz [ 429.151145][ T182] usb 3-1: SerialNumber: syz [ 429.158773][ T30] audit: type=1326 audit(1764829466.723:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13862 comm="syz.5.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff71438f749 code=0x7ffc0000 [ 429.181153][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.188389][ T182] usb 3-1: config 0 descriptor?? [ 429.262468][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 429.295953][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 429.317160][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 429.639698][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 429.651856][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 429.667065][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 429.676888][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.685747][ T10] usb 6-1: Product: syz [ 429.692552][ T10] usb 6-1: Manufacturer: syz [ 429.697977][ T10] usb 6-1: SerialNumber: syz [ 429.813888][ T10] usb 6-1: config 0 descriptor?? [ 429.876990][T13863] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 429.907692][ T10] usb 6-1: ucan: probing device on interface #0 [ 429.920026][ T10] usb 6-1: ucan: invalid endpoint configuration [ 429.926332][ T10] usb 6-1: ucan: probe failed; try to update the device firmware [ 430.124837][ T10] usb 6-1: USB disconnect, device number 11 [ 430.169982][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2850'. [ 430.188719][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2850'. [ 430.216806][T13873] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 430.271237][ T182] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 430.289721][ T182] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 430.297099][ T182] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 430.307386][ T182] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 430.322378][ T182] usb 3-1: USB disconnect, device number 48 [ 430.607110][T13895] kvm: pic: level sensitive irq not supported [ 430.685292][T13897] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.2855'. [ 430.777616][T13899] loop4: detected capacity change from 0 to 8 [ 430.890838][T13897] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.2855'. [ 430.902462][T13899] Dev loop4: unable to read RDB block 8 [ 430.903518][ C1] blk_print_req_error: 24 callbacks suppressed [ 430.903536][ C1] invalid error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 430.908068][T13899] loop4: unable to read partition table [ 430.914272][ C1] buffer_io_error: 22 callbacks suppressed [ 430.914284][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 431.032047][T13899] loop4: partition table beyond EOD, truncated [ 431.038273][T13899] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 431.748814][ T182] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 431.931244][ T182] usb 6-1: config 0 has no interfaces? [ 431.936906][ T182] usb 6-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 431.987271][ T182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.016368][ T182] usb 6-1: config 0 descriptor?? [ 432.256904][ T182] usb 6-1: USB disconnect, device number 12 [ 432.839149][ T182] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 432.898800][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 433.008852][ T182] usb 6-1: Using ep0 maxpacket: 32 [ 433.020515][ T182] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 433.041379][ T182] usb 6-1: config 0 has no interface number 0 [ 433.047575][ T182] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.048780][ T24] usb 4-1: device descriptor read/64, error -71 [ 433.074349][ T182] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.093763][ T182] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 433.114024][ T182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.145182][ T182] usb 6-1: config 0 descriptor?? [ 433.329415][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 433.468812][ T24] usb 4-1: device descriptor read/64, error -71 [ 433.595078][ T24] usb usb4-port1: attempt power cycle [ 433.958802][ T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 434.089589][ T24] usb 4-1: device descriptor read/8, error -71 [ 434.618804][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 434.651603][ T24] usb 4-1: device descriptor read/8, error -71 [ 434.791715][ T24] usb usb4-port1: unable to enumerate USB device [ 434.971856][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 435.022571][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 435.044353][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 435.066757][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 435.076643][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 435.609994][T13960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.645078][T13960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.445422][T13968] chnl_net:caif_netlink_parms(): no params data found [ 436.705546][ T65] bridge_slave_1: left allmulticast mode [ 436.712994][ T65] bridge_slave_1: left promiscuous mode [ 436.731063][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.772617][ T65] bridge_slave_0: left allmulticast mode [ 436.792305][ T65] bridge_slave_0: left promiscuous mode [ 436.814826][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.282118][ T52] Bluetooth: hci3: command tx timeout [ 438.007410][ T65] dvmrp8 (unregistering): left allmulticast mode [ 438.306464][T13997] binder: BINDER_SET_CONTEXT_MGR already set [ 438.312645][T13997] binder: 13990:13997 ioctl 4018620d 200000000040 returned -16 [ 438.865105][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.898483][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.953813][ T65] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 438.988538][ T65] bond0 (unregistering): Released all slaves [ 439.369218][ T52] Bluetooth: hci3: command tx timeout [ 439.396616][ T65] bond1 (unregistering): Released all slaves [ 439.759077][ T65] bond2 (unregistering): Released all slaves [ 439.873092][ T182] usbhid 6-1:0.8: can't add hid device: -71 [ 439.893830][T14004] pimreg: entered allmulticast mode [ 439.929114][ T182] usbhid 6-1:0.8: probe with driver usbhid failed with error -71 [ 439.937845][ T65] tipc: Left network mode [ 439.967267][ T182] usb 6-1: USB disconnect, device number 13 [ 440.440441][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 440.440459][ T30] audit: type=1326 audit(1764829478.893:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14022 comm="syz.5.2893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff71438f749 code=0x0 [ 440.482616][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.493970][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.521304][T14029] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 440.595322][T13968] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.604844][T13968] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.617921][T13968] bridge_slave_0: entered allmulticast mode [ 440.693466][ T182] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 440.706483][T13968] bridge_slave_0: entered promiscuous mode [ 440.726946][T14029] loop9: detected capacity change from 0 to 7 [ 440.739538][T14029] Dev loop9: unable to read RDB block 7 [ 440.745553][T14029] loop9: unable to read partition table [ 440.752331][T14029] loop9: partition table beyond EOD, truncated [ 440.759231][T14029] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 440.848803][ T182] usb 3-1: Using ep0 maxpacket: 16 [ 440.856301][ T182] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.875055][ T182] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 440.935417][ T182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.945692][T13968] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.957822][T13968] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.042773][ T182] usb 3-1: config 0 descriptor?? [ 441.122981][T13968] bridge_slave_1: entered allmulticast mode [ 441.192280][T13968] bridge_slave_1: entered promiscuous mode [ 441.432297][ T65] hsr_slave_0: left promiscuous mode [ 441.449053][ T52] Bluetooth: hci3: command tx timeout [ 441.465949][ T65] hsr_slave_1: left promiscuous mode [ 441.491650][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.563649][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.693881][ T182] mcp2221 0003:04D8:00DD.001C: collection stack underflow [ 441.724755][ T182] mcp2221 0003:04D8:00DD.001C: item 0 2 0 12 parsing failed [ 441.763653][ T182] mcp2221 0003:04D8:00DD.001C: can't parse reports [ 441.796644][ T182] mcp2221 0003:04D8:00DD.001C: probe with driver mcp2221 failed with error -22 [ 441.894793][ T915] usb 3-1: USB disconnect, device number 49 [ 443.106005][ T65] team0 (unregistering): Port device team_slave_1 removed [ 443.232341][ T65] team0 (unregistering): Port device team_slave_0 removed [ 443.573719][ T52] Bluetooth: hci3: command tx timeout [ 443.901150][ T65] dummy0 (unregistering): left allmulticast mode [ 444.113843][T13968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.129919][T13968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.357809][T13968] team0: Port device team_slave_0 added [ 444.462644][T13968] team0: Port device team_slave_1 added [ 444.476854][ T30] audit: type=1400 audit(1764829482.923:2369): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=14069 comm="syz.5.2901" [ 444.521714][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 444.568804][T14071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 444.701823][T13968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.729351][T13968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.003109][T13968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.015336][T13968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.022415][T13968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.049039][T14078] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2903'. [ 445.058936][T13968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.743434][T13968] hsr_slave_0: entered promiscuous mode [ 445.752313][T13968] hsr_slave_1: entered promiscuous mode [ 445.758427][T13968] debugfs: 'hsr0' already exists in 'hsr' [ 445.768872][T13968] Cannot create hsr debugfs directory [ 445.798818][ T915] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 445.952460][ T915] usb 4-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 445.975143][ T915] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 446.004323][ T915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 446.028014][ T915] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.038108][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 446.050768][ T915] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.089020][ T915] usb 4-1: Product: syz [ 446.103543][ T915] usb 4-1: Manufacturer: syz [ 446.127159][ T915] usb 4-1: SerialNumber: syz [ 446.166329][ T915] usb 4-1: config 0 descriptor?? [ 446.190321][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 446.220347][T14089] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 446.230520][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 446.257155][ T915] usb 4-1: selecting invalid altsetting 0 [ 446.272245][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 