last executing test programs: 25m16.801997355s ago: executing program 32 (id=24): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000043000/0x2000)=nil) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, &(0x7f0000000340)}, 0x101}], 0x3, 0x40000020, 0x0) socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 24m21.029421194s ago: executing program 33 (id=155): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0], 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000043000/0x2000)=nil) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) recvmmsg(r5, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, &(0x7f0000000340)}, 0x101}], 0x3, 0x40000020, 0x0) socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="67ff0f430000", 0x6, 0x8004, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @loopback, 0xe}, 0x1c) shutdown(0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) 24m13.5446053s ago: executing program 34 (id=172): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone(0x40300200, 0x0, 0x0, 0x0, 0x0, 0x0) 23m8.547043974s ago: executing program 35 (id=330): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0x2, 0x4) 22m59.761640842s ago: executing program 36 (id=343): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x6, 0xd6fdf, 0x192dbe}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)="8078545987cde1ec2451df580186236fb618ee5726ad1dc776b70f243c7c6575cc1a53c7438bca292ad5885a19630850276b", 0x32) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r1 = dup(r0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r1, 0xae80, 0x0) 22m52.800655887s ago: executing program 37 (id=356): socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r0, 0x40044591, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x100, 0x3, 0x41}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2400, &(0x7f0000000240)={0x0, 0xbe44, 0x10000, 0xffffffff, 0x2be, 0x0, r1}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x2000000, 0x28, 0x0, 0x0) 22m40.95137878s ago: executing program 38 (id=354): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './control\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x253, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) rmdir(0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 22m33.694136567s ago: executing program 39 (id=362): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) syz_open_dev$vim2m(0x0, 0xff, 0x2) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) write$rfkill(r1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40040, 0x0) landlock_restrict_self(r0, 0x6) landlock_restrict_self(r0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40800, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x5) r3 = syz_open_dev$sndpcmp(0x0, 0xb, 0x181000) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) landlock_restrict_self(r0, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 22m12.23706076s ago: executing program 40 (id=370): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0x7, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100e2) 18m32.390170483s ago: executing program 41 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfce) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r3, 0x0, 0x10) openat$audio1(0xffffffffffffff9c, 0x0, 0x600, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 18m25.423304321s ago: executing program 42 (id=852): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xd79, 0x40840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x3}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x77, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r1, &(0x7f0000000b00)=ANY=[], 0x1e0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 18m19.717311146s ago: executing program 43 (id=861): r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17m41.020761407s ago: executing program 44 (id=874): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) 17m31.956974954s ago: executing program 45 (id=886): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000004c0)={0x6, "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"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) mknod$loop(&(0x7f0000000040)='./bus\x00', 0x200, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 17m24.520500581s ago: executing program 46 (id=894): socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, 0x0, 0x802) 17m13.165986919s ago: executing program 47 (id=902): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000002440)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc63}, 0x1c, &(0x7f00000024c0)=[{&(0x7f0000002480)='|', 0x1}], 0x1}}], 0x1, 0x40848d1) setsockopt(r0, 0x84, 0x11, 0x0, 0x0) 16m44.216740789s ago: executing program 48 (id=913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m34.628989594s ago: executing program 49 (id=925): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @private2, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0xfeff, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffe, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x3, 0x10, 0x4000100000001]}) write$UHID_INPUT(r0, &(0x7f0000000040)={0xfc, {"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", 0x1000}}, 0x1006) 16m26.00576236s ago: executing program 50 (id=938): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000002c0)=0x8, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)=0xe6e5, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) 16m19.526827702s ago: executing program 51 (id=945): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0)=0x8, 0x4) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0xe6e5, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x9, 0x201, 0x2, 0x10000}, 0x10) 16m8.712659064s ago: executing program 52 (id=953): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r0, 0x8905, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = gettid() io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x200, 0x2, r3, 0x0, 0x3, 'syz1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x38}}, 0x20044050) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) 15m39.6651094s ago: executing program 53 (id=958): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 15m23.550221585s ago: executing program 54 (id=974): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffdd, 0x11, 0x0, 0x100000}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19}, 0x94) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x14}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000851}, 0x4008040) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x2b, 0x1, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0]}, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8001, 0x100000001, 0x0, 0x2000000000000}) move_mount(r7, &(0x7f0000000340)='./file0\x00', r8, &(0x7f0000000480)='./file0\x00', 0x104) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000380)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r5, @ANYBLOB="270000003c00000000000000071aa9f1b0687932af9b09c69b022031e28a3335f092acfa242cf7ce3d3ace366d7e69ff447458b7356a45793daef3c64cf54d4c3b5ec47c69fd19e3e95ce76d186e75c0c42791669d23ae730fc1614fbd69fa889b00407df201da831891f2136f741b5b5fd5872e22907fa66635bfd9e09089bb9a28184b", @ANYRES32=r9, @ANYRESDEC=0x0], 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) 15m16.121940957s ago: executing program 55 (id=984): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x62081, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRESHEX=r0], 0x1c}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="12", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1000, 0x30}, &(0x7f0000000200)=0xc) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x800, 0x100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) flistxattr(r2, &(0x7f00000005c0)=""/45, 0x2d) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x4a, 0x6, &(0x7f00000001c0)="99ba00a7504a61422015234472a6dd06c922df098ea59d3a34e59164b56488280af5a015b5a82d8b93d1ba7e5056f5d6c1a7178da6d4cb7e1c1e3e45de1236c3b1d5e18cef67166b1a52"}) 13m10.719410102s ago: executing program 56 (id=1131): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$read(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) r3 = socket$l2tp(0x2, 0x2, 0x73) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000180)={0x60, 0x297201d76f70f74d, &(0x7f0000ffa000/0x4000)=nil, &(0x7f000067c000/0x2000)=nil, 0x1, 0x0, 0x0, 0x4, 0xd6, 0x0, 0x0, 0x15}) connect$inet(r3, 0x0, 0xfffffdb1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0xd8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r9 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000080)={0x34, &(0x7f0000002780)=ANY=[@ANYRESOCT, @ANYBLOB="d26680aabcfe380ec203988588cd10fe2430b37e0275915cf99a3d43fc33ea92888687b1f02f329001b03fe83225ebf0ea5316577c30b8089ce194433391d6f11f895a", @ANYBLOB="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", @ANYBLOB="84a7954c6846f74a16fa4d3c8ab8449486b0f90bf9f0a9178bf91ff524b6611f9345111ce047f929e9eb2c20a6cb7b45934cc28e810ac9877d57b54ba8c1885b4e44f59dcce4b43a3f75714259a4386fe0ddb9e2e0b1934f38a736e8f58b5f2ec1df639a733a3a4e217653d607a8ab05bd885fd9e7e00681f688d78b552dba44c108beb98fa21919cd4a8cae380d38f2cab72fb3b280205509129a029d7396e80f2163143e911fb2d3b9e58e15751dc08605a86ea6e63e65e566cd4d0efb0d3fb6caeef892b3f1a5aa4bd65dd6d3d9608ac6b127d009d27785f91ac9c0eff874f8b8c718473e2fb690313bba46347d1742e03949636f3bf7", @ANYRESOCT=r5, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r10, 0x5b02, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r10, 0x5b15, 0x0) fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) syz_usb_disconnect(r9) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) 13m0.524991848s ago: executing program 57 (id=1143): fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x4) 12m42.464592989s ago: executing program 58 (id=1160): syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x7fffffff, 0xffff8000}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f00000000c0)={0x1, 0x40, 0x6, &(0x7f0000000080)={0x1f, "b30a69283a9587dfa6434e07f695f3984820a74426495306bbced9189f724c0546"}}) 11m2.28862776s ago: executing program 59 (id=1338): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) unshare(0x2c020400) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r4, 0x1) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x939e, 0x1, 0xfffffffe, 0x36}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, 0x0, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) io_setup(0x9, &(0x7f0000002e40)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 7m55.906726719s ago: executing program 3 (id=1893): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 7m54.527075022s ago: executing program 3 (id=1898): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7m52.297391851s ago: executing program 3 (id=1904): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x2, 0x400, 0x1000000000000001}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 7m51.008044229s ago: executing program 3 (id=1907): r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 7m49.774820863s ago: executing program 3 (id=1912): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x2c, r0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54014840}, 0x20000000) 7m48.13601396s ago: executing program 3 (id=1918): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setfsuid(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 7m32.801164361s ago: executing program 60 (id=1918): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setfsuid(0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m40.245851892s ago: executing program 5 (id=2440): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) close(0x3) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x78) 4m39.086463534s ago: executing program 5 (id=2444): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) socket(0x2a, 0x2, 0x0) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 4m38.064508667s ago: executing program 5 (id=2447): socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000001580)=[{0x0}], 0x1, 0x20000036, 0x0) 4m35.975749003s ago: executing program 5 (id=2448): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4m31.349152163s ago: executing program 5 (id=2455): socket$inet6_udp(0xa, 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) read$dsp(r2, &(0x7f0000001380)=""/229, 0xe5) 4m29.703999829s ago: executing program 5 (id=2458): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0xc, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}}) write$apparmor_current(r2, &(0x7f00000001c0)=@profile={'permprofile ', ':\':\x02'}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c60ca002d0a0000030000000c000200160000001700000014000300766c61"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 4m14.070043897s ago: executing program 61 (id=2458): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0xc, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)={0x8, 'vlan1\x00', {'ip6_vti0\x00'}}) write$apparmor_current(r2, &(0x7f00000001c0)=@profile={'permprofile ', ':\':\x02'}, 0x10) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="08910400000000003400128009000100766c616e000000002400028004000480100003800c60ca002d0a0000030000000c000200160000001700000014000300766c61"], 0x68}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0xed, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x3, 0xed}}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m1.301560068s ago: executing program 9 (id=2823): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x444, &(0x7f0000001300)={[{0xd2, 0x4e00, "991ec3dcb699e55011380fc68f34d48c5ea28222706a0be65a31a52748d735992b0ce3c6cb53eb6dee49c9044cd56d4a9040d66d38c8dd2f66726f714f7ca1d4f2ceae4d6dfebbee9242d3a30b6924e49ba52db90f0fd47d01212492cbe48c2f24766f1681aa233977916a3f6fe989b13bbd08f772a7d30b7a0571ebb74011c507d1fb2ed91ed3c03297c90692522dc1ce89788c2ad0f1928413c30de06a6597476e2805d6e4e0a0768cef11e753c03cd810e1d3e5bde7fdafd5fb5c572b99e55d286e3137d8e0d207529669ea2272958040"}, {0xc9, 0x4e00, "6a45e24062347008bb7842ccf6649a9ad149e7bd5b47d11fdde4856165aca84489340b9d0e4398098bd8343a4f925d8f52ee284304d58fabc50fa00d4c36942be2520f879aa5bfbf7eaa32df64e87b21342e85c891fceb5ba341af2d0c91186e65e36d48880e039d1d3ef5743b6681e3c0558b15a7115c265b082e03d1841f7f18b1af18f139e553735ea93c40e0c749da72b2869eccbc96d3b699c6daee8179c7d128e5b80aa7a3b16ee14014cc35a2fb02258b0e6dcd5cee762495e4ac74c1487eec85a7676ab1da"}, {0x295, 0x4e00, "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"}]}) 1m57.562712314s ago: executing program 9 (id=2832): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x20000006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x46, 0x0, 0x78}, 0x9c) 1m56.869251782s ago: executing program 9 (id=2835): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000380)="070034c9f659df37e9af", 0xa, 0x20008845, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x7}, 0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x102, 0x4) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 1m56.230721014s ago: executing program 9 (id=2836): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) connect$can_j1939(r0, &(0x7f0000000300)={0x1d, r1, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) sendmsg$sock(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5e57b113923a5f64a456837a9ed4bbe96aaea9445c1b6263c66b448f0061b2ee3c11e6001e4a49196fc667cfd55cc7b63bf00f74c1f51199abf2e78c60873e23cb0f2d8c723ac41bd0d1603decf7eb49f918e8d1d4e30313d2b9580a2a3ea250f477c90a71bab0fe95c256ce916782844506f05671581aa0a6afe7fc09cec6f85c7c17b5d80feaa0ab7d87bd9713a49df2721fa38ac5b8970fed772418254ea49f40f24e693a2d8c", 0xa8}, {&(0x7f0000000180)="4b95911e38fd152f32b6c594b92150c592346859263e2c062118e913db48b0c3e524e4f9d08fce64d683430960f0235ee49c914436709c2c2725ae3a002be596901898520f3c9f34a2fabc04450b9040005c16db45f882be7612", 0x5a}, {&(0x7f0000000b40)="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", 0xcf1}], 0x3}, 0x40040) 1m55.419009754s ago: executing program 9 (id=2839): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) creat(0x0, 0x142) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 1m53.627711381s ago: executing program 9 (id=2844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0x40000401}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x4102}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff01, 0x0) 1m49.384674722s ago: executing program 1 (id=2850): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m44.41281942s ago: executing program 1 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) 1m42.282984175s ago: executing program 6 (id=2864): syz_open_dev$usbfs(&(0x7f0000000000), 0x7, 