446.313417][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 446.334076][ T24] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 446.346703][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.379281][ T24] usb 6-1: config 0 descriptor?? [ 446.465940][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.474760][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.491325][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.541455][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.571057][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.604150][ T24] hdpvr 6-1:0.0: firmware version 0xd dated jl;S11!vOp [ 446.604150][ T24] 4(r [ 446.604150][ T24] d2}d~٭^r [ 446.620400][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.631157][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.662556][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.698092][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.740699][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.784613][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.810856][T14095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.821245][T14095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.830359][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.838421][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.866018][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.900795][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.915748][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.946668][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 446.985040][ T24] hdpvr 6-1:0.0: device init failed [ 446.990922][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.008762][ T24] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 447.026894][T13968] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.043064][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.051025][ T24] usb 6-1: USB disconnect, device number 14 [ 447.061358][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.080386][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.091341][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.103118][T13968] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.126842][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.150424][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.177624][T13968] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.184240][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.199498][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.213575][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.229392][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.247795][T13968] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.254580][ T30] audit: type=1800 audit(1764829485.693:2370): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2909" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 447.284738][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.309099][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.325915][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.344222][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.370087][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.396453][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.415524][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.456608][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.478128][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.506822][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.544347][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.560111][T13968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.597694][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.630425][T13968] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.667001][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.671797][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.674220][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.736736][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.779639][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.786809][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.799365][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.846017][T14089] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.919454][T14088] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 447.957891][ T5973] usb 4-1: USB disconnect, device number 52 [ 448.059506][T14148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.069289][T13968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.111798][T14150] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2916'. [ 448.236510][T13968] veth0_vlan: entered promiscuous mode [ 448.280057][T13968] veth1_vlan: entered promiscuous mode [ 448.318901][ T44] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 448.385428][T13968] veth0_macvtap: entered promiscuous mode [ 448.412772][T13968] veth1_macvtap: entered promiscuous mode [ 448.464867][T13968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.499124][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 448.537554][ T44] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 448.545478][T13968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.549777][ T44] usb 3-1: Product: syz [ 448.556968][ T44] usb 3-1: SerialNumber: syz [ 448.589490][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.593387][ T44] usb 3-1: config 0 descriptor?? [ 448.613088][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.659451][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.717305][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.846000][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.874907][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.877666][ T44] hso 3-1:0.0: Failed to find BULK IN ep [ 448.979097][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 448.997413][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.016828][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.075995][ T44] usb 3-1: USB disconnect, device number 50 [ 449.148902][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 449.161563][T14176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 449.172972][ T10] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 449.190094][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.216187][ T10] usb 4-1: Product: syz [ 449.225007][ T10] usb 4-1: Manufacturer: syz [ 449.237816][ T10] usb 4-1: SerialNumber: syz [ 449.264354][ T10] usb 4-1: config 0 descriptor?? [ 449.285809][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 449.328195][T14182] loop6: detected capacity change from 0 to 524288000 [ 449.480696][T14184] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2878'. [ 449.505166][ T10] gspca_ov534_9: reg_w failed -71 [ 449.524058][T14182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.048761][ T10] gspca_ov534_9: Unknown sensor 0000 [ 450.048850][ T10] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 450.149382][ T10] usb 4-1: USB disconnect, device number 53 [ 450.948791][ T5930] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 451.239204][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2931'. [ 451.368860][ T5930] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 451.383657][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.393393][ T5930] usb 4-1: Product: syz [ 451.397678][ T5930] usb 4-1: Manufacturer: syz [ 451.412450][ T5930] usb 4-1: SerialNumber: syz [ 451.440641][ T5930] usb 4-1: config 0 descriptor?? [ 451.519078][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 451.678834][ T44] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 451.714371][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.746558][ T24] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 451.774637][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.807995][ T24] usb 2-1: config 0 descriptor?? [ 451.842258][ T44] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 451.852375][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.873550][ T44] usb 6-1: config 0 has no interface number 0 [ 451.911496][ T44] usb 6-1: New USB device found, idVendor=fff8, idProduct=ffff, bcdDevice= b.28 [ 451.923927][ T44] usb 6-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 451.952808][ T44] usb 6-1: Product: syz [ 451.957053][ T44] usb 6-1: Manufacturer: syz [ 451.982438][ T44] usb 6-1: SerialNumber: syz [ 452.034110][T14225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.050245][ T44] usb 6-1: config 0 descriptor?? [ 452.062297][T14225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.070408][ T5930] usb 4-1: f81604_read: reg: 105 failed: -EPROTO [ 452.083945][ T44] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22 [ 452.094168][ T5930] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 452.114167][T14225] xt_hashlimit: max too large, truncated to 1048576 [ 452.121017][ T5930] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 452.144833][T14225] No such timeout policy "syz1" [ 452.167807][ T5930] usb 4-1: USB disconnect, device number 54 [ 452.434327][ T24] steelseries 0003:1038:12B6.001D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 452.840321][ T24] usb 2-1: USB disconnect, device number 49 [ 452.987021][T14254] geneve2: entered promiscuous mode [ 453.018618][ T6190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.049208][T14254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.068723][ T6190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.126698][ T6190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.154613][ T6190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.609019][ T10] usb 6-1: USB disconnect, device number 15 [ 454.624253][T14299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.451834][T14305] netdevsim0: mtu less than device minimum [ 455.855118][ T5158] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.865525][ T5158] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.875980][ T5158] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.886710][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.895799][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.992035][ T5854] syz_tun (unregistering): left allmulticast mode [ 456.148853][ T30] audit: type=1326 audit(1764829494.583:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14315 comm="syz.2.2948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f049a18f749 code=0x0 [ 456.215880][T14319] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 456.265483][T14319] loop9: detected capacity change from 0 to 7 [ 456.274563][T14319] Dev loop9: unable to read RDB block 7 [ 456.339182][T14319] loop9: unable to read partition table [ 456.400474][T14319] loop9: partition table beyond EOD, truncated [ 456.418998][T14319] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 456.673935][T14314] chnl_net:caif_netlink_parms(): no params data found [ 456.702242][ T5973] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 456.884730][ T5973] usb 2-1: Using ep0 maxpacket: 8 [ 456.900971][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.915335][ T5973] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 456.924496][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.951098][ T5973] usb 2-1: config 0 descriptor?? [ 