0x517300) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0xf1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$FUSE_INIT(r1, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x2b) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000240), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000000040)={0x1, 0x200, 0x9, 0x8, 0x400, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)=ANY=[]) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 1m41.788450979s ago: executing program 1 (id=2866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8102}, {{0x0, 0x0, 0x0}, 0x10006}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000380)=""/238, 0xee}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000600)=""/91, 0x5b}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 1m39.130882047s ago: executing program 1 (id=2868): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 1m38.547746675s ago: executing program 6 (id=2869): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 1m38.272608121s ago: executing program 62 (id=2844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0x40000401}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x4102}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff01, 0x0) 1m37.078233682s ago: executing program 6 (id=2871): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000380)={0x0, 0x7737, 0x80, 0x4, 0x34f}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m36.921167198s ago: executing program 1 (id=2872): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) 1m33.693941835s ago: executing program 6 (id=2873): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) creat(0x0, 0x142) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 1m33.224801119s ago: executing program 1 (id=2875): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x12ce, 0x3}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x48, 0x0, 0x0, @local, @local, {[@srh={0x64, 0x8, 0x4, 0x4, 0x3, 0x18, 0x9, [@rand_addr=' \x01\x00', @private2, @rand_addr=' \x01\x00', @local]}]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf2508000100010000000800010002000000080001000200"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [], {0x10, 0x5}}, 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) 1m31.019452734s ago: executing program 6 (id=2876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f0000000600)={0x18, 0x0, 0x2, 0x0, 0x0, 0x401}) prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xbfd1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) close(0xffffffffffffffff) futimesat(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) dup(0xffffffffffffffff) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) r5 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket(0x10, 0x803, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000040), 0x12) r9 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, 0x0, 0x0) 1m28.361355321s ago: executing program 6 (id=2879): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x7, 0x3, 0x8}) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1m17.841977808s ago: executing program 63 (id=2875): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x12ce, 0x3}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x48, 0x0, 0x0, @local, @local, {[@srh={0x64, 0x8, 0x4, 0x4, 0x3, 0x18, 0x9, [@rand_addr=' \x01\x00', @private2, @rand_addr=' \x01\x00', @local]}]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf2508000100010000000800010002000000080001000200"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) request_key(&(0x7f0000001240)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000001280)='/dev/vsock\x00/(zu\xaa\xa9\x9c\x11\xcb!i\x80\xeds/\xaa#\xd8^\xf2B\xf6\x81\x02\xae\xed\xcc\xd0\x80\x8eCA\xdd`\xcco$G\xf6f\xa7\xe2\xc2e\xf0&\x81\x9f)\'\x87Ro|\x0e,\x85\xe9\xa5\x93\xd7\xbb\x0fe?G\xeb\xd6\x0e/,\xec\xb1\xaf\xaeIZAk\xb3\xfcm\x12\xcb\x97,\xd2\xda\x19~\xbaAEV\xde\x15\x02\x0fA\xe3p\xe9\x96\xc3\x1f\x8e\xa7\xadi\x00\xf7\x05\xb4.f\b\x9f\xe1\f\x7f\x16!\xda\xfd\xb4\xbf\x88\x9dl\xda\xe8\xb1=\xceS\x85\xedVq2\"\x89\xd3\x8f\xbb\x1dP\xf2\x8f\xfb\xdfz2\x16\"\xfa\x1aX\x13\xb9\x94\x99\xa1T#`\xff61b\xbew\x17\xb3\x95z\xaey\xe9?n\xc3\xf7\xde\xbf\xb8\\D\xf4\xc8\xc6e\xc9\xbb\x1a>P\xf2\x10\xbf\x01\xc4\xca\xe2\xe3\x8a\xca!\x1e2\x03N\xe0\xb9OD\xd6\xbf\x02_|i/\x8a\x90\x155\x8e\xd9\xf4\x1e\aS-\x14\v\x05\xee\x83l.D\x03h\xbc@\xe0\xae\xa1zK\xc8\xd0\xbb\x89\xf1my*\x12\xb5\xbbE\x14\xd3', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r5, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [], {0x10, 0x5}}, 0x2c, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) 1m12.983716577s ago: executing program 64 (id=2879): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x7, 0x3, 0x8}) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 21.333009561s ago: executing program 4 (id=2938): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 17.841958768s ago: executing program 2 (id=2944): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 16.175411542s ago: executing program 8 (id=2950): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000500)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x4}, 0x5, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xb}) mremap(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f000088c000/0x4000)=nil) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000001c0)=@md0, 0x0, &(0x7f0000000200)={0x2, 0x1, 0x600, 0x10001, 0x686, 0x2, 0x100, 0x7, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB="04000000000000000300"/20, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000004000000ffffffff0000c826000e0200", @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000c58523532e4b9db9bc79", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000000000000400"/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x15243525538eff65) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) 16.001395766s ago: executing program 4 (id=2951): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) creat(0x0, 0x142) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 15.532346324s ago: executing program 7 (id=2952): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 14.996935059s ago: executing program 2 (id=2953): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000280)=@overlay={0x0, 0xc, 0x4, 0x0, 0x3, {}, {0x4, 0xc, 0x8, 0x4, 0x0, 0x3, "0bb9cf90"}, 0xffffffff, 0x3, {}, 0x4}) 14.419370928s ago: executing program 7 (id=2954): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x1, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r7, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, 0x0, 0x29, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xeef5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5785}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket(0x21, 0x2, 0x0) connect$vsock_stream(r9, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r1, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0xe}}}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r11 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r11, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) 11.944015431s ago: executing program 2 (id=2957): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800800010067747000140002800800030001000000"], 0x40}}, 0x20000000) 10.860087691s ago: executing program 4 (id=2958): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x3, 0x0, &(0x7f0000000340)="b80000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f00000000c0), 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000040)=[0xffffff7f], &(0x7f0000000680)=[r4, r4], &(0x7f0000000340)}) 9.75727985s ago: executing program 2 (id=2959): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) socket$unix(0x1, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0) 9.493727326s ago: executing program 0 (id=2960): mount$fuse(0x0, 0x0, 0x0, 0xa02002, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bind$l2tp(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast2, 0x4}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 8.874333133s ago: executing program 0 (id=2961): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8.516496679s ago: executing program 8 (id=2962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_SRC={0x4}]}, 0x18}}, 0x0) 7.53437597s ago: executing program 8 (id=2963): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)}]) 7.191342946s ago: executing program 4 (id=2964): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 7.013901341s ago: executing program 2 (id=2965): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0014000000000000280012800a0001007678", @ANYRES32=0x0, @ANYBLOB="004100002000010008001c00", @ANYRES32=r2], 0x50}}, 0x0) 6.274268674s ago: executing program 8 (id=2966): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003100), 0x40041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000003140)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x38fe, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r6 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x4000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.936103675s ago: executing program 0 (id=2967): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 4.514180229s ago: executing program 7 (id=2968): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) creat(0x0, 0x142) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r2) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 3.93884158s ago: executing program 4 (id=2969): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) close(0x3) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) sendmmsg$inet(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x78) 3.696679385s ago: executing program 0 (id=2970): syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 3.334203584s ago: executing program 8 (id=2971): syz_usb_connect(0x5, 0x84, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x72, 0x88, 0xde, 0x8, 0xbb4, 0xa89, 0x26be, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x2, 0xa2, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x1, 0x4, 0x3, 0x18, 0x99, 0xcc, 0x5d, [@uac_control={{0xa, 0x24, 0x1, 0xa, 0x6}, [@extension_unit={0xc, 0x24, 0x8, 0x5, 0x6, 0x7, "0d0a329ce2"}]}], [{{0x9, 0x5, 0x86, 0x10, 0x400, 0xf4, 0x8, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x3, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x10, 0x6000}]}}, {{0x9, 0x5, 0x9, 0x1b, 0x8, 0xc, 0x27, 0x80}}]}}, {{0x9, 0x4, 0x2e, 0x1, 0x3, 0xa5, 0xc2, 0xc, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4, [@generic={0x5, 0x5, "a6c641"}]}}]}}]}}]}}, 0x0) 2.946173366s ago: executing program 7 (id=2972): r0 = eventfd(0x0) write$eventfd(r0, &(0x7f0000000340)=0x4, 0x8) 1.832462136s ago: executing program 7 (id=2973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_NAT_SRC={0x4}]}, 0x18}}, 0x0) 1.012953089s ago: executing program 4 (id=2974): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x3, 0x0, &(0x7f0000000340)="b80000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000300)=[0x0, 0x0], &(0x7f00000000c0), 0x2, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000240)=[r2], &(0x7f0000000040)=[0xffffff7f], &(0x7f0000000680)=[r5, r5], &(0x7f0000000340)}) 883.211129ms ago: executing program 0 (id=2975): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r1, &(0x7f0000000480)=""/177, 0xb1, 0xe0) 834.637213ms ago: executing program 2 (id=2976): r0 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x29, 0x6, 0xfc, 0x0, 0x2, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0x6}}) 620.678186ms ago: executing program 7 (id=2977): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e0009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x0, 0xb, 0x2, "f441"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 173.455101ms ago: executing program 0 (id=2978): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 8 (id=2979): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) kernel console output (not intermixed with test programs): SerialNumber: syz [ 1531.715763][T13771] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1531.725053][T13771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.733721][T13771] usb 5-1: Product: syz [ 1531.738166][T13771] usb 5-1: Manufacturer: syz [ 1531.742945][T13771] usb 5-1: SerialNumber: syz [ 1531.790637][ T5898] usb 10-1: config 0 descriptor?? [ 1531.855733][T13771] usb 5-1: config 0 descriptor?? [ 1532.097897][T17062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.108263][T17062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.322220][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'. [ 1532.326369][ T5898] dvb_usb_dtv5100 10-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1532.332991][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2536'. [ 1532.512611][ T5898] usb 10-1: USB disconnect, device number 99 [ 1532.679292][T13771] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1532.863372][T13771] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1532.962698][T13771] usb 5-1: USB disconnect, device number 35 [ 1533.515786][T13771] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1533.646543][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2542'. [ 1533.762841][T13771] usb 7-1: Using ep0 maxpacket: 8 [ 1533.817364][T13771] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1533.828812][T13771] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1533.838442][T13771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.942488][T13771] usb 7-1: config 0 descriptor?? [ 1534.222852][T13771] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1534.656099][T13771] usb 7-1: USB disconnect, device number 52 [ 1535.458086][ T5866] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1535.655871][T10081] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1535.675692][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1535.714565][ T5866] usb 3-1: config index 0 descriptor too short (expected 1810, got 18) [ 1535.723625][ T5866] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 1535.733145][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.845706][T10081] usb 10-1: Using ep0 maxpacket: 32 [ 1535.876418][ T5866] usb 3-1: config 0 descriptor?? [ 1535.909936][T10081] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1535.922061][T10081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1535.932246][ T5866] gspca_main: etoms-2.14.0 probing 102c:6151 [ 1535.934197][T10081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1535.949461][T10081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1535.961783][T10081] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1536.327545][T10081] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1536.338066][T10081] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.347087][T10081] usb 10-1: Product: syz [ 1536.351541][T10081] usb 10-1: Manufacturer: syz [ 1536.356659][T10081] usb 10-1: SerialNumber: syz [ 1536.540543][T10081] usb 10-1: config 0 descriptor?? [ 1536.855581][T10081] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1536.917615][T10081] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1536.959636][ T5866] usb 3-1: USB disconnect, device number 72 [ 1537.103281][T10446] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1537.153546][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.257964][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.307753][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.364862][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.415489][T10446] usb 7-1: Using ep0 maxpacket: 16 [ 1537.416145][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.514592][T10446] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1537.523481][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.524993][T10446] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.538656][T10446] usb 7-1: Product: syz [ 1537.543001][T10446] usb 7-1: Manufacturer: syz [ 1537.547977][T10446] usb 7-1: SerialNumber: syz [ 1537.620920][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.666030][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.716693][ T3940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.724691][ T3940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.798466][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.838611][T10446] usb 7-1: config 0 descriptor?? [ 1537.844778][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.867961][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.886904][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.898553][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.909345][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.939187][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.963213][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.971785][T10081] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1537.978441][T10081] input