457.001947][T14314] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.044535][T14314] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.070496][T14314] bridge_slave_0: entered allmulticast mode [ 457.110549][T14314] bridge_slave_0: entered promiscuous mode [ 457.121280][T14314] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.131251][T14314] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.138581][T14314] bridge_slave_1: entered allmulticast mode [ 457.169354][T14314] bridge_slave_1: entered promiscuous mode [ 457.345140][T14314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.372667][ T5973] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 457.374061][T14314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.501857][T14314] team0: Port device team_slave_0 added [ 457.537725][T14314] team0: Port device team_slave_1 added [ 457.574066][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 457.944129][ T52] Bluetooth: hci2: command tx timeout [ 458.095456][T14314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.262276][T14314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.310869][T14314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.450213][T14314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.469014][T14314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.537681][T14314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.679218][ T44] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 458.746787][T14314] hsr_slave_0: entered promiscuous mode [ 458.783809][T14314] hsr_slave_1: entered promiscuous mode [ 458.841414][T14314] debugfs: 'hsr0' already exists in 'hsr' [ 458.848783][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 458.858106][ T44] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 458.876053][T14314] Cannot create hsr debugfs directory [ 458.882639][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.906453][ T44] usb 3-1: Product: syz [ 458.922825][ T44] usb 3-1: Manufacturer: syz [ 458.927492][ T44] usb 3-1: SerialNumber: syz [ 458.973664][ T44] usb 3-1: config 0 descriptor?? [ 459.003006][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 459.571138][T14314] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.636955][ T5973] usb 2-1: USB disconnect, device number 50 [ 459.777442][ T44] gspca_stk1135: reg_w 0x5 err -71 [ 459.792809][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 459.831705][T14314] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.842323][ T44] gspca_stk1135: Sensor write failed [ 459.848929][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 459.868778][ T44] gspca_stk1135: Sensor write failed [ 459.874200][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 459.898801][ T44] gspca_stk1135: Sensor read failed [ 459.904458][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 459.991711][ T44] gspca_stk1135: Sensor read failed [ 459.996960][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 460.004645][ T52] Bluetooth: hci2: command tx timeout [ 460.015771][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 460.022506][ T44] gspca_stk1135: Sensor read failed [ 460.028141][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 460.048392][ T44] gspca_stk1135: Sensor read failed [ 460.062099][T14314] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.098753][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 460.115380][ T44] gspca_stk1135: Sensor write failed [ 460.124822][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 460.168846][ T44] gspca_stk1135: Sensor write failed [ 460.219389][ T44] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 460.264328][ T44] usb 3-1: USB disconnect, device number 51 [ 460.484391][T14314] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.509646][T14364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.940550][T14366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2963'. [ 461.020400][T14314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.060103][T14314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.093719][T14314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.179966][T14314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.921013][T14314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.028874][T14168] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 462.073256][T14314] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.088003][ T52] Bluetooth: hci2: command tx timeout [ 462.106425][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.113673][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.208758][T14168] usb 3-1: Using ep0 maxpacket: 32 [ 462.216698][T14168] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 462.234551][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.241786][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.263806][T14168] usb 3-1: config 0 has no interface number 0 [ 462.270155][ T5930] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 462.329003][T14168] usb 3-1: config 0 interface 184 has no altsetting 0 [ 462.347617][T14168] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 462.374537][T14168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.391838][T14168] usb 3-1: Product: syz [ 462.396041][T14168] usb 3-1: Manufacturer: syz [ 462.414817][T14168] usb 3-1: SerialNumber: syz [ 462.425145][T14168] usb 3-1: config 0 descriptor?? [ 462.433880][T14168] smsc75xx v1.0.0 [ 462.479660][ T5930] usb 6-1: device descriptor read/64, error -71 [ 462.794231][T14314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.869966][ T5930] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 462.904478][T14168] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 462.948349][T14168] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 462.964824][T14314] veth0_vlan: entered promiscuous mode [ 462.990188][T14168] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 462.998204][T14314] veth1_vlan: entered promiscuous mode [ 463.028940][ T5930] usb 6-1: device descriptor read/64, error -71 [ 463.040680][T14168] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 463.091229][T14314] veth0_macvtap: entered promiscuous mode [ 463.104817][ T44] usb 3-1: USB disconnect, device number 52 [ 463.134131][T14314] veth1_macvtap: entered promiscuous mode [ 463.148852][ T24] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 463.159264][ T5930] usb usb6-port1: attempt power cycle [ 463.195881][T14314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.234500][T14314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.268313][ T2954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.303913][ T2954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.324171][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.343599][ T2954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.359218][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.377684][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.387036][ T2954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.396240][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.404882][ T24] usb 2-1: SerialNumber: syz [ 463.484544][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 463.509113][ T5930] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 463.529508][T14407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.560418][ T5930] usb 6-1: device descriptor read/8, error -71 [ 463.606004][T14410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 463.619981][T14410] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 463.639750][T14410] bond3: (slave ip6gre1): Error -95 calling set_mac_address [ 463.663498][ T24] usb 2-1: 0:2 : does not exist [ 463.689947][ T24] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 463.725370][ T4146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.750363][ T4146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.777098][ T24] usb 2-1: USB disconnect, device number 51 [ 463.819660][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.828773][ T5930] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 463.856605][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.858457][T13248] udevd[13248]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.866305][ T5930] usb 6-1: device descriptor read/8, error -71 [ 464.059147][ T5930] usb usb6-port1: unable to enumerate USB device [ 464.139360][T14403] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 464.159233][ T52] Bluetooth: hci2: command tx timeout [ 464.264352][T14423] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2977'. [ 464.280223][T14403] usb 3-1: device descriptor read/64, error -71 [ 464.295254][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2977'. [ 464.308880][ T5930] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 464.341989][T14423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2977'. [ 464.406374][T14427] netlink: 'syz.0.2977': attribute type 21 has an invalid length. [ 464.455383][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2977'. [ 464.533082][ T5930] usb 4-1: no configurations [ 464.540973][ T5930] usb 4-1: can't read configurations, error -22 [ 464.559063][T14403] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 464.581563][T14429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2978'. [ 464.669893][ T5930] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 464.688737][T14403] usb 3-1: device descriptor read/64, error -71 [ 464.812154][T14403] usb usb3-port1: attempt power cycle [ 464.848731][ T5930] usb 4-1: no configurations [ 464.848757][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 464.853412][ T5930] usb 4-1: can't read configurations, error -22 [ 464.877698][ T5930] usb usb4-port1: attempt power cycle [ 465.066878][ T24] usb 2-1: device descriptor read/64, error -71 [ 465.168806][T14403] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 465.200915][T14403] usb 3-1: device descriptor read/8, error -71 [ 465.288780][ T5930] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 465.347580][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 465.360740][ T5930] usb 4-1: no configurations [ 465.383608][ T5930] usb 4-1: can't read configurations, error -22 [ 465.439710][T14403] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 465.494013][T14403] usb 3-1: device descriptor read/8, error -71 [ 465.508838][ T24] usb 2-1: device descriptor read/64, error -71 [ 465.563150][ T5930] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 465.593229][ T5930] usb 4-1: no configurations [ 465.597847][ T5930] usb 4-1: can't read configurations, error -22 [ 465.606113][ T5930] usb usb4-port1: unable to enumerate USB device [ 465.612801][T14403] usb usb3-port1: unable to enumerate USB device [ 465.628909][ T24] usb usb2-port1: attempt power cycle [ 465.679221][ T182] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 465.818831][ T182] usb 6-1: device descriptor read/64, error -71 [ 465.968852][ T24] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 465.990175][ T24] usb 2-1: device descriptor read/8, error -71 [ 466.058738][ T182] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 466.184038][T14448] kernel read not supported for file /file1 (pid: 14448 comm: syz.0.2986) [ 466.208978][ T182] usb 6-1: device descriptor read/64, error -71 [ 466.217744][ T30] audit: type=1800 