input14: Timeout waiting for response from device. [ 1538.067977][T16625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.077196][T16625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.086309][ T5866] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1538.167752][T10081] usb 10-1: USB disconnect, device number 100 [ 1538.434593][T10446] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1538.474585][ T5866] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1538.484134][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.493640][ T5866] usb 3-1: Product: syz [ 1538.498798][ T5866] usb 3-1: Manufacturer: syz [ 1538.503567][ T5866] usb 3-1: SerialNumber: syz [ 1538.597330][T10446] usb 7-1: USB disconnect, device number 53 [ 1538.649791][ T5866] usb 3-1: config 0 descriptor?? [ 1538.972295][T17130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1538.983529][T17130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.158769][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1539.168441][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1539.357251][ T5866] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1539.424908][ T5866] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1539.491342][ T5866] usb 3-1: USB disconnect, device number 73 [ 1540.599887][T10081] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1540.832502][T10081] usb 2-1: Using ep0 maxpacket: 8 [ 1540.909535][T10081] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1540.921276][T10081] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1540.930659][T10081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.059024][T10081] usb 2-1: config 0 descriptor?? [ 1541.629334][T10081] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1541.835612][ T5866] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1542.106148][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 1542.160050][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1542.172185][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1542.183674][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1542.193841][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1542.212837][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1542.495589][ T5866] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1542.505677][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.521119][ T5866] usb 5-1: Product: syz [ 1542.527957][ T5866] usb 5-1: Manufacturer: syz [ 1542.532757][ T5866] usb 5-1: SerialNumber: syz [ 1542.677901][ T5866] usb 5-1: config 0 descriptor?? [ 1542.970260][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1542.994439][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1543.213243][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.267088][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.284279][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.348449][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.387585][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.440400][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.474323][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.509563][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.558606][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.611413][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.633601][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.678625][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.702439][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.725631][T10446] usb 2-1: USB disconnect, device number 36 [ 1543.778730][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.867153][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.917412][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.990451][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1543.996993][ T5866] input input15: Timeout waiting for response from device. [ 1544.103707][ T5866] usb 5-1: USB disconnect, device number 36 [ 1544.136258][T13785] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1544.333020][T17195] loop2: detected capacity change from 0 to 7 [ 1544.362290][T13785] usb 7-1: Using ep0 maxpacket: 16 [ 1544.419325][T17195] Dev loop2: unable to read RDB block 7 [ 1544.425929][T17195] loop2: unable to read partition table [ 1544.471630][T17195] loop2: partition table beyond EOD, truncated [ 1544.478189][T17195] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1544.515916][T13785] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1544.526632][T13785] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.534847][T13785] usb 7-1: Product: syz [ 1544.539362][T13785] usb 7-1: Manufacturer: syz [ 1544.544140][T13785] usb 7-1: SerialNumber: syz [ 1544.698225][T13785] usb 7-1: config 0 descriptor?? [ 1545.202592][T13785] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1545.315762][T13785] usb 7-1: USB disconnect, device number 54 [ 1545.556892][T10081] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1545.803488][T10081] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1545.813690][T10081] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.822562][T10081] usb 10-1: Product: syz [ 1545.827143][T10081] usb 10-1: Manufacturer: syz [ 1545.832000][T10081] usb 10-1: SerialNumber: syz [ 1546.020365][T10081] usb 10-1: config 0 descriptor?? [ 1546.331373][T17202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1546.341587][T17202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1546.519133][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2571'. [ 1546.528526][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2571'. [ 1546.726945][T10081] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1546.840109][T10081] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1546.874978][T17215] team_slave_0: entered promiscuous mode [ 1546.881102][T17215] team_slave_1: entered promiscuous mode [ 1546.888090][T17215] vlan2: entered promiscuous mode [ 1546.893359][T17215] team0: entered promiscuous mode [ 1546.959762][T10081] usb 10-1: USB disconnect, device number 101 [ 1547.910629][T17225] fuse: Unknown parameter 'group_i00000000000000000000' [ 1548.236373][T13785] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1548.355654][T10081] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1548.445810][T13785] usb 10-1: Using ep0 maxpacket: 8 [ 1548.497315][T13785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1548.508899][T13785] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1548.518377][T13785] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.582209][T17232] fuse: Bad value for 'fd' [ 1548.645599][T10081] usb 7-1: Using ep0 maxpacket: 32 [ 1548.645989][T13785] usb 10-1: config 0 descriptor?? [ 1548.729563][T10081] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1548.741629][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1548.753877][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1548.764799][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1548.776691][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1548.911929][T13785] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1549.085938][T10081] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1549.095517][T10081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.103727][T10081] usb 7-1: Product: syz [ 1549.108361][T10081] usb 7-1: Manufacturer: syz [ 1549.113151][T10081] usb 7-1: SerialNumber: syz [ 1549.128203][T10081] usb 7-1: config 0 descriptor?? [ 1549.138897][T17235] loop2: detected capacity change from 0 to 7 [ 1549.237212][T17235] Dev loop2: unable to read RDB block 7 [ 1549.243245][T17235] loop2: unable to read partition table [ 1549.321002][T17235] loop2: partition table beyond EOD, truncated [ 1549.330420][T17235] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1549.447554][T10081] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1549.477599][T10081] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1549.698637][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1549.747194][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1549.785625][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1549.849146][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1549.892925][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1549.946151][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1549.972435][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.022551][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.096560][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.127137][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.158813][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.216878][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.238648][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.264500][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.313285][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.346173][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.361521][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1550.368346][T10081] input input16: Timeout waiting for response from device. [ 1550.416999][T10081] usb 7-1: USB disconnect, device number 55 [ 1550.490206][T11263] udevd[11263]: setting owner of /dev/bus/usb/007/055 to uid=0, gid=0 failed: No such file or directory [ 1551.065632][T10081] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1551.266043][T10081] usb 7-1: Using ep0 maxpacket: 16 [ 1551.305917][T13771] usb 10-1: USB disconnect, device number 102 [ 1551.408343][T10081] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1551.418684][T10081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.427212][T10081] usb 7-1: Product: syz [ 1551.431468][T10081] usb 7-1: Manufacturer: syz [ 1551.436488][T10081] usb 7-1: SerialNumber: syz [ 1551.627565][T10081] usb 7-1: config 0 descriptor?? [ 1552.163734][T10081] dvb_usb_dtv5100 7-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1552.246598][T10081] usb 7-1: USB disconnect, device number 56 [ 1552.436858][ T5898] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1552.709272][ T5898] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1552.719194][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.727648][ T5898] usb 2-1: Product: syz [ 1552.732006][ T5898] usb 2-1: Manufacturer: syz [ 1552.736917][ T5898] usb 2-1: SerialNumber: syz [ 1552.746461][T17262] netlink: 72 bytes leftover after parsing attributes in process `syz.9.2590'. [ 1552.878197][ T5898] usb 2-1: config 0 descriptor?? [ 1552.893413][T17265] fuse: Unknown parameter 'group_i00000000000000000000' [ 1553.137288][T17258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1553.147476][T17258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1553.235734][T13785] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1553.291840][T17258] netlink: 'syz.1.2589': attribute type 17 has an invalid length. [ 1553.300025][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 1553.309467][T17258] veth1: entered promiscuous mode [ 1553.314676][T17258] veth1: entered allmulticast mode [ 1553.475680][T13785] usb 10-1: Using ep0 maxpacket: 32 [ 1553.548755][T13785] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1553.596998][ T5898] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1553.627378][T13785] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1553.636919][T13785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.645373][T13785] usb 10-1: Product: syz [ 1553.649813][T13785] usb 10-1: Manufacturer: syz [ 1553.654688][T13785] usb 10-1: SerialNumber: syz [ 1553.663029][ T5898] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1553.771075][ T5898] usb 2-1: USB disconnect, device number 37 [ 1553.807101][T10081] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1553.847980][T17273] loop2: detected capacity change from 0 to 7 [ 1553.858972][T13785] usb 10-1: config 0 descriptor?? [ 1553.888199][T17273] Dev loop2: unable to read RDB block 7 [ 1553.894446][T17273] loop2: unable to read partition table [ 1553.912673][T17273] loop2: partition table beyond EOD, truncated [ 1553.919714][T17273] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1553.988457][T10081] usb 7-1: Using ep0 maxpacket: 8 [ 1554.023906][T10081] usb 7-1: config 162 has an invalid interface number: 46 but max is 1 [ 1554.032871][T10081] usb 7-1: config 162 has no interface number 0 [ 1554.040178][T10081] usb 7-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1554.053764][T10081] usb 7-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1554.064950][T10081] usb 7-1: config 162 interface 46 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1554.077335][T10081] usb 7-1: config 162 interface 46 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1554.090183][T10081] usb 7-1: config 162 interface 46 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1554.101243][T10081] usb 7-1: config 162 interface 46 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1554.114805][T10081] usb 7-1: config 162 interface 1 has no altsetting 0 [ 1554.122057][T10081] usb 7-1: config 162 interface 46 has no altsetting 0 [ 1554.193038][T13785] gs_usb 10-1:0.0: Couldn't send data format (err=-71) [ 1554.200305][T13785] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71 [ 1554.351012][T10081] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 1554.361420][T10081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.369922][T10081] usb 7-1: Product: syz [ 1554.374259][T10081] usb 7-1: Manufacturer: syz [ 1554.379184][T10081] usb 7-1: SerialNumber: syz [ 1554.429302][T13785] usb 10-1: USB disconnect, device number 103 [ 1554.556075][ T5898] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1554.740495][T10081] ipaq 7-1:162.46: PocketPC PDA converter detected [ 1554.749738][T10081] usb 7-1: active config #162 != 1 ?? [ 1554.796513][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 1554.850125][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1554.862270][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1554.873600][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1554.883839][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1554.895350][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1554.937462][T10081] usb 7-1: USB disconnect, device number 57 [ 1555.141478][ T5898] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1555.151899][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.160467][ T5898] usb 3-1: Product: syz [ 1555.164811][ T5898] usb 3-1: Manufacturer: syz [ 1555.169916][ T5898] usb 3-1: SerialNumber: syz [ 1555.341828][ T5898] usb 3-1: config 0 descriptor?? [ 1555.834409][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1555.851241][T13785] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1556.070315][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.096183][T13785] usb 10-1: Using ep0 maxpacket: 8 [ 1556.124484][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.166200][T13785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1556.178106][T13785] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1556.187650][T13785] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.190340][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.231257][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.270342][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.323634][T13785] usb 10-1: config 0 descriptor?? [ 1556.325997][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.388440][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.420199][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.486558][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.506346][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.568580][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.623830][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.649938][T13785] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1556.697054][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.756245][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.796973][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.841320][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.875798][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1556.882118][ T5898] input input17: Timeout waiting for response from device. [ 1557.031525][ T5898] usb 3-1: USB disconnect, device number 74 [ 1557.281369][T17305] fuse: Unknown parameter 'group_i00000000000000000000' [ 