audit(1764829504.663:2372): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2986" name="file1" dev="mqueue" ino=51195 res=0 errno=0 [ 466.248804][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 466.295923][ T24] usb 2-1: device descriptor read/8, error -71 [ 466.332002][T14449] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2986'. [ 466.345947][T14448] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2986'. [ 466.349190][ T182] usb usb6-port1: attempt power cycle [ 466.442055][ T24] usb usb2-port1: unable to enumerate USB device [ 466.719104][ T182] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 466.859728][ T182] usb 6-1: device descriptor read/8, error -71 [ 467.098783][ T182] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 467.140615][ T182] usb 6-1: device descriptor read/8, error -71 [ 467.264930][ T182] usb usb6-port1: unable to enumerate USB device [ 467.554241][T14464] input: syz0 as /devices/virtual/input/input27 [ 467.697502][T14464] binder: 14463:14464 ioctl c018620b 0 returned -14 [ 467.748863][ T5973] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 467.911508][ T5973] usb 4-1: Using ep0 maxpacket: 32 [ 467.939084][ T5973] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 467.978568][ T5973] usb 4-1: config 0 has no interface number 0 [ 468.009282][ T5973] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 468.049952][ T5973] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 468.130123][ T5973] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 468.139700][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.147695][ T5973] usb 4-1: Product: syz [ 468.152768][ T5973] usb 4-1: Manufacturer: syz [ 468.203538][ T5973] usb 4-1: SerialNumber: syz [ 468.218875][ T5973] usb 4-1: config 0 descriptor?? [ 468.236218][T14478] netlink: 9460 bytes leftover after parsing attributes in process `syz.0.2996'. [ 468.258354][ T5973] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 468.478170][ T5973] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 468.486078][ T5973] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 468.958813][ T5973] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 469.020413][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 469.130067][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 469.150016][ T5973] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 469.201707][ T5973] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 469.264130][ T5973] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.295554][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.331725][ T5973] usb 6-1: Product: syz [ 469.378823][ T5973] usb 6-1: Manufacturer: syz [ 469.378852][ T5973] usb 6-1: SerialNumber: syz [ 469.386544][ T5973] usb 6-1: config 0 descriptor?? [ 469.399350][ T5973] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 469.399372][ T5973] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 469.419038][ T182] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 469.580648][ T182] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 469.580679][ T182] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 469.580701][ T182] usb 3-1: config 150 has no interface number 0 [ 469.580741][ T182] usb 3-1: config 150 interface 204 has no altsetting 0 [ 469.582917][ T182] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 469.582947][ T182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.583167][ T182] usb 3-1: Product: syz [ 469.583184][ T182] usb 3-1: Manufacturer: syz [ 469.583199][ T182] usb 3-1: SerialNumber: syz [ 469.679357][ T5973] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 469.730581][ T5973] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 469.732614][ T5973] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 469.732629][ T5973] em28xx 6-1:0.0: No AC97 audio processor [ 469.754106][ T5973] usb 6-1: USB disconnect, device number 24 [ 469.755720][ T5973] em28xx 6-1:0.0: Disconnecting em28xx [ 469.778251][ T5973] em28xx 6-1:0.0: Freeing device [ 469.810497][T14503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.810849][T14503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.812530][ T182] xr_serial 3-1:150.204: skipping garbage [ 469.812559][ T182] xr_serial 3-1:150.204: xr_serial converter detected [ 470.285661][ T5973] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 470.468514][ T5973] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 470.468535][ T5973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.468546][ T5973] usb 6-1: Product: syz [ 470.468554][ T5973] usb 6-1: Manufacturer: syz [ 470.468562][ T5973] usb 6-1: SerialNumber: syz [ 470.652131][ T182] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 470.652209][ T182] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 470.659911][ T182] usb 3-1: USB disconnect, device number 57 [ 470.661879][ T182] xr_serial 3-1:150.204: device disconnected [ 470.683413][ T5973] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 470.683514][ T5973] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 470.750387][ T5973] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 470.750447][ T5973] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 470.751019][ T5973] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 470.771282][ T5158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 470.775399][ T5158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 470.776129][ T5158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 470.777018][ T5158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 470.777537][ T5158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 470.808528][ T5973] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 470.839042][ T5973] usb 6-1: USB disconnect, device number 25 [ 470.864983][T14403] usb 4-1: USB disconnect, device number 59 [ 471.157902][T11493] syz_tun (unregistering): left allmulticast mode [ 471.529048][ T5895] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 471.549863][ T5973] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 471.668779][ T5895] usb 2-1: device descriptor read/64, error -71 [ 471.678913][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 471.708894][ T5973] usb 6-1: Using ep0 maxpacket: 8 [ 471.716056][ T5973] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 471.725781][ T5973] usb 6-1: config 179 has no interface number 0 [ 471.738715][ T5973] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 471.750412][ T5973] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 471.762488][ T5973] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 471.774164][ T5973] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 471.787372][ T5973] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 471.808712][ T5973] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 471.832558][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.851133][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 471.870980][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 471.890613][T14524] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.897973][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 471.919428][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 471.935597][ T5895] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 471.955680][ T24] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 471.968102][T14520] chnl_net:caif_netlink_parms(): no params data found [ 471.990132][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.016571][ T24] usb 3-1: Product: syz [ 472.026737][ T24] usb 3-1: Manufacturer: syz [ 472.035129][ T24] usb 3-1: SerialNumber: syz [ 472.063719][T14548] x_tables: unsorted entry at hook 2 [ 472.086014][ T5895] usb 2-1: device descriptor read/64, error -71 [ 472.102877][ T24] usb 3-1: config 0 descriptor?? [ 472.124544][ T24] redrat3 3-1:0.0: Couldn't find all endpoints [ 472.200088][ T5895] usb usb2-port1: attempt power cycle [ 472.232043][ T5973] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input29 [ 472.312731][T14555] loop2: detected capacity change from 0 to 7 [ 472.325906][ T24] usb 3-1: USB disconnect, device number 58 [ 472.372396][T14555] loop2: [POWERTEC] p1 p2 p3 p4 [ 472.400544][ T5902] usb 6-1: USB disconnect, device number 26 [ 472.400551][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 472.416711][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 472.418080][T14555] loop2: p1 size 4718592 extends beyond EOD, truncated [ 472.518821][T14555] loop2: p2 start 1701408863 is beyond EOD, truncated [ 472.538896][ T5895] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 472.559880][ T5895] usb 2-1: device descriptor read/8, error -71 [ 472.566240][T14555] loop2: p3 start 524288 is beyond EOD, truncated [ 472.599073][T14555] loop2: p4 start 16777216 is beyond EOD, truncated [ 472.627392][T14520] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.656444][T14520] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.664184][T14520] bridge_slave_0: entered allmulticast mode [ 472.684617][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 472.690503][T14520] bridge_slave_0: entered promiscuous mode [ 472.749702][T14520] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.760434][T14520] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.779882][T14520] bridge_slave_1: entered allmulticast mode [ 472.783625][ T30] audit: type=1326 audit(1764829511.233:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 472.787826][T14520] bridge_slave_1: entered promiscuous mode [ 472.809031][ T5895] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 472.809885][ T52] Bluetooth: hci6: command tx timeout [ 472.830850][ T5895] usb 2-1: device descriptor read/8, error -71 [ 472.837074][ T30] audit: type=1326 audit(1764829511.263:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 472.877933][ T30] audit: type=1326 audit(1764829511.323:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 472.901770][ T30] audit: type=1326 audit(1764829511.323:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 472.928790][ T30] audit: type=1326 audit(1764829511.323:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 472.964392][ T5895] usb usb2-port1: unable to enumerate USB device [ 472.972099][ T30] audit: type=1326 audit(1764829511.323:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 473.030773][T14560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3018'. [ 473.083673][ T30] audit: type=1326 audit(1764829511.323:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 473.083728][ T30] audit: type=1326 audit(1764829511.323:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 473.083769][ T30] audit: type=1326 audit(1764829511.323:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 473.083809][ T30] audit: type=1326 audit(1764829511.323:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.3.3017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff811f8f749 code=0x7ffc0000 [ 473.131128][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.142486][ T1138] bridge_slave_1: left allmulticast mode [ 473.142552][ T1138] bridge_slave_1: left promiscuous mode [ 473.142735][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.214119][ T1138] bridge_slave_0: left allmulticast mode [ 473.214146][ T1138] bridge_slave_0: left promiscuous mode [ 