1557.945967][T13785] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1558.191995][T13785] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1558.201759][T13785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.210176][T13785] usb 5-1: Product: syz [ 1558.214533][T13785] usb 5-1: Manufacturer: syz [ 1558.219445][T13785] usb 5-1: SerialNumber: syz [ 1558.333837][T13785] usb 5-1: config 0 descriptor?? [ 1558.673136][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.683307][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.848435][T17307] netlink: 'syz.4.2606': attribute type 17 has an invalid length. [ 1558.856654][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2606'. [ 1559.032508][T13785] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1559.069179][ T5866] usb 10-1: USB disconnect, device number 104 [ 1559.160642][T13785] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1559.254306][T13785] usb 5-1: USB disconnect, device number 37 [ 1560.135678][T13785] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1560.365453][T13785] usb 2-1: Using ep0 maxpacket: 16 [ 1560.382217][T13785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.393735][T13785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.406661][T13785] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1560.422874][T13785] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1560.439336][T13785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.484604][T13785] usb 2-1: config 0 descriptor?? [ 1560.613743][ T5866] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1560.807000][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 1560.861273][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1560.873521][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1560.884965][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1560.895385][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1560.906845][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1560.981608][T17326] fuse: Bad value for 'fd' [ 1561.155080][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.165777][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.276981][ T5866] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1561.286760][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.295097][ T5866] usb 5-1: Product: syz [ 1561.299762][T17341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.299845][ T5866] usb 5-1: Manufacturer: syz [ 1561.299948][ T5866] usb 5-1: SerialNumber: syz [ 1561.310081][T17341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.488419][ T5866] usb 5-1: config 0 descriptor?? [ 1562.026315][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1562.265711][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.309758][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.325653][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.388629][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.416119][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.440614][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.464600][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.545841][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.589139][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.646109][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.697657][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.743187][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.776315][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.824210][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.854304][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.905867][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.944167][ T5866] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1562.950844][ T5866] input input18: Timeout waiting for response from device. [ 1562.985605][ T5898] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1563.087606][ T5866] usb 5-1: USB disconnect, device number 38 [ 1563.215849][ T5898] usb 10-1: Using ep0 maxpacket: 8 [ 1563.300315][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1563.311838][ T5898] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1563.321601][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.511417][T13785] usbhid 2-1:0.0: can't add hid device: -71 [ 1563.519253][T13785] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1563.548493][ T5898] usb 10-1: config 0 descriptor?? [ 1563.636596][T13785] usb 2-1: USB disconnect, device number 38 [ 1563.879211][ T5898] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1564.191605][T10081] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1564.434433][T10081] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1564.444173][T10081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.452644][T10081] usb 5-1: Product: syz [ 1564.457149][T10081] usb 5-1: Manufacturer: syz [ 1564.461930][T10081] usb 5-1: SerialNumber: syz [ 1564.538644][T10081] usb 5-1: config 0 descriptor?? [ 1564.834931][T17361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.846670][T17361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1565.089137][T17361] netlink: 'syz.4.2624': attribute type 17 has an invalid length. [ 1565.098577][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'. [ 1565.217036][ T5898] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1565.294639][T10081] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1565.339366][T10081] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1565.389629][T10081] usb 5-1: USB disconnect, device number 39 [ 1565.467111][ T5898] usb 7-1: config 0 has no interfaces? [ 1565.516235][ T5898] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1565.525878][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.534085][ T5898] usb 7-1: Product: syz [ 1565.538762][ T5898] usb 7-1: Manufacturer: syz [ 1565.543546][ T5898] usb 7-1: SerialNumber: syz [ 1565.630621][ T5898] usb 7-1: config 0 descriptor?? [ 1565.941677][T17374] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2628'. [ 1566.019863][ T5866] usb 10-1: USB disconnect, device number 105 [ 1566.127445][ T5898] usb 7-1: USB disconnect, device number 58 [ 1566.607964][T10081] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1566.936277][T10081] usb 5-1: Using ep0 maxpacket: 32 [ 1567.017415][T10081] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1567.029489][T10081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1567.040860][T10081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1567.051376][T10081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1567.062865][T10081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1567.324495][T10081] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1567.334660][T10081] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.343254][T10081] usb 5-1: Product: syz [ 1567.347864][T10081] usb 5-1: Manufacturer: syz [ 1567.352648][T10081] usb 5-1: SerialNumber: syz [ 1567.588598][T10081] usb 5-1: config 0 descriptor?? [ 1568.109070][T10081] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 1568.115661][T17407] loop2: detected capacity change from 0 to 7 [ 1568.151215][T17407] Dev loop2: unable to read RDB block 7 [ 1568.157307][T17407] loop2: AHDI p1 p2 p3 [ 1568.161767][T17407] loop2: partition table partially beyond EOD, truncated [ 1568.170348][T17407] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1568.177495][T17407] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1568.339612][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.369366][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.405344][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.451767][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.493508][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.561267][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.591119][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.616021][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.646008][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.661388][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.732559][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.790382][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.831986][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.888272][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.913462][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1568.946362][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1569.000335][T10081] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1569.006950][T10081] input input19: Timeout waiting for response from device. [ 1569.021548][ T5866] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1569.114219][T10081] usb 5-1: USB disconnect, device number 40 [ 1569.295401][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 1569.362769][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1569.374423][ T5866] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1569.384764][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.525622][ T5866] usb 3-1: config 0 descriptor?? [ 1569.551806][T13785] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1569.786212][ T5866] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1569.869191][T13785] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1569.878669][T13785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.888453][T13785] usb 2-1: Product: syz [ 1569.892818][T13785] usb 2-1: Manufacturer: syz [ 1569.897649][T13785] usb 2-1: SerialNumber: syz [ 1569.932496][T13785] usb 2-1: config 0 descriptor?? [ 1570.252195][T17421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1570.269377][T17421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1570.417427][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'. [ 1570.427787][T17421] vlan1: entered promiscuous mode [ 1570.433747][T17421] vlan1: entered allmulticast mode [ 1570.439312][T17421] veth0_vlan: entered allmulticast mode [ 1570.655684][T13785] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1570.782008][T13785] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1570.803395][T13785] usb 2-1: USB disconnect, device number 39 [ 1571.156523][ T5866] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1571.373161][ T5866] usb 7-1: config 0 has no interfaces? [ 1571.427281][ T5866] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1571.437066][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.445764][ T5866] usb 7-1: Product: syz [ 1571.450122][ T5866] usb 7-1: Manufacturer: syz [ 1571.454891][ T5866] usb 7-1: SerialNumber: syz [ 1571.650451][ T5866] usb 7-1: config 0 descriptor?? [ 1571.833009][ T5866] usb 3-1: USB disconnect, device number 75 [ 1571.880110][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2649'. [ 1572.018698][T13785] usb 7-1: USB disconnect, device number 59 [ 1572.960672][T17451] loop2: detected capacity change from 0 to 7 [ 1573.077895][T17451] Dev loop2: unable to read RDB block 7 [ 1573.083826][T17451] loop2: AHDI p1 p2 p3 [ 1573.088546][T17451] loop2: partition table partially beyond EOD, truncated [ 1573.097519][T17451] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1573.104529][T17451] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1573.678915][T10081] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1573.896609][T10081] usb 7-1: Using ep0 maxpacket: 32 [ 1573.968463][T10081] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1573.980320][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1573.991638][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1574.001602][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1574.012967][T10081] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1574.372809][T10081] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1574.382335][T10081] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.390636][T10081] usb 7-1: Product: syz [ 1574.394908][T10081] usb 7-1: Manufacturer: syz [ 1574.399692][T10081] usb 7-1: SerialNumber: syz [ 1574.493268][T10081] usb 7-1: config 0 descriptor?? [ 1574.961455][T10081] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1574.968065][T10081] input input20: Device does not respond to id packet M [ 1575.025612][T10081] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1575.031939][T10081] input input20: Device does not respond to id packet P [ 1575.096003][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1575.102327][T10081] input input20: Device does not respond to id packet B [ 1575.165411][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1575.171856][T10081] input input20: Device does not respond to id packet N [ 1575.296200][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1575.341821][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1575.406180][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1575.416416][T10081] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1575.427400][T10081] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20 [ 1575.477702][T13785] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1575.665553][ T5898] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1575.670088][T13785] usb 3-1: Using ep0 maxpacket: 8 [ 1575.765714][T10081] usb 7-1: USB disconnect, device number 60 [ 1575.776063][T13785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1575.797766][T13785] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1575.809244][T13785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.959127][T13785] usb 3-1: config 0 descriptor?? [ 1576.026437][ T5898] usb 10-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1576.037297][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.046232][ T5898] usb 10-1: Product: syz [ 1576.050670][ T5898] usb 10-1: Manufacturer: syz [ 1576.056014][ T5898] usb 10-1: SerialNumber: syz [ 1576.263503][T13785] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1576.268640][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.280881][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.362747][ T5898] usb 10-1: config 0 descriptor?? [ 1576.676245][T17475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1576.686923][T17475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1576.838272][T17473] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2662'. [ 1576.967136][ T5898] cx82310_eth 10-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1577.062471][ T5898] cxacru 10-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1577.184300][ T5898] usb 10-1: USB disconnect, device number 106 [ 1577.718967][T17490] batadv0: entered promiscuous mode [ 1577.728945][T17490] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1578.569367][T13785] usb 3-1: USB disconnect, device number 76 [ 1578.699464][T17496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2670'. [ 1578.755479][ T5898] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1579.015721][ T5898] usb 10-1: Using ep0 maxpacket: 8 [ 1579.111581][ T5898] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1579.238080][ T5898] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1579.247779][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.256232][ T5898] usb 10-1: Product: syz [ 1579.260569][ T5898] usb 10-1: Manufacturer: syz [ 1579.265413][ T5898] usb 10-1: SerialNumber: syz [ 1579.452618][ T5898] usbtest 10-1:1.0: couldn't get endpoints, -22 [ 1579.459790][ T5898] usbtest 10-1:1.0: probe with driver usbtest failed with error -22 [ 1580.007763][T13785] usb 10-1: USB disconnect, device number 107 [ 1580.986041][ T5898] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1581.246689][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 1581.385660][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1581.397624][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1581.409063][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1581.420445][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1581.432166][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1581.708521][ T5898] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1581.718929][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.728522][ T5898] usb 7-1: Product: syz [ 1581.732863][ T5898] usb 7-1: Manufacturer: syz [ 1581.738136][ T5898] usb 7-1: SerialNumber: syz [ 1581.874465][ T5898] usb 7-1: config 0 descriptor?? [ 1582.322202][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1582.328647][ T5898] input input21: Device does not respond to id packet M [ 1582.383734][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1582.390532][ T5898] input input21: Device does not respond to id packet P [ 1582.402156][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1582.409251][ T5898] input input21: Device does not respond to id packet B [ 1582.548196][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1582.554635][ T5898] input input21: Device does not respond to id packet N [ 1582.643578][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1582.690982][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1582.723270][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1582.744122][ T5898] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1582.756355][ T5898] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21 [ 1582.795580][T13785] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1583.025720][ T5898] usb 7-1: USB disconnect, device number 61 [ 1583.110864][T13785] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1583.120286][T13785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.128870][T13785] usb 2-1: Product: syz [ 1583.133220][T13785] usb 2-1: Manufacturer: syz [ 1583.138079][T13785] usb 2-1: SerialNumber: syz [ 1583.312435][T13785] usb 2-1: config 0 descriptor?? [ 1583.689156][T17525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.700014][T17525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1583.950233][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'. [ 1584.046363][ T5866] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1584.178267][T13785] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1584.248597][T17543] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2683'. [ 1584.306664][ T5866] usb 7-1: Using ep0 maxpacket: 8 [ 1584.344805][T13785] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1584.421608][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1584.433075][ T5866] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1584.442720][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.502501][T13785] usb 2-1: USB disconnect, device number 40 [ 1584.616279][ T5866] usb 7-1: config 0 descriptor?? [ 1584.920044][ T5866] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1585.362135][T13785] usb 7-1: USB disconnect, device number 62 [ 1585.486219][ T5866] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1585.691138][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.702699][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1585.712830][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1585.733353][ T5866] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1585.745010][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.833620][T10446] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1585.981113][ T5866] usb 3-1: config 0 descriptor?? [ 1586.042455][T10446] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.054029][T10446] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1586.166566][T10446] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1586.176349][T10446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.184544][T10446] usb 2-1: Product: syz [ 1586.188977][T10446] usb 2-1: Manufacturer: syz [ 1586.193744][T10446] usb 2-1: SerialNumber: syz [ 1586.587217][ T5866] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xe [ 1586.595592][ T5866] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1586.782493][ T5866] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1586.837087][T10446] usb 2-1: cannot find UAC_HEADER [ 1586.980702][ T5866] usb 3-1: USB disconnect, device number 77 [ 1587.012545][T10446] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1587.111085][T10446] usb 2-1: USB disconnect, device number 41 [ 1587.276705][T11263] udevd[11263]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1587.773963][T17559] fido_id[17559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1588.352867][T17574] loop2: detected capacity change from 0 to 7 [ 1588.405041][T17574] Dev loop2: unable to read RDB block 7 [ 1588.411052][T17574] loop2: unable to read partition table [ 1588.437165][T10446] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1588.481957][T17574] loop2: partition table beyond EOD, truncated [ 1588.494493][T17574] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1588.650962][T10446] usb 3-1: Using ep0 maxpacket: 32 [ 1588.714437][T10446] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1588.726899][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1588.738455][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1588.748428][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1588.759702][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1589.013063][T10446] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1589.023000][T10446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.031597][T10446] usb 3-1: Product: syz [ 1589.035968][T10446] usb 3-1: Manufacturer: syz [ 1589.040676][T10446] usb 3-1: SerialNumber: syz [ 1589.248251][T10446] usb 3-1: config 0 descriptor?? [ 1589.650696][T17583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2697'. [ 1589.687324][ T5898] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1589.783379][T10446] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1589.789967][T10446] input input22: Device does not respond to id packet M [ 1589.896634][T10446] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1589.903193][T10446] input input22: Device does not respond to id packet P [ 1589.996553][ T5898] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1590.006279][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.014492][ T5898] usb 7-1: Product: syz [ 1590.016596][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1590.019439][ T5898] usb 7-1: Manufacturer: syz [ 1590.030431][ T5898] usb 7-1: SerialNumber: syz [ 1590.037674][T10446] input input22: Device does not respond to id packet B [ 1590.119651][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1590.139384][T10446] input input22: Device does not respond to id packet N [ 1590.208315][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1590.237029][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1590.238221][ T5898] usb 7-1: config 0 descriptor?? [ 1590.282876][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1590.354081][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1590.364996][T10446] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input22 [ 1590.536883][T17579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.548381][T17579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.585705][ T5866] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1590.627034][T10446] usb 3-1: USB disconnect, device number 78 [ 1590.703463][T17579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2696'. [ 1590.835379][ T5866] usb 10-1: Using ep0 maxpacket: 8 [ 1590.903445][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1590.915091][ T5866] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1590.924662][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.969469][ T5898] cx82310_eth 7-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1591.064052][ T5898] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1591.066390][ T5866] usb 10-1: config 0 descriptor?? [ 1591.147171][ T5898] usb 7-1: USB disconnect, device number 63 [ 1591.410631][ T5866] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1591.525650][T10446] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1591.811690][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.823223][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.833676][T10446] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1591.847152][T10446] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1591.856674][T10446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.048573][T10446] usb 3-1: config 0 descriptor?? [ 1592.525913][T10446] plantronics 0003:047F:FFFF.0029: reserved main item tag 0xe [ 1592.533841][T10446] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1592.727491][T10446] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1592.853346][T10446] usb 3-1: USB disconnect, device number 79 [ 1593.663257][T17616] fido_id[17616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1593.696542][T10446] usb 10-1: USB disconnect, device number 108 [ 1594.207464][T17630] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2711'. [ 1594.855505][T10446] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1595.032817][T10446] usb 3-1: Using ep0 maxpacket: 32 [ 1595.108273][T10446] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1595.120840][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1595.133054][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1595.153669][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1595.172468][T10446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1595.428806][T10446] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1595.438465][T10446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.447697][T10446] usb 3-1: Product: syz [ 1595.459234][T10446] usb 3-1: Manufacturer: syz [ 1595.464132][T10446] usb 3-1: SerialNumber: syz [ 1595.645047][T10446] usb 3-1: config 0 descriptor?? [ 1595.735803][ T5866] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1596.036205][ T5866] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1596.046995][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.055734][ T5866] usb 5-1: Product: syz [ 1596.060211][ T5866] usb 5-1: Manufacturer: syz [ 1596.072256][ T5866] usb 5-1: SerialNumber: syz [ 1596.155711][T10446] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1596.162038][T10446] input input23: Device does not respond to id packet M [ 1596.217155][ T5866] usb 5-1: config 0 descriptor?? [ 1596.236057][T10446] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1596.242574][T10446] input input23: Device does not respond to id packet P [ 1596.324904][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1596.332004][T10446] input input23: Device does not respond to id packet B [ 1596.396341][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1596.402871][T10446] input input23: Device does not respond to id packet N [ 1596.463682][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1596.519506][T17644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.531067][T17644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1596.540396][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1596.554936][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1596.604685][T10446] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1596.616208][T10446] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 1596.648887][T17644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2715'. [ 1596.727909][ T5866] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1596.796738][ T5866] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1596.845363][ T5866] usb 5-1: USB disconnect, device number 41 [ 1596.880992][T13785] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1596.931280][T10446] usb 3-1: USB disconnect, device number 80 [ 1597.078983][T13785] usb 2-1: Using ep0 maxpacket: 8 [ 1597.141984][T13785] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1597.153510][T13785] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1597.163136][T13785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.305060][T13785] usb 2-1: config 0 descriptor?? [ 1597.639658][T13785] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1598.135974][T17668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2724'. [ 1599.167529][T17681] vlan2: entered promiscuous mode [ 1599.937439][ T5898] usb 2-1: USB disconnect, device number 42 [ 1600.126340][T13785] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1600.336671][T13785] usb 10-1: Using ep0 maxpacket: 32 [ 1600.362707][T13785] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1600.382302][T13785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1600.396445][T13785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1600.406802][T13785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1600.418300][T13785] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1600.495692][T17704] loop2: detected capacity change from 0 to 7 [ 1600.524565][T17704] Dev loop2: unable to read RDB block 7 [ 1600.530887][T17704] loop2: AHDI p1 p2 p3 [ 1600.535634][T17704] loop2: partition table partially beyond EOD, truncated [ 1600.543822][T17704] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1600.551134][T17704] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1600.640331][T13785] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1600.650361][T13785] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.659085][T13785] usb 10-1: Product: syz [ 1600.663518][T13785] usb 10-1: Manufacturer: syz [ 1600.668647][T13785] usb 10-1: SerialNumber: syz [ 1600.697171][ T5898] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1600.910115][T13785] usb 10-1: config 0 descriptor?? [ 1601.018619][ T5898] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1601.028260][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.037062][ T5898] usb 2-1: Product: syz [ 1601.041405][ T5898] usb 2-1: Manufacturer: syz [ 1601.046552][ T5898] usb 2-1: SerialNumber: syz [ 1601.228319][ T5898] usb 2-1: config 0 descriptor?? [ 1601.385931][T13785] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1601.403263][T13785] input input24: Device does not respond to id packet M [ 1601.513231][T13785] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1601.520016][T13785] input input24: Device does not respond to id packet P [ 1601.547298][T17700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1601.558093][T17700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1601.626268][T17700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2734'. [ 1601.642420][T13785] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1601.651233][T13785] input input24: Device does not respond to id packet B [ 1601.758005][T13785] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1601.764554][T13785] input input24: Device does not respond to id packet N [ 1601.844497][ T5898] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1601.856286][T13785] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1601.917869][T13785] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1601.935938][ T5898] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1601.978189][T13785] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1602.039312][T13785] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1602.050207][T13785] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input24 [ 1602.083835][ T5898] usb 2-1: USB disconnect, device number 43 [ 1602.318423][T13785] usb 10-1: USB disconnect, device number 109 [ 1602.797825][T17721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2739'. [ 1603.710384][T17729] team_slave_0: entered promiscuous mode [ 1603.716538][T17729] team_slave_1: entered promiscuous mode [ 1603.722662][T17729] vlan2: entered promiscuous mode [ 1603.728766][T17729] team0: entered promiscuous mode [ 1604.312185][T13785] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1604.347035][ T5898] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1604.505604][T13785] usb 3-1: Using ep0 maxpacket: 8 [ 1604.521397][T13785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1604.533791][T13785] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1604.543374][T13785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.544130][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1604.586097][T17739] loop2: detected capacity change from 0 to 7 [ 1604.606166][T13785] usb 3-1: config 0 descriptor?? [ 1604.636428][T17739] Dev loop2: unable to read RDB block 7 [ 1604.642283][T17739] loop2: AHDI p1 p2 p3 [ 1604.646997][T17739] loop2: partition table partially beyond EOD, truncated [ 1604.655306][T17739] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1604.662312][T17739] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1604.826321][ T5898] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1604.881988][T13785] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1604.996093][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1605.135933][ T5898] usb usb2-port1: attempt power cycle [ 1605.318206][T13785] usb 3-1: USB disconnect, device number 81 [ 1606.249066][ T5898] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1606.307684][ T5898] usb 2-1: device descriptor read/8, error -71 [ 1606.561094][ T5898] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1606.633097][ T5898] usb 2-1: device descriptor read/8, error -71 [ 1606.766524][ T5898] usb usb2-port1: unable to enumerate USB device [ 1606.832855][T17758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2753'. [ 1606.865640][T10081] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1607.050142][T10081] usb 3-1: Using ep0 maxpacket: 32 [ 