473.214397][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.330839][ T5895] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 473.490389][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 473.490424][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 473.490449][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 473.490482][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 473.490503][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 473.492864][ T5895] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 473.492892][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.492908][ T5895] usb 4-1: Product: syz [ 473.492920][ T5895] usb 4-1: Manufacturer: syz [ 473.492932][ T5895] usb 4-1: SerialNumber: syz [ 473.495816][ T5895] usb 4-1: config 0 descriptor?? [ 473.589866][T14561] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 473.604828][ T5895] usb 4-1: ucan: probing device on interface #0 [ 473.620335][ T5895] usb 4-1: ucan: invalid endpoint configuration [ 473.663804][ T5895] usb 4-1: ucan: probe failed; try to update the device firmware [ 473.718369][ T1138] dvmrp8 (unregistering): left allmulticast mode [ 473.808256][T14168] usb 4-1: USB disconnect, device number 60 [ 473.977652][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.991582][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.014470][ T1138] bond0 (unregistering): (slave team0): Releasing backup interface [ 474.031837][ T1138] bond0 (unregistering): Released all slaves [ 474.204887][ T1138] bond1 (unregistering): Released all slaves [ 474.501438][T14575] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 474.629225][T14576] loop9: detected capacity change from 0 to 7 [ 474.647974][T14576] Dev loop9: unable to read RDB block 7 [ 474.655792][T14576] loop9: unable to read partition table [ 474.662702][T14576] loop9: partition table beyond EOD, truncated [ 474.672235][T14576] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 474.684876][ T1138] bond2 (unregistering): Released all slaves [ 474.888886][ T52] Bluetooth: hci6: command tx timeout [ 475.015326][ T1138] bond3 (unregistering): Released all slaves [ 475.057708][T14520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.118071][T14520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.199122][ T1138] tipc: Disabling bearer [ 475.239943][ T1138] tipc: Disabling bearer [ 475.245345][ T1138] tipc: Disabling bearer [ 475.318932][ T1138] tipc: Left network mode [ 475.801970][T14587] syzkaller0: entered promiscuous mode [ 475.807576][T14587] syzkaller0: entered allmulticast mode [ 475.901052][T14520] team0: Port device team_slave_0 added [ 476.321850][T14607] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3025'. [ 476.489060][T14168] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 476.673314][T14168] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 476.691540][T14168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.720430][T14168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.732290][T14168] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 476.771818][T14168] usb 2-1: New USB device found, idVendor=056a, idProduct=0015, bcdDevice= 0.00 [ 476.807405][T14168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.825206][T14168] usb 2-1: config 0 descriptor?? [ 476.965081][ T52] Bluetooth: hci6: command tx timeout [ 477.079135][ T5973] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 477.228817][ T5973] usb 4-1: Using ep0 maxpacket: 32 [ 477.244823][ T5973] usb 4-1: config 0 has an invalid interface number: 213 but max is 1 [ 477.254264][ T5973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.266606][ T5973] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 477.285157][ T5973] usb 4-1: config 0 has no interface number 0 [ 477.292955][ T5973] usb 4-1: too many endpoints for config 0 interface 213 altsetting 7: 78, using maximum allowed: 30 [ 477.320407][ T5973] usb 4-1: config 0 interface 213 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 477.346502][ T5973] usb 4-1: config 0 interface 213 has no altsetting 0 [ 477.369504][ T5973] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 477.384322][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.392596][ T5973] usb 4-1: Product: syz [ 477.407717][ T5973] usb 4-1: Manufacturer: syz [ 477.415451][ T5973] usb 4-1: SerialNumber: syz [ 477.462469][ T5973] usb 4-1: config 0 descriptor?? [ 477.682955][ T5973] usb 4-1: USB disconnect, device number 61 [ 479.038932][ T52] Bluetooth: hci6: command tx timeout [ 479.241145][T14168] usbhid 2-1:0.0: can't add hid device: -71 [ 479.249017][T14168] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 479.305474][T14168] usb 2-1: USB disconnect, device number 60 [ 480.327329][T14520] team0: Port device team_slave_1 added [ 480.709124][ T1138] hsr_slave_0: left promiscuous mode [ 480.719642][ T1138] hsr_slave_1: left promiscuous mode [ 480.769446][ T1138] team0 (unregistering): Port device batadv0 removed [ 482.565849][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 482.622780][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 483.603783][T14520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.624159][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.680264][T14520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.748011][T14662] program syz.1.3043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.784165][T14520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.800795][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.881902][T14520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.038796][T14403] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 484.097776][T14668] loop2: detected capacity change from 0 to 7 [ 484.118053][T14668] loop2: [POWERTEC] p1 p2 p3 p4 [ 484.150163][T14668] loop2: p1 size 4718592 extends beyond EOD, truncated [ 484.197506][T14668] loop2: p2 start 1701408863 is beyond EOD, truncated [ 484.205402][T14668] loop2: p3 start 524288 is beyond EOD, truncated [ 484.243972][T14668] loop2: p4 start 16777216 is beyond EOD, truncated [ 484.250808][T14403] usb 2-1: Invalid ep0 maxpacket: 32 [ 484.269395][T14520] hsr_slave_0: entered promiscuous mode [ 484.292332][T14520] hsr_slave_1: entered promiscuous mode [ 484.331289][T14520] debugfs: 'hsr0' already exists in 'hsr' [ 484.337032][T14520] Cannot create hsr debugfs directory [ 484.371015][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 484.399084][T14403] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 484.524048][ T1138] IPVS: stop unused estimator thread 0... [ 484.608843][T14403] usb 2-1: Invalid ep0 maxpacket: 32 [ 484.662736][T14403] usb usb2-port1: attempt power cycle [ 484.781735][ T5902] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 484.988753][ T5902] usb 6-1: Using ep0 maxpacket: 32 [ 485.012464][ T5902] usb 6-1: config 1 has an invalid interface number: 29 but max is 0 [ 485.032503][ T5902] usb 6-1: config 1 has no interface number 0 [ 485.069022][T14403] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 485.090149][ T5902] usb 6-1: config 1 interface 29 has no altsetting 0 [ 485.112722][ T5902] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 485.128847][ T5895] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 485.129508][T14403] usb 2-1: Invalid ep0 maxpacket: 32 [ 485.137209][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.180288][ T5902] usb 6-1: Product: syz [ 485.196917][ T5902] usb 6-1: Manufacturer: syz [ 485.205299][ T5902] usb 6-1: SerialNumber: syz [ 485.298843][T14403] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 485.338726][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 485.465848][ T5895] usb 3-1: config 0 has no interfaces? [ 485.496898][ T5902] peak_usb 6-1:1.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 485.509994][T14403] usb 2-1: Invalid ep0 maxpacket: 32 [ 485.517551][ T5895] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.549011][T14403] usb usb2-port1: unable to enumerate USB device [ 485.552553][ T5895] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.616621][ T5895] usb 3-1: Manufacturer: syz [ 485.654807][ T5895] usb 3-1: config 0 descriptor?? [ 485.703373][ T5902] peak_usb 6-1:1.29 can0: sending command failure: -22 [ 485.724389][ T5902] peak_usb 6-1:1.29 can0: sending command failure: -22 [ 485.744533][ T5902] peak_usb 6-1:1.29 can0: sending command failure: -22 [ 485.820197][ T5902] peak_usb 6-1:1.29: probe with driver peak_usb failed with error -22 [ 486.583700][T14520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.642299][T14520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.715725][T14520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.768612][T14710] netlink: 'syz.3.3053': attribute type 10 has an invalid length. [ 486.899296][T14520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.216706][ T5973] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 487.400275][ T5973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.418716][ T5973] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 487.434346][T14520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.448694][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.481403][ T5973] usb 2-1: config 0 descriptor?? [ 487.494346][T14520] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.527929][ T5973] pwc: Askey VC010 type 2 USB webcam detected. [ 487.570951][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.578129][ T6192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.620963][ T5895] usb 6-1: USB disconnect, device number 27 [ 487.653917][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.661168][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.761759][T14732] loop2: detected capacity change from 0 to 7 [ 487.811360][T14732] loop2: [POWERTEC] p1 p2 p3 p4 [ 487.913400][T14732] loop2: p1 size 4718592 extends beyond EOD, truncated [ 487.925364][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 487.949958][ T5973] pwc: recv_control_msg error -32 req 02 val 2b00 [ 487.956908][T14732] loop2: p2 start 1701408863 is beyond EOD, truncated [ 487.959777][ T5973] pwc: recv_control_msg error -32 req 02 val 2700 [ 487.969787][T14732] loop2: p3 start 524288 is beyond EOD, truncated [ 488.012467][T14520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.020008][ T5973] pwc: recv_control_msg error -32 req 02 val 2c00 [ 488.028524][T14732] loop2: p4 start 16777216 is beyond EOD, truncated [ 488.069612][T14168] usb 3-1: USB disconnect, device number 59 [ 488.100775][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.138070][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.198618][ T24] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 488.218418][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.238355][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 488.250212][ T5973] pwc: recv_control_msg error -71 req 04 val 1300 [ 488.263571][ T5973] pwc: recv_control_msg error -71 req 04 val 1400 [ 488.292713][ T24] usb 4-1: config 0 descriptor?? [ 488.308393][ T5973] pwc: recv_control_msg error -71 req 02 val 2000 [ 488.348765][ T5973] pwc: recv_control_msg error -71 req 02 val 2100 [ 488.379039][ T5973] pwc: recv_control_msg error -71 req 04 val 1500 [ 488.387409][ T5973] pwc: recv_control_msg error -71 req 02 val 2500 [ 488.432344][T14740] loop8: detected capacity change from 0 to 8 [ 488.481689][ T5973] pwc: recv_control_msg error -71 req 02 val 2400 [ 488.525156][T14740] Dev loop8: unable to read RDB block 8 [ 488.531705][T14740] loop8: unable to read partition table [ 488.559787][T14740] loop8: partition table beyond EOD, truncated [ 488.590815][ T5973] pwc: recv_control_msg error -71 req 02 val 2600 [ 488.617579][T14740] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 488.628000][ T5973] pwc: recv_control_msg error -71 req 02 val 2900 [ 488.655306][ T5973] pwc: recv_control_msg error -71 req 02 val 2800 [ 488.683327][ T5973] pwc: recv_control_msg error -71 req 04 val 1100 [ 488.709515][T14520] veth0_vlan: entered promiscuous mode [ 488.715677][ T5973] pwc: recv_control_msg error -71 req 04 val 1200 [ 488.735532][ T5973] pwc: Registered as video103. [ 488.750556][T14520] veth1_vlan: entered promiscuous mode [ 488.805103][ T5973] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 488.818928][ T24] hid-steam 0003:28DE:1142.001E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 488.884064][ T5973] usb 2-1: USB disconnect, device number 65 [ 488.988928][ T24] hid-steam 0003:28DE:1142.001E: Steam wireless receiver connected [ 489.015165][T14520] veth0_macvtap: entered promiscuous mode [ 489.108389][T14753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3056'. [ 489.182531][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'. [ 489.240017][ T24] hid-steam 0003:28DE:1142.001F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 489.304664][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'. [ 489.341709][T14520] veth1_macvtap: entered promiscuous mode [ 489.377693][T14753] bridge_slave_1: left allmulticast mode [ 489.384600][T14753] bridge_slave_1: left promiscuous mode [ 489.391203][T14753] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.452939][T14753] bridge_slave_0: left allmulticast mode [ 489.515169][T14753] bridge_slave_0: left promiscuous mode [ 489.542006][T14753] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.150764][T14520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.159044][ T5895] usb 4-1: reset high-speed USB device number 62 using dummy_hcd [ 490.218283][T14520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.281945][ T6188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.317174][ T6188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.376277][ T6188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.456603][ T6188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.692820][ T6188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.730216][ T6188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.849913][ T6188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.876312][ T6188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.518818][ T44] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 491.758943][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 491.791895][ T44] usb 2-1: config 1 has an invalid interface number: 29 but max is 0 [ 491.846919][ T44] usb 2-1: config 1 has no interface number 0 [ 491.868771][ T44] usb 2-1: config 1 interface 29 has no altsetting 0 [ 491.994700][T14813] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3068'. [ 492.036824][ T44] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 492.071676][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.091805][ T44] usb 2-1: Product: syz [ 492.212270][ T5902] usb 4-1: USB disconnect, device number 62 [ 492.253393][ T5902] hid-steam 0003:28DE:1142.001E: Steam wireless receiver disconnected [ 492.264882][ T44] usb 2-1: Manufacturer: syz [ 492.281100][ T44] usb 2-1: SerialNumber: syz [ 492.510876][ T44] peak_usb 2-1:1.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 492.749953][ T44] peak_usb 2-1:1.29 can0: sending command failure: -22 [ 492.758748][ T44] peak_usb 2-1:1.29 can0: sending command failure: -22 [ 492.765635][ T44] peak_usb 2-1:1.29 can0: sending command failure: -22 [ 493.314402][T14824] ip6_vti0: entered promiscuous mode [ 493.321310][T14824] ip6_vti0: entered allmulticast mode [ 493.481402][ T44] peak_usb 2-1:1.29: probe with driver peak_usb failed with error -22 [ 493.649225][T14785] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 493.663797][T14827] loop5: detected capacity change from 0 to 7 [ 493.712117][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.721307][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.731892][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.741085][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.758662][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.767859][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.778775][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.787949][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.797318][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.806474][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.808742][T14785] usb 6-1: Using ep0 maxpacket: 16 [ 493.818664][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.828707][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.838852][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.848050][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.855968][T14827] ldm_validate_partition_table(): Disk read failed. [ 493.871232][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.880469][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.888594][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.897785][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.906857][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.916019][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 493.926080][T14827] Dev loop5: unable to read RDB block 0 [ 493.936568][T14827] loop5: unable to read partition table [ 493.957560][T14827] loop5: partition table beyond EOD, truncated [ 493.993805][T14785] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 494.018550][T14785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.042251][T14785] usb 6-1: Product: syz [ 494.053517][T14785] usb 6-1: Manufacturer: syz [ 494.056768][T14827] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 494.108771][T14785] usb 6-1: SerialNumber: syz [ 494.169313][T14785] r8152-cfgselector 6-1: Unknown version 0x0000 [ 494.175608][T14785] r8152-cfgselector 6-1: config 0 descriptor?? [ 494.793740][T14785] usb 2-1: USB disconnect, device number 66 [ 494.977125][T14846] IPv6: Can't replace route, no match found [ 495.778935][T14869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3078'. [ 496.201280][T14785] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 496.388762][T14785] usb 4-1: Using ep0 maxpacket: 16 [ 496.395733][T14785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.407759][T14785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.427886][T14785] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 496.437249][T14785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.457583][T14785] usb 4-1: config 0 descriptor?? [ 496.612680][ T915] r8152-cfgselector 6-1: USB disconnect, device number 28 [ 496.689049][T14870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.719416][T14870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.052883][T14882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.063300][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 497.074546][T14882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.212579][T14785] usbhid 4-1:0.0: can't add hid device: -71 [ 497.233790][T14785] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 497.292558][T14785] usb 4-1: USB disconnect, device number 63 [ 497.849382][T14902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3083'. [ 498.219522][ T915] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 498.408835][ T915] usb 4-1: Using ep0 maxpacket: 16 [ 498.409248][ T5840] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 498.426444][ T915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.512786][ T915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.580457][ T915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.603957][ T5840] usb 2-1: Using ep0 maxpacket: 32 [ 498.626555][ T5840] usb 2-1: config 1 has an invalid interface number: 29 but max is 0 [ 498.646784][ T5840] usb 2-1: config 1 has no interface number 0 [ 498.668882][ T5840] usb 2-1: config 1 interface 29 has no altsetting 0 [ 498.687462][ T915] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 498.697186][ T915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.724661][T14403] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 498.779635][ T915] usb 4-1: config 0 descriptor?? [ 498.801403][ T5840] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 498.820481][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.846672][ T5840] usb 2-1: Product: syz [ 498.859140][ T5840] usb 2-1: Manufacturer: syz [ 498.872417][ T5840] usb 2-1: SerialNumber: syz [ 498.893512][T14403] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.921593][T14403] usb 6-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 498.954917][T14403] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.982921][T14403] usb 6-1: config 0 descriptor?? [ 499.122303][ T5840] peak_usb 2-1:1.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 499.255698][ T915] HID 045e:07da: Invalid code 65791 type 1 [ 499.270140][ T915] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0020/input/input35 [ 499.314475][ T5840] peak_usb 2-1:1.29 can0: sending command failure: -22 [ 499.350544][ T5840] peak_usb 2-1:1.29 can0: sending command failure: -22 [ 499.367209][ T915] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 499.379616][ T5840] peak_usb 2-1:1.29 can0: sending command failure: -22 [ 499.549963][ T5840] peak_usb 2-1:1.29: probe with driver peak_usb failed with error -22 [ 499.642179][ T5840] usb 6-1: USB disconnect, device number 29 [ 499.684542][T14168] usb 4-1: USB disconnect, device number 64 [ 501.407603][ T915] usb 2-1: USB disconnect, device number 67 [ 501.674822][T14941] fuse: Bad value for 'rootmode' [ 501.688024][T14943] loop2: detected capacity change from 0 to 7 [ 501.695523][T14943] loop2: [POWERTEC] p1 p2 p3 p4 [ 501.700853][T14943] loop2: p1 size 4718592 extends beyond EOD, truncated [ 501.799724][T14941] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3097'. [ 501.810483][T14943] loop2: p2 start 1701408863 is beyond EOD, truncated [ 501.877409][T14943] loop2: p3 start 524288 is beyond EOD, truncated [ 501.886089][T14943] loop2: p4 start 16777216 is beyond EOD, truncated [ 501.935415][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.978030][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.167856][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 502.359552][T14956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 502.629111][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 502.957579][T14967] program syz.3.