1607.132540][T10081] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1607.144846][T10081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1607.156249][T10081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1607.166431][T10081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1607.177971][T10081] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1607.304871][T10081] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1607.314336][T10081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.322901][T10081] usb 3-1: Product: syz [ 1607.328569][T10081] usb 3-1: Manufacturer: syz [ 1607.333339][T10081] usb 3-1: SerialNumber: syz [ 1607.403933][T17764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2755'. [ 1607.521395][T10081] usb 3-1: config 0 descriptor?? [ 1607.900444][T17768] team_slave_0: entered promiscuous mode [ 1607.906590][T17768] team_slave_1: entered promiscuous mode [ 1607.912654][T17768] vlan2: entered promiscuous mode [ 1607.918206][T17768] team0: entered promiscuous mode [ 1608.155590][T10081] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1608.161914][T10081] input input25: Device does not respond to id packet M [ 1608.238977][T10081] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1608.245479][T10081] input input25: Device does not respond to id packet P [ 1608.310551][T10081] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1608.317321][T10081] input input25: Device does not respond to id packet B [ 1608.346726][T10081] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1608.354652][T10081] input input25: Device does not respond to id packet N [ 1608.382452][T10081] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1608.401614][T10081] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1608.432832][T10081] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1608.467766][T10081] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1608.478673][T10081] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input25 [ 1608.623725][T17773] loop2: detected capacity change from 0 to 7 [ 1608.639534][T10081] usb 3-1: USB disconnect, device number 82 [ 1608.690415][T17773] Dev loop2: unable to read RDB block 7 [ 1608.696624][T17773] loop2: AHDI p1 p2 p3 [ 1608.700997][T17773] loop2: partition table partially beyond EOD, truncated [ 1608.709724][T17773] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1608.716935][T17773] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1609.425445][T13785] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1609.646242][T13785] usb 7-1: Using ep0 maxpacket: 8 [ 1609.694401][T13785] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1609.706972][T13785] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1609.717138][T13785] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.915509][T13785] usb 7-1: config 0 descriptor?? [ 1610.177621][T13785] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1610.650944][T10081] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1610.816159][T10081] usb 5-1: device descriptor read/64, error -71 [ 1611.085809][T10081] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1611.295939][T10081] usb 5-1: device descriptor read/64, error -71 [ 1611.407960][T10081] usb usb5-port1: attempt power cycle [ 1611.825742][T10081] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1611.888508][T10081] usb 5-1: device descriptor read/8, error -71 [ 1612.136337][T10081] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1612.233150][T10081] usb 5-1: device descriptor read/8, error -71 [ 1612.349475][T10081] usb usb5-port1: unable to enumerate USB device [ 1612.587285][T10081] usb 7-1: USB disconnect, device number 64 [ 1612.906633][T17811] vlan2: entered promiscuous mode [ 1613.056099][ T5898] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1613.260425][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 1613.345559][T17819] loop2: detected capacity change from 0 to 7 [ 1613.358183][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1613.358621][T17819] Dev loop2: unable to read RDB block 7 [ 1613.370936][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1613.371110][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1613.371259][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1613.371420][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1613.431207][T17819] loop2: AHDI p1 p2 p3 [ 1613.435705][T17819] loop2: partition table partially beyond EOD, truncated [ 1613.443906][T17819] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1613.451093][T17819] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1613.481211][ T5898] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1613.490632][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.499049][ T5898] usb 3-1: Product: syz [ 1613.503391][ T5898] usb 3-1: Manufacturer: syz [ 1613.508428][ T5898] usb 3-1: SerialNumber: syz [ 1613.679800][ T5898] usb 3-1: config 0 descriptor?? [ 1614.210523][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 1614.217141][ T5898] input input26: Device does not respond to id packet M [ 1614.274265][ T5898] input input26: Device does not respond to id packet P [ 1614.446221][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1614.452561][ T5898] input input26: Device does not respond to id packet B [ 1614.525573][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1614.531905][ T5898] input input26: Device does not respond to id packet N [ 1614.616540][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1614.624422][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1614.679682][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1614.719373][ T5898] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 1614.770666][ T5898] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26 [ 1614.997133][ T5898] usb 3-1: USB disconnect, device number 83 [ 1616.047951][ T5898] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1616.296357][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 1616.324522][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1616.336673][ T5898] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1616.347065][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.520066][ T5898] usb 3-1: config 0 descriptor?? [ 1616.551083][T17853] vlan2: entered promiscuous mode [ 1616.782637][ T5898] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1617.278327][T13989] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1617.446956][T13989] usb 7-1: device descriptor read/64, error -71 [ 1617.745788][T13989] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1617.966451][T13989] usb 7-1: device descriptor read/64, error -71 [ 1618.094467][T17866] loop2: detected capacity change from 0 to 7 [ 1618.122464][T13989] usb usb7-port1: attempt power cycle [ 1618.170516][T17866] Dev loop2: unable to read RDB block 7 [ 1618.176968][T17866] loop2: AHDI p1 p2 p3 [ 1618.182366][T17866] loop2: partition table partially beyond EOD, truncated [ 1618.191914][T17866] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1618.199569][T17866] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1618.505787][T13989] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1618.589264][T13989] usb 7-1: device descriptor read/8, error -71 [ 1618.847060][T13989] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1618.947696][T13989] usb 7-1: device descriptor read/8, error -71 [ 1619.002478][T13770] usb 3-1: USB disconnect, device number 84 [ 1619.072107][T13989] usb usb7-port1: unable to enumerate USB device [ 1619.376013][T13989] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1619.565579][T13989] usb 10-1: Using ep0 maxpacket: 32 [ 1619.625046][T13989] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1619.637737][T13989] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1619.649165][T13989] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1619.659378][T13989] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1619.670954][T13989] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1619.937682][T13989] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1619.947294][T13989] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.955938][T13989] usb 10-1: Product: syz [ 1619.960354][T13989] usb 10-1: Manufacturer: syz [ 1619.965333][T13989] usb 10-1: SerialNumber: syz [ 1619.990310][T17889] dummy0: entered promiscuous mode [ 1620.001886][T17889] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1620.015732][T17889] hsr1: entered allmulticast mode [ 1620.020969][T17889] dummy0: entered allmulticast mode [ 1620.028422][T17889] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1620.056226][T10446] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1620.113090][T13989] usb 10-1: config 0 descriptor?? [ 1620.276053][T10446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.288122][T10446] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.298358][T10446] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1620.314752][T10446] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1620.325742][T10446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.516769][T10446] usb 5-1: config 0 descriptor?? [ 1620.608119][T13989] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 1620.614727][T13989] input input27: Device does not respond to id packet M [ 1620.636624][T13989] input input27: Device does not respond to id packet P [ 1620.746752][T17894] vlan2: entered promiscuous mode [ 1620.833951][T13989] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1620.840696][T13989] input input27: Device does not respond to id packet B [ 1620.960256][T13989] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1620.967484][T13989] input input27: Device does not respond to id packet N [ 1620.977759][T13989] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1620.988782][T13989] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1621.020983][T13989] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1621.029963][T13989] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 1621.041924][T13989] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input27 [ 1621.076907][T10446] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xe [ 1621.084846][T10446] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 1621.136271][T10446] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1621.206792][T13989] usb 10-1: USB disconnect, device number 110 [ 1621.399280][T13770] usb 5-1: USB disconnect, device number 46 [ 1622.356262][T17898] fido_id[17898]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1622.901242][T17916] loop2: detected capacity change from 0 to 7 [ 1622.933189][T17916] Dev loop2: unable to read RDB block 7 [ 1622.940019][T17916] loop2: AHDI p1 p2 p3 [ 1622.944555][T17916] loop2: partition table partially beyond EOD, truncated [ 1622.953020][T17916] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1622.960225][T17916] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1623.126288][T13770] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1623.366928][T13770] usb 7-1: Using ep0 maxpacket: 8 [ 1623.395879][T13770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1623.409026][T13770] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1623.418989][T13770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.555992][T13770] usb 7-1: config 0 descriptor?? [ 1623.860284][T13770] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1624.325880][ T5898] usb 7-1: USB disconnect, device number 69 [ 1624.367256][ T9900] Bluetooth: hci3: command 0x0406 tx timeout [ 1624.835899][T13770] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1625.094429][T13770] usb 10-1: no configurations [ 1625.100013][T13770] usb 10-1: can't read configurations, error -22 [ 1625.355720][T13770] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1625.590089][T13770] usb 10-1: no configurations [ 1625.595104][T13770] usb 10-1: can't read configurations, error -22 [ 1625.645732][T13770] usb usb10-port1: attempt power cycle [ 1625.746072][T13989] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1625.960270][T13989] usb 7-1: Using ep0 maxpacket: 32 [ 1626.035811][T13770] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1626.049220][T13989] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1626.061670][T13989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1626.077647][T13989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1626.089188][T13989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1626.100489][T13989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1626.185628][T13770] usb 10-1: no configurations [ 1626.190520][T13770] usb 10-1: can't read configurations, error -22 [ 1626.343527][T13989] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1626.353035][T13989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.361477][T13989] usb 7-1: Product: syz [ 1626.366134][T13989] usb 7-1: Manufacturer: syz [ 1626.370909][T13989] usb 7-1: SerialNumber: syz [ 1626.386841][T13770] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 1626.463465][T13770] usb 10-1: no configurations [ 1626.468492][T13770] usb 10-1: can't read configurations, error -22 [ 1626.509613][T13770] usb usb10-port1: unable to enumerate USB device [ 1626.514130][T13989] usb 7-1: config 0 descriptor?? [ 1626.942541][T13989] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 1626.948968][T13989] input input28: Device does not respond to id packet M [ 1627.001165][T13989] input input28: Device does not respond to id packet P [ 1627.168533][T13989] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1627.174733][T13989] input input28: Device does not respond to id packet B [ 1627.223557][T13989] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1627.230062][T13989] input input28: Device does not respond to id packet N [ 1627.335918][T13989] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1627.352955][T13989] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1627.370563][T13989] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1627.384391][T13989] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 1627.393809][T13989] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input28 [ 1627.541063][T13989] usb 7-1: USB disconnect, device number 70 [ 1627.832633][ T30] audit: type=1326 audit(1755484932.626:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1627.955646][ T30] audit: type=1326 audit(1755484932.736:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.065470][ T30] audit: type=1326 audit(1755484932.796:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.088641][ T30] audit: type=1326 audit(1755484932.796:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.111447][ T30] audit: type=1326 audit(1755484932.796:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.484115][ T30] audit: type=1326 audit(1755484933.016:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.507004][ T30] audit: type=1326 audit(1755484933.016:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.530207][ T30] audit: type=1326 audit(1755484933.016:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.552821][ T30] audit: type=1326 audit(1755484933.026:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.575996][ T30] audit: type=1326 audit(1755484933.026:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17946 comm="syz.1.2815" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1628.748748][T12701] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 1629.064141][T12701] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.075459][T12701] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.085909][T12701] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1629.099273][T12701] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1629.108632][T12701] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.318768][T12701] usb 10-1: config 0 descriptor?? [ 1629.701767][T17958] loop2: detected capacity change from 0 to 7 [ 1629.809440][T17958] Dev loop2: unable to read RDB block 7 [ 1629.817296][T17958] loop2: AHDI p1 p2 p3 [ 1629.821655][T17958] loop2: partition table partially beyond EOD, truncated [ 1629.830117][T17958] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1629.837297][T17958] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1629.905629][T12701] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xe [ 1629.913569][T12701] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 1630.095748][T12701] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1630.373698][T12701] usb 10-1: USB disconnect, device number 115 [ 1631.151662][T17960] fido_id[17960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1631.926023][ T5898] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1632.225477][ T5898] usb 10-1: Using ep0 maxpacket: 8 [ 1632.278163][ T5898] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1632.289817][ T5898] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1632.299398][ T5898] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.479794][ T5898] usb 10-1: config 0 descriptor?? [ 1632.748763][ T5898] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1633.575970][T12701] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1633.757809][T17989] loop2: detected capacity change from 0 to 7 [ 1633.792126][T12701] usb 3-1: no configurations [ 1633.797677][T12701] usb 3-1: can't read configurations, error -22 [ 1633.816880][T17989] Dev loop2: unable to read RDB block 7 [ 1633.822909][T17989] loop2: unable to read partition table [ 1633.895417][T17989] loop2: partition table beyond EOD, truncated [ 1633.902129][T17989] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1634.034939][T12701] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1634.306014][T12701] usb 3-1: no configurations [ 1634.311142][T12701] usb 3-1: can't read configurations, error -22 [ 1634.377443][T12701] usb usb3-port1: attempt power cycle [ 1634.846498][T12701] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1634.916999][ T5873] usb 10-1: USB disconnect, device number 116 [ 1635.108705][T12701] usb 3-1: no configurations [ 1635.113515][T12701] usb 3-1: can't read configurations, error -22 [ 1635.295892][T12701] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1635.498293][T12701] usb 3-1: no configurations [ 1635.503105][T12701] usb 3-1: can't read configurations, error -22 [ 1635.510716][T12701] usb usb3-port1: unable to enumerate USB device [ 1635.810779][ T5898] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1636.084228][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.096262][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.107210][ T5898] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1636.120788][ T5898] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1636.130377][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.270545][ T5898] usb 5-1: config 0 descriptor?? [ 1636.826697][ T5898] plantronics 0003:047F:FFFF.002C: reserved main item tag 0xe [ 1636.834773][ T5898] plantronics 0003:047F:FFFF.002C: unknown main item tag 0x0 [ 1636.955882][ T5898] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1637.155991][T13770] usb 5-1: USB disconnect, device number 47 [ 1637.666171][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.672963][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1638.121961][T18017] fido_id[18017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1638.389561][T18030] loop2: detected capacity change from 0 to 7 [ 1638.435059][T18030] Dev loop2: unable to read RDB block 7 [ 1638.441119][T18030] loop2: AHDI p2 [ 1638.444960][T18030] loop2: partition table partially beyond EOD, truncated [ 1639.465823][T13770] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1639.797091][T13770] usb 7-1: Using ep0 maxpacket: 8 [ 1639.918064][T13770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1639.929485][T13770] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1639.939054][T13770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.092519][T13770] usb 7-1: config 0 descriptor?? [ 1640.641062][T13770] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1641.113323][T13770] usb 7-1: USB disconnect, device number 71 [ 1643.278169][T13770] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1643.535881][T13770] usb 7-1: Using ep0 maxpacket: 32 [ 1643.667162][T13770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.678466][T13770] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.690201][T13770] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1643.699919][T13770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.876528][T13770] usb 7-1: config 0 descriptor?? [ 1643.894355][T13770] hub 7-1:0.0: USB hub found [ 1644.257426][T13770] hub 7-1:0.0: 1 port detected [ 1644.355995][T12701] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1644.525799][ T5873] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1644.646444][T12701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.658081][T12701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.668440][T12701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1644.682107][T12701] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1644.691569][T12701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.955922][ T5873] usb 2-1: no configurations [ 1644.960846][ T5873] usb 2-1: can't read configurations, error -22 [ 1645.024533][T12701] usb 5-1: config 0 descriptor?? [ 1645.136271][ T5873] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1645.355546][T13770] hub 7-1:0.0: activate --> -90 [ 1645.446339][ T5873] usb 2-1: no configurations [ 1645.451377][ T5873] usb 2-1: can't read configurations, error -22 [ 1645.485620][ T5898] usb 7-1: USB disconnect, device number 72 [ 1645.580921][T12701] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xe [ 1645.589142][T12701] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 1645.645939][ T5873] usb usb2-port1: attempt power cycle [ 1645.790665][T12701] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1645.916574][T12701] usb 5-1: USB disconnect, device number 48 [ 1646.057223][ T5873] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1646.236366][ T5873] usb 2-1: no configurations [ 1646.248311][ T5873] usb 2-1: can't read configurations, error -22 [ 1646.505657][ T5873] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1646.615925][ T5873] usb 2-1: no configurations [ 1646.620737][ T5873] usb 2-1: can't read configurations, error -22 [ 1646.676515][ T5873] usb usb2-port1: unable to enumerate USB device [ 1646.723244][T18080] fido_id[18080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1651.135528][ T5898] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1651.395607][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.407211][ T5898] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.417505][ T5898] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1651.431227][ T5898] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1651.440700][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.689379][ T5898] usb 7-1: config 0 descriptor?? [ 1652.126904][T18128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2867'. [ 1652.327648][ T5898] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xe [ 1652.336005][ T5898] plantronics 0003:047F:FFFF.002E: unknown main item tag 0x0 [ 1652.556743][ T5898] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1652.853811][ T5898] usb 7-1: USB disconnect, device number 73 [ 1653.737247][T18133] fido_id[18133]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1656.747993][ T9900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1656.757485][ T9900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1656.784897][ T9900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1656.806086][ T9900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1656.818071][ T9900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1658.436286][T18150] chnl_net:caif_netlink_parms(): no params data found [ 1658.981611][ T9900] Bluetooth: hci4: command tx timeout [ 1660.980941][T18150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.997747][T18150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.006510][T18150] bridge_slave_0: entered allmulticast mode [ 1661.016489][T18150] bridge_slave_0: entered promiscuous mode [ 1661.035476][ T9900] Bluetooth: hci4: command tx timeout [ 1661.078670][T18150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.086420][T18150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.105975][T18150] bridge_slave_1: entered allmulticast mode [ 1661.115864][T18150] bridge_slave_1: entered promiscuous mode [ 1661.441738][T18150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.591719][T18150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.927434][T18174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2875'. [ 1662.158425][T18150] team0: Port device team_slave_0 added [ 1662.289637][T18150] team0: Port device team_slave_1 added [ 1663.014518][T18150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.021762][T18150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.053524][T18150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.125417][ T9900] Bluetooth: hci4: command tx timeout [ 1663.146905][T18150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.154033][T18150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.181622][T18150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1663.397389][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2876'. [ 1664.300482][T18150] hsr_slave_0: entered promiscuous mode [ 1664.309220][T18150] hsr_slave_1: entered promiscuous mode [ 1664.317090][T18150] debugfs: 'hsr0' already exists in 'hsr' [ 1664.322898][T18150] Cannot create hsr debugfs directory [ 1665.176909][ T9900] Bluetooth: hci4: command tx timeout [ 1665.711982][T16619] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.006094][T16619] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.269103][T16619] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1666.522991][T16619] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.616387][T16619] bridge_slave_1: left allmulticast mode [ 1667.622202][T16619] bridge_slave_1: left promiscuous mode [ 1667.628783][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.744303][T16619] : left allmulticast mode [ 1667.749471][T16619] : left promiscuous mode [ 1667.754883][T16619] bridge0: port 1() entered disabled state [ 1668.475312][T16619] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1669.017272][T16619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.039170][T16619] bond_slave_0: left promiscuous mode [ 1669.127680][T16619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.227527][T16619] bond_slave_1: left promiscuous mode [ 1669.238337][T16619] bond0 (unregistering): Released all slaves [ 1669.262385][T16619] bond1 (unregistering): Released all slaves [ 1669.880918][T16619] tipc: Left network mode [ 1670.901783][T18150] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1671.084424][T16619] hsr_slave_0: left promiscuous mode [ 1671.130974][T16619] hsr_slave_1: left promiscuous mode [ 1671.138969][T16619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1671.147498][T16619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.197997][T16619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1671.206067][T16619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.367973][T16619] dummy0: left allmulticast mode [ 1671.373990][T16619] veth1_macvtap: left promiscuous mode [ 1671.380228][T16619] veth0_macvtap: left promiscuous mode [ 1671.386315][T16619] veth1_vlan: left promiscuous mode [ 1671.391831][T16619] veth0_vlan: left promiscuous mode [ 1672.204272][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 1673.189424][T16619] team_slave_1 (unregistering): left promiscuous mode [ 1673.452597][T16619] team0 (unregistering): Port device team_slave_1 removed [ 1673.471971][T16619] team_slave_0 (unregistering): left promiscuous mode [ 1673.597494][T16619] team0 (unregistering): Port device team_slave_0 removed [ 1674.206273][T18150] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1674.299091][T18150] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1674.457739][T18150] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1676.445728][T18150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.723555][T18150] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.832647][T16625] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.840251][T16625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.906336][T15964] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1676.928716][T15964] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1676.956389][T15964] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1676.984610][T15964] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1676.997081][T15964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1677.054507][T16625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.062196][T16625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1679.090416][ T9900] Bluetooth: hci0: command tx timeout [ 1680.319853][T18150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.375841][T18246] chnl_net:caif_netlink_parms(): no params data found [ 1681.200180][ T9900] Bluetooth: hci0: command tx timeout [ 1681.627516][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2898'. [ 1681.756575][T15964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1681.783593][T15964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1681.794899][T15964] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1681.846027][T15964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1681.887106][T15964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1683.248286][T15964] Bluetooth: hci0: command tx timeout [ 1683.939606][ T5873] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1683.966057][T15964] Bluetooth: hci6: command tx timeout [ 1684.207077][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 1684.210588][T18246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.219922][T18246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.227805][T18246] bridge_slave_0: entered allmulticast mode [ 1684.237532][T18246] bridge_slave_0: entered promiscuous mode [ 1684.498132][T18246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.506172][T18246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.513975][T18246] bridge_slave_1: entered allmulticast mode [ 1684.523812][T18246] bridge_slave_1: entered promiscuous mode [ 1684.614123][ T5873] usb 3-1: config 162 has an invalid interface number: 46 but max is 1 [ 1684.622950][ T5873] usb 3-1: config 162 has no interface number 0 [ 1684.629576][ T5873] usb 3-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1684.646829][ T5873] usb 3-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1684.659189][ T5873] usb 3-1: config 162 interface 1 has no altsetting 0 [ 1684.666232][ T5873] usb 3-1: config 162 interface 46 has no altsetting 0 [ 1685.119555][ T5873] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 1685.129080][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.137500][ T5873] usb 3-1: Product: syz [ 1685.141834][ T5873] usb 3-1: Manufacturer: syz [ 1685.146790][ T5873] usb 3-1: SerialNumber: syz [ 1685.344121][T15964] Bluetooth: hci0: command tx timeout [ 1685.353453][T18284] chnl_net:caif_netlink_parms(): no params data found [ 1685.447068][T18246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.643174][T18150] veth0_vlan: entered promiscuous mode [ 1685.926673][ T5873] usb 3-1: USB disconnect, device number 89 [ 1685.996065][T18246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.046939][T15964] Bluetooth: hci6: command tx timeout [ 1686.162365][T18150] veth1_vlan: entered promiscuous mode [ 1686.427246][T18246] team0: Port device team_slave_0 added [ 1686.506091][T18246] team0: Port device team_slave_1 added [ 1687.158183][T18246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.165488][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.192185][T18246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.352730][T18150] veth0_macvtap: entered promiscuous mode [ 1687.398596][T18246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.410698][T18246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.438392][T18246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.602989][T18150] veth1_macvtap: entered promiscuous mode [ 1687.897302][T18150] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.132724][T15964] Bluetooth: hci6: command tx timeout [ 1688.300159][T18150] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.446969][T18246] hsr_slave_0: entered promiscuous mode [ 1688.455943][T18246] hsr_slave_1: entered promiscuous mode [ 1688.463612][T18246] debugfs: 'hsr0' already exists in 'hsr' [ 1688.469548][T18246] Cannot create hsr debugfs directory [ 1688.977631][T16626] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.257444][T18284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.265040][T18284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.273886][T18284] bridge_slave_0: entered allmulticast mode [ 1689.283792][T18284] bridge_slave_0: entered promiscuous mode [ 