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.448766][ T915] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 503.618788][T14785] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 503.622487][T14976] FAULT_INJECTION: forcing a failure. [ 503.622487][T14976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.626390][ T915] usb 3-1: device descriptor read/64, error -71 [ 503.668826][T14976] CPU: 0 UID: 0 PID: 14976 Comm: syz.1.3108 Not tainted syzkaller #0 PREEMPT(full) [ 503.668850][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.668865][T14976] Call Trace: [ 503.668875][T14976] [ 503.668883][T14976] dump_stack_lvl+0x189/0x250 [ 503.668906][T14976] ? __pfx____ratelimit+0x10/0x10 [ 503.668925][T14976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.668946][T14976] ? __pfx__printk+0x10/0x10 [ 503.668983][T14976] should_fail_ex+0x414/0x560 [ 503.669019][T14976] _copy_to_user+0x31/0xb0 [ 503.669045][T14976] simple_read_from_buffer+0xe1/0x170 [ 503.669074][T14976] proc_fail_nth_read+0x1b3/0x220 [ 503.669099][T14976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.669124][T14976] ? rw_verify_area+0x2a6/0x4d0 [ 503.669143][T14976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.669166][T14976] vfs_read+0x200/0xa30 [ 503.669184][T14976] ? fdget_pos+0x247/0x320 [ 503.669214][T14976] ? __pfx___mutex_lock+0x10/0x10 [ 503.669238][T14976] ? __pfx_vfs_read+0x10/0x10 [ 503.669259][T14976] ? __fget_files+0x2a/0x420 [ 503.669289][T14976] ? __fget_files+0x3a0/0x420 [ 503.669317][T14976] ? __fget_files+0x2a/0x420 [ 503.669351][T14976] ksys_read+0x145/0x250 [ 503.669373][T14976] ? __pfx_ksys_read+0x10/0x10 [ 503.669397][T14976] ? do_syscall_64+0xbe/0xf80 [ 503.669425][T14976] do_syscall_64+0xfa/0xf80 [ 503.669455][T14976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.669475][T14976] ? clear_bhb_loop+0x60/0xb0 [ 503.669499][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.669518][T14976] RIP: 0033:0x7efcf198e15c [ 503.669535][T14976] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 503.669553][T14976] RSP: 002b:00007efcefbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.669573][T14976] RAX: ffffffffffffffda RBX: 00007efcf1be5fa0 RCX: 00007efcf198e15c [ 503.669588][T14976] RDX: 000000000000000f RSI: 00007efcefbf60a0 RDI: 0000000000000005 [ 503.669600][T14976] RBP: 00007efcefbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.669612][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.669625][T14976] R13: 00007efcf1be6038 R14: 00007efcf1be5fa0 R15: 00007efcf1d0fa28 [ 503.669657][T14976] [ 503.907825][T14785] usb 4-1: device descriptor read/64, error -71 [ 504.229292][ T915] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 504.308950][T14785] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 504.358851][ T915] usb 3-1: device descriptor read/64, error -71 [ 504.404815][T14982] loop2: detected capacity change from 0 to 7 [ 504.418835][T14982] loop2: [POWERTEC] p1 p2 p3 p4 [ 504.424162][T14982] loop2: p1 size 4718592 extends beyond EOD, truncated [ 504.433558][T14982] loop2: p2 start 1701408863 is beyond EOD, truncated [ 504.448751][T14785] usb 4-1: device descriptor read/64, error -71 [ 504.449178][T14982] loop2: p3 start 524288 is beyond EOD, truncated [ 504.491295][ T915] usb usb3-port1: attempt power cycle [ 504.527377][T14982] loop2: p4 start 16777216 is beyond EOD, truncated [ 504.559495][T14785] usb usb4-port1: attempt power cycle [ 504.666493][T13248] udevd[13248]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 504.839405][ T915] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 504.893088][ T915] usb 3-1: device descriptor read/8, error -71 [ 504.899389][T14785] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 504.994282][T14785] usb 4-1: device descriptor read/8, error -71 [ 505.138793][ T915] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 505.182857][ T915] usb 3-1: device descriptor read/8, error -71 [ 505.213819][T14997] netlink: 'syz.0.3112': attribute type 39 has an invalid length. [ 505.238811][T14785] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 505.261822][T14785] usb 4-1: device descriptor read/8, error -71 [ 505.309321][ T915] usb usb3-port1: unable to enumerate USB device [ 505.379022][T14785] usb usb4-port1: unable to enumerate USB device [ 505.601130][T14403] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 505.798711][T14403] usb 2-1: Using ep0 maxpacket: 32 [ 505.827140][T14403] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 505.854651][T14403] usb 2-1: config 0 has no interface number 0 [ 505.872667][T14403] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 505.906398][T14403] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 505.932096][T14403] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.000983][T14403] usb 2-1: Product: syz [ 506.005166][T14403] usb 2-1: Manufacturer: syz [ 506.025351][T14403] usb 2-1: SerialNumber: syz [ 506.070832][T14403] usb 2-1: config 0 descriptor?? [ 506.083413][T15004] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 506.216384][T15021] binder: BINDER_SET_CONTEXT_MGR already set [ 506.236659][T15021] binder: 15020:15021 ioctl 4018620d 200000000040 returned -16 [ 506.255832][T15021] binder: 15020:15021 ioctl c0306201 200000001440 returned -11 [ 506.348430][T15004] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 506.446511][T15027] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 506.768798][ T5902] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 506.942484][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.953856][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.969349][ T5902] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 507.047128][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.112459][ T5902] usb 4-1: config 0 descriptor?? [ 507.528478][ T5902] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 507.537061][ T5902] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 507.547328][ T5902] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 507.563541][ T5902] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 507.578874][ T5902] playstation 0003:054C:0DF2.0022: unknown main item tag 0x0 [ 507.628473][ T5902] playstation 0003:054C:0DF2.0022: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 507.669900][ T5895] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 507.828761][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 507.837292][ T5895] usb 6-1: config 194 has an invalid interface number: 102 but max is 2 [ 507.851504][ T5895] usb 6-1: config 194 has 2 interfaces, different from the descriptor's value: 3 [ 507.868774][ T5895] usb 6-1: config 194 has no interface number 1 [ 507.876535][ T5895] usb 6-1: config 194 interface 0 has no altsetting 1 [ 507.893533][ T5895] usb 6-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 507.908915][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.927332][ T5895] usb 6-1: Product: syz [ 507.933725][ T5902] playstation 0003:054C:0DF2.0022: Invalid reportID received, expected 5 got 32 [ 507.944867][ T5902] playstation 0003:054C:0DF2.0022: Failed to retrieve DualSense calibration info: -22 [ 507.954890][ T5902] playstation 0003:054C:0DF2.0022: Failed to get calibration data from DualSense [ 507.964225][ T5895] usb 6-1: Manufacturer: syz [ 507.970058][ T5895] usb 6-1: SerialNumber: syz [ 507.974756][ T5902] playstation 0003:054C:0DF2.0022: Failed to create dualsense. [ 508.003686][ T5902] playstation 0003:054C:0DF2.0022: probe with driver playstation failed with error -22 [ 508.140439][ T5902] usb 4-1: USB disconnect, device number 69 [ 508.207966][ T5895] qmi_wwan 6-1:194.0: probe with driver qmi_wwan failed with error -22 [ 508.458366][ T5895] usb 6-1: unknown number of interfaces: 2 [ 508.469262][ T5895] usb 6-1: USB disconnect, device number 30 [ 508.969036][ T5973] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 509.039903][T14403] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 509.067106][T14403] asix 2-1:0.188: probe with driver asix failed with error -71 [ 509.089412][T14403] usb 2-1: USB disconnect, device number 68 [ 509.142282][ T5973] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 509.166075][ T5973] usb 3-1: config 0 interface 0 has no altsetting 0 [ 509.223107][ T5973] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 509.241822][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.261824][ T5973] usb 3-1: Product: syz [ 509.278765][ T5973] usb 3-1: Manufacturer: syz [ 509.283774][ T5973] usb 3-1: SerialNumber: syz [ 509.310047][ T5973] usb 3-1: config 0 descriptor?? [ 509.329502][T15061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 509.349909][ T5973] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 509.379203][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 509.400399][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 509.435877][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 509.459402][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 509.498934][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 509.516730][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 509.545325][ T5973] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 509.564948][T15061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.575538][T15061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.601491][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 509.637492][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 509.659045][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 509.666790][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 509.687006][ T5973] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 509.718373][ T5973] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 509.741280][ T5973] usb 3-1: USB disconnect, device number 64 [ 509.768067][ T5973] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 509.803625][ T5973] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 509.832035][ T5973] keyspan 3-1:0.0: device disconnected [ 511.519765][ T31] INFO: task syz.4.2549:12766 blocked for more than 143 seconds. [ 511.529647][ T31] Not tainted syzkaller #0 [ 511.534838][ T31] Blocked by coredump. [ 511.539765][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 511.548556][ T31] task:syz.4.2549 state:D stack:23544 pid:12766 tgid:12765 ppid:5852 task_flags:0x400548 flags:0x00080004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 511.568681][ T31] Call Trace: [ 511.572008][ T31] [ 511.588479][ T31] __schedule+0x14bc/0x5000 [ 511.665432][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 511.705702][ T31] ? __pfx___schedule+0x10/0x10 [ 511.722996][ T31] ? schedule+0x91/0x360 [ 511.727299][ T31] schedule+0x165/0x360 [ 511.733759][ T31] schedule_timeout+0x9a/0x270 [ 511.738554][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 511.768728][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.773986][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 511.798722][ T31] ? wait_for_completion+0x267/0x5d0 [ 511.804066][ T31] wait_for_completion+0x2bf/0x5d0 [ 511.948733][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 511.954431][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 511.982048][ T31] ? io_wq_put_and_exit+0x160/0x650 [ 511.987311][ T31] io_wq_put_and_exit+0x316/0x650 [ 512.018767][ T31] io_uring_clean_tctx+0x11f/0x1a0 [ 512.023948][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 512.050790][ T31] ? io_uring_drop_tctx_refs+0x131/0x1c0 [ 512.056480][ T31] io_uring_cancel_generic+0x6ca/0x7d0 [ 512.089269][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 512.095319][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 512.139570][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.144832][ T31] ? io_uring_unreg_ringfd+0x52f/0x540 [ 512.178778][ T31] do_exit+0x345/0x2310 [ 512.183008][ T31] ? irqentry_exit+0x5dd/0x660 [ 512.187791][ T31] ? __pfx_do_exit+0x10/0x10 [ 512.233174][ T31] ? preempt_schedule_common+0x83/0xd0 [ 512.249417][ T31] ? preempt_schedule+0xae/0xc0 [ 512.254321][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 512.295643][ T31] do_group_exit+0x21c/0x2d0 [ 512.300376][ T31] get_signal+0x1285/0x1340 [ 512.304906][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 512.310627][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 512.316802][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 512.334677][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 512.341191][ T31] ? rcu_is_watching+0x15/0xb0 [ 512.345962][ T31] do_syscall_64+0x2e3/0xf80 [ 512.350662][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.358709][ T31] ? clear_bhb_loop+0x60/0xb0 [ 512.363392][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.369387][ T31] RIP: 0033:0x7f891b58f749 [ 512.373867][ T31] RSP: 002b:00007f89197ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 512.388732][ T31] RAX: fffffffffffffe00 RBX: 00007f891b7e5fa8 RCX: 00007f891b58f749 [ 512.396734][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f891b7e5fa8 [ 512.418716][ T31] RBP: 00007f891b7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 512.426715][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.449855][ T31] R13: 00007f891b7e6038 R14: 00007f891b90f940 R15: 00007f891b90fa28 [ 512.457863][ T31] [ 512.461043][ T31] [ 512.461043][ T31] Showing all locks held in the system: [ 512.469016][ T31] 1 lock held by khungtaskd/31: [ 512.473874][ T31] #0: ffffffff8df41d40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 512.483946][ T31] 3 locks held by kworker/u8:14/3456: [ 512.518720][ T31] #0: ffff88801a069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 512.558893][ T31] #1: ffffc9000c4c7b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 512.598834][ T31] #2: ffffffff8f2f3288 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 512.607876][ T31] 2 locks held by getty/5594: [ 512.628775][ T31] #0: ffff88814d7b50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 512.638604][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 512.688736][ T31] 3 locks held by kworker/0:3/5840: [ 512.693949][ T31] #0: ffff88801a055948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 512.718749][ T31] #1: ffffc9000412fb80 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 512.738706][ T31] #2: ffffffff8df47838 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 512.769678][ T31] 5 locks held by kworker/u8:22/6192: [ 512.778708][ T31] #0: ffff88801aedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 512.818852][ T31] #1: ffffc9000bf67b80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 512.838952][ T31] #2: ffffffff8f2e62f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0 [ 512.850422][ T31] #3: ffffffff8f2f3288 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 512.868788][ T31] #4: ffff8880779b94e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 512.879888][ T31] 1 lock held by iou-wrk-12766/12775: [ 512.885286][ T31] 1 lock held by syz-executor/13017: [ 512.891087][ T31] #0: ffffffff8f2f3288 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 512.901001][ T31] 2 locks held by syz-executor/13961: [ 512.906390][ T31] #0: ffff88807a1c4dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 512.918720][ T31] #1: ffff88807a1c40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 512.938414][ T31] 1 lock held by syz-executor/13968: [ 512.972811][ T31] #0: ffffffff8f2f3288 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 512.982979][ T31] 5 locks held by syz-executor/14513: [ 512.988378][ T31] #0: ffff88807b288dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 513.018687][ T31] #1: ffff88807b2880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 513.028404][ T31] #2: ffffffff8f464d08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 513.050906][ T31] #3: ffff88802e9f5b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 513.068744][ T31] #4: ffffffff8df47838 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 513.081628][ T31] [ 513.117465][ T31] ============================================= [ 513.117465][ T31] [ 513.142374][ T31] NMI backtrace for cpu 0 [ 513.142392][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 513.142414][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.142424][ T31] Call Trace: [ 513.142430][ T31] [ 513.142438][ T31] dump_stack_lvl+0x189/0x250 [ 513.142464][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.142484][ T31] ? __pfx__printk+0x10/0x10 [ 513.142519][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 513.142546][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 513.142572][ T31] ? __pfx__printk+0x10/0x10 [ 513.142600][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 513.142624][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 513.142655][ T31] watchdog+0xf3c/0xf80 [ 513.142680][ T31] ? watchdog+0x1e2/0xf80 [ 513.142706][ T31] kthread+0x711/0x8a0 [ 513.142731][ T31] ? __pfx_watchdog+0x10/0x10 [ 513.142752][ T31] ? __pfx_kthread+0x10/0x10 [ 513.142775][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.142802][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 513.142823][ T31] ? __pfx_kthread+0x10/0x10 [ 513.142844][ T31] ret_from_fork+0x599/0xb30 [ 513.142873][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 513.142907][ T31] ? __switch_to_asm+0x39/0x70 [ 513.142928][ T31] ? __switch_to_asm+0x33/0x70 [ 513.142947][ T31] ? __pfx_kthread+0x10/0x10 [ 513.142968][ T31] ret_from_fork_asm+0x1a/0x30 [ 513.143002][ T31] [ 513.143009][ T31] Sending NMI from CPU 0 to CPUs 1: [ 513.290577][ C1] NMI backtrace for cpu 1 [ 513.290594][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 513.290613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.290623][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 513.290648][ C1] Code: 13 ed 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 cd 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 513.290663][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 513.290679][ C1] RAX: 91444a174adbd200 RBX: ffffffff8197326a RCX: 91444a174adbd200 [ 513.290692][ C1] RDX: 0000000000000001 RSI: ffffffff8d768496 RDI: ffffffff8bbfbee0 [ 513.290704][ C1] RBP: ffffc90000197f10 R08: ffff8880b893361b R09: 1ffff110171266c3 [ 513.290716][ C1] R10: dffffc0000000000 R11: ffffed10171266c4 R12: ffffffff8f802170 [ 513.290729][ C1] R13: 1ffff11003951b70 R14: 0000000000000001 R15: 0000000000000001 [ 513.290740][ C1] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 513.290753][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.290765][ C1] CR2: 0000200000ff1000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 513.290779][ C1] Call Trace: [ 513.290785][ C1] [ 513.290791][ C1] default_idle+0x13/0x20 [ 513.290813][ C1] default_idle_call+0x73/0xb0 [ 513.290835][ C1] do_idle+0x1ea/0x520 [ 513.290851][ C1] ? irqentry_exit+0x5ba/0x660 [ 513.290872][ C1] ? __pfx_do_idle+0x10/0x10 [ 513.290895][ C1] cpu_startup_entry+0x44/0x60 [ 513.290912][ C1] start_secondary+0x101/0x110 [ 513.290934][ C1] common_startup_64+0x13e/0x147 [ 513.290960][ C1] [ 513.627954][ T6192] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.757169][ T9187] syz_tun (unregistering): left allmulticast mode [ 513.811307][ T6192] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.904037][ T6192] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.031486][ T6192] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.239050][ T6192] bridge_slave_1: left allmulticast mode [ 514.244747][ T6192] bridge_slave_1: left promiscuous mode [ 514.252072][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.291983][ T6192] bridge_slave_0: left allmulticast mode [ 514.297674][ T6192] bridge_slave_0: left promiscuous mode [ 514.304828][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.018278][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.030276][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.051388][ T6192] bond0 (unregistering): Released all slaves [ 515.470567][ T6192] hsr_slave_0: left promiscuous mode [ 515.485428][ T6192] hsr_slave_1: left promiscuous mode [ 515.497282][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.505031][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.520187][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.527609][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.584140][ T6192] veth1_macvtap: left promiscuous mode [ 515.629165][ T6192] veth0_macvtap: left promiscuous mode [ 515.634867][ T6192] veth1_vlan: left promiscuous mode [ 515.640870][ T6192] veth0_vlan: left promiscuous mode [ 516.387843][ T6192] team0 (unregistering): Port device team_slave_1 removed [ 516.457440][ T6192] team0 (unregistering): Port device team_slave_0 removed [ 517.511381][ T6192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.651107][ T6192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.730743][ T6192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.832339][ T6192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.053063][ T6192] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.167783][ T6192] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.301529][ T6192] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.392859][ T6192] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.694262][ T6192] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.768607][ T6192] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.870302][ T6192] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.960581][ T6192] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.153264][ T6192] bridge_slave_1: left allmulticast mode [ 519.159553][ T6192] bridge_slave_1: left promiscuous mode [ 519.165354][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.191946][ T6192] bridge_slave_0: left allmulticast mode [ 519.198029][ T6192] bridge_slave_0: left promiscuous mode [ 519.218916][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.242030][ T6192] bridge_slave_1: left allmulticast mode [ 519.247734][ T6192] bridge_slave_1: left promiscuous mode [ 519.259170][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.300766][ T6192] bridge_slave_0: left allmulticast mode [ 519.307615][ T6192] bridge_slave_0: left promiscuous mode [ 519.314153][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.911991][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.936838][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.950288][ T6192] bond0 (unregistering): Released all slaves [ 520.429855][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.450491][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.460449][ T6192] bond0 (unregistering): Released all slaves [ 520.482928][ T6192] bond1 (unregistering): Released all slaves [ 521.010934][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.021813][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.039503][ T6192] bond0 (unregistering): Released all slaves