1689.310265][T16626] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.416019][T16483] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.425036][T16483] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.826272][T18284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.833876][T18284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.842548][T18284] bridge_slave_1: entered allmulticast mode [ 1689.851060][T18284] bridge_slave_1: entered promiscuous mode [ 1690.235663][T15964] Bluetooth: hci6: command tx timeout [ 1690.703435][T18284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1690.860222][T18284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.585040][T18284] team0: Port device team_slave_0 added [ 1691.702833][T18284] team0: Port device team_slave_1 added [ 1692.492261][T18284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1692.499676][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.527118][T18284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1692.766796][T18284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1692.773947][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1692.800270][ C1] vkms_vblank_simulate: vblank timer overrun [ 1692.806816][T18284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1693.884342][T18284] hsr_slave_0: entered promiscuous mode [ 1693.893205][T18284] hsr_slave_1: entered promiscuous mode [ 1693.901116][T18284] debugfs: 'hsr0' already exists in 'hsr' [ 1693.907154][T18284] Cannot create hsr debugfs directory [ 1694.529522][T18246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1694.779824][T18246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1694.953292][T18246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1695.148428][T18246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1696.480689][T10081] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1696.800897][T10081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.811596][T10081] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1696.821125][T10081] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1696.830594][T10081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.099459][T10081] usb 5-1: config 0 descriptor?? [ 1697.901232][T16483] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.178596][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1699.190402][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1699.321486][T16483] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.160759][T18284] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1700.332616][T18246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1700.370593][T18284] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1700.518398][T16483] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.647464][T18284] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1700.806388][T16483] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.975478][T18284] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1701.641158][T18246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.812527][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.820208][T16455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.873609][T13989] usb 5-1: USB disconnect, device number 49 [ 1702.001925][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.009610][T16455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.552571][T16483] bridge_slave_1: left allmulticast mode [ 1702.567974][T16483] bridge_slave_1: left promiscuous mode [ 1702.574587][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1702.725520][T16483] bridge_slave_0: left allmulticast mode [ 1702.731389][T16483] bridge_slave_0: left promiscuous mode [ 1702.738281][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.025836][T10081] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1703.315681][T10081] usb 3-1: Using ep0 maxpacket: 8 [ 1703.586740][T10081] usb 3-1: config 162 has an invalid interface number: 46 but max is 1 [ 1703.595499][T10081] usb 3-1: config 162 has no interface number 0 [ 1703.601985][T10081] usb 3-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1703.615512][T10081] usb 3-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1703.626670][T10081] usb 3-1: config 162 interface 1 has no altsetting 0 [ 1703.633659][T10081] usb 3-1: config 162 interface 46 has no altsetting 0 [ 1703.809266][T16483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1703.862035][T10081] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 1703.871628][T10081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.880940][T10081] usb 3-1: Product: syz [ 1703.885954][T10081] usb 3-1: Manufacturer: syz [ 1703.890735][T10081] usb 3-1: SerialNumber: syz [ 1703.901152][T16483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1703.931904][T16483] bond0 (unregistering): Released all slaves [ 1704.552955][T16626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.562082][T16626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.934200][ T3940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1704.942406][ T3940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.992820][T10081] usb 3-1: USB disconnect, device number 90 [ 1705.399637][T16483] hsr_slave_0: left promiscuous mode [ 1705.428751][T16483] hsr_slave_1: left promiscuous mode [ 1705.437048][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.444604][T16483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.521468][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.530498][T16483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.706878][T16483] dummy0: left allmulticast mode [ 1705.712920][T16483] veth1_macvtap: left promiscuous mode [ 1705.718897][T16483] veth0_macvtap: left promiscuous mode [ 1705.724754][T16483] veth1_vlan: left promiscuous mode [ 1705.730948][T16483] veth0_vlan: left promiscuous mode [ 1706.102807][ T5873] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1706.315497][ T5873] usb 8-1: Using ep0 maxpacket: 16 [ 1706.372093][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.383577][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.393760][ T5873] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1706.407113][ T5873] usb 8-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1706.416567][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.549349][ T5873] usb 8-1: config 0 descriptor?? [ 1707.028137][T18391] fuse: Bad value for 'fd' [ 1707.096031][T16483] team_slave_1 (unregistering): left promiscuous mode [ 1707.194469][T18397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.205126][T18397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.308922][T18397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1707.347283][T18397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.419481][T16483] team0 (unregistering): Port device team_slave_1 removed [ 1707.482858][T16483] team_slave_0 (unregistering): left promiscuous mode [ 1707.570298][T16483] team0 (unregistering): Port device team_slave_0 removed [ 1707.970889][T18284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.508241][T18284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1708.674542][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.682190][T16471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.743446][T16483] IPVS: stop unused estimator thread 0... [ 1708.795600][T16471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.803153][T16471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.253351][T16483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.391558][T16483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.540006][ T5873] usbhid 8-1:0.0: can't add hid device: -71 [ 1709.547698][ T5873] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1709.654323][T16483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.682226][ T5873] usb 8-1: USB disconnect, device number 5 [ 1709.978046][T16483] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1709.987950][T16483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.278655][T18246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1710.827234][T13989] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1710.862140][T16483] bridge_slave_1: left allmulticast mode [ 1710.868203][T16483] bridge_slave_1: left promiscuous mode [ 1710.874856][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.911233][T16483] bridge_slave_0: left allmulticast mode [ 1710.917384][T16483] bridge_slave_0: left promiscuous mode [ 1710.923918][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.232477][T13989] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1711.243979][T13989] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1711.254041][T13989] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1711.269344][T13989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.385933][T13989] usb 8-1: config 0 descriptor?? [ 1712.521268][T16483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.572627][T16483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.606433][T16483] bond0 (unregistering): Released all slaves [ 1712.834685][T18246] veth0_vlan: entered promiscuous mode [ 1712.972353][T18246] veth1_vlan: entered promiscuous mode [ 1713.093590][T18284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1713.407234][T16483] dummy0: left promiscuous mode [ 1713.467738][T16483] hsr_slave_0: left promiscuous mode [ 1713.493677][T16483] hsr_slave_1: left promiscuous mode [ 1713.502504][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1713.510291][T16483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1713.591896][T16483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1713.599677][T16483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1713.707357][T16483] veth1_macvtap: left promiscuous mode [ 1713.713092][T16483] veth0_macvtap: left promiscuous mode [ 1713.719290][T16483] veth1_vlan: left promiscuous mode [ 1713.754967][ T5866] usb 8-1: USB disconnect, device number 6 [ 1715.112238][T16483] team_slave_1 (unregistering): left promiscuous mode [ 1715.120634][ T5866] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1715.222122][T16483] team0 (unregistering): Port device team_slave_1 removed [ 1715.246728][T16483] team_slave_0 (unregistering): left promiscuous mode [ 1715.307904][T16483] team0 (unregistering): Port device team_slave_0 removed [ 1715.397926][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 1715.507056][ T5866] usb 3-1: config 162 has an invalid interface number: 46 but max is 1 [ 1715.516655][ T5866] usb 3-1: config 162 has no interface number 0 [ 1715.523137][ T5866] usb 3-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1715.537763][ T5866] usb 3-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1715.549729][ T5866] usb 3-1: config 162 interface 1 has no altsetting 0 [ 1715.557738][ T5866] usb 3-1: config 162 interface 46 has no altsetting 0 [ 1716.183718][ T5866] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 1716.193269][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.201724][ T5866] usb 3-1: Product: syz [ 1716.206305][ T5866] usb 3-1: Manufacturer: syz [ 1716.211074][ T5866] usb 3-1: SerialNumber: syz [ 1716.248358][T18246] veth0_macvtap: entered promiscuous mode [ 1716.410116][T18246] veth1_macvtap: entered promiscuous mode [ 1716.516451][T18246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.647977][T18246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.849915][T16619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.945752][T16619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.954785][T16619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.063127][T16619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1717.733720][ T5866] usb 3-1: USB disconnect, device number 91 [ 1717.775529][ T5873] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1718.046828][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 1718.157099][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.168649][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.178834][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1718.192114][ T5873] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1718.201520][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1718.451969][ T5873] usb 5-1: config 0 descriptor?? [ 1719.356513][T18444] fuse: Bad value for 'fd' [ 1719.724169][T18284] veth0_vlan: entered promiscuous mode [ 1719.925968][T18284] veth1_vlan: entered promiscuous mode [ 1720.000228][T18453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.010579][T18453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.500931][T18284] veth0_macvtap: entered promiscuous mode [ 1720.599529][T18284] veth1_macvtap: entered promiscuous mode [ 1720.654668][T18232] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1720.841316][T18284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.921374][T18232] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1720.932038][T18232] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1720.941578][T18232] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1720.951004][T18232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.011895][T18284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1721.168599][T18232] usb 8-1: config 0 descriptor?? [ 1721.269925][T16619] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.377370][T16483] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.455941][T16483] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.465433][T16483] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1721.633133][T18457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1721.644157][T18457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1723.661499][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 1723.668428][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1723.744581][ T5873] usb 5-1: USB disconnect, device number 50 [ 1723.749215][T10081] usb 8-1: USB disconnect, device number 7 [ 1726.990735][ T5866] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1727.229965][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 1727.246125][T16612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.254389][T16612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.456539][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1727.467942][ T5866] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1727.477632][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.607428][ T5866] usb 3-1: config 0 descriptor?? [ 1727.747428][ T5866] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1727.789539][T16625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.797697][T16625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.966064][ T5866] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1729.982909][T16619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.991191][T16619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.195614][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 1730.246711][ T5866] usb 1-1: config 162 has an invalid interface number: 46 but max is 1 [ 1730.255387][ T5866] usb 1-1: config 162 has no interface number 0 [ 1730.261759][ T5866] usb 1-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1730.275407][ T5866] usb 1-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1730.286684][ T5866] usb 1-1: config 162 interface 46 altsetting 1 has an invalid endpoint descriptor of length 2, skipping [ 1730.298119][ T5866] usb 1-1: config 162 interface 46 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1730.314735][ T5866] usb 1-1: config 162 interface 1 has no altsetting 0 [ 1730.322763][ T5866] usb 1-1: config 162 interface 46 has no altsetting 0 [ 1730.427274][ T5873] usb 3-1: USB disconnect, device number 92 [ 1730.477524][T16619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.486715][T16619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.849552][ T5866] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 1730.859024][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.867500][ T5866] usb 1-1: Product: syz [ 1730.871848][ T5866] usb 1-1: Manufacturer: syz [ 1730.876771][ T5866] usb 1-1: SerialNumber: syz [ 1731.391144][ T5866] usb 1-1: USB disconnect, device number 42 [ 1732.476301][T18550] vlan2: entered promiscuous mode [ 1732.700961][ T5866] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1732.983366][ T5866] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1732.992956][ T5866] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1733.002419][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.198203][ T5866] usb 5-1: config 0 descriptor?? [ 1734.909604][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 1736.273165][ T5866] usb 5-1: USB disconnect, device number 51 [ 1736.756756][ T5873] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1736.960364][ T5873] usb 1-1: config 0 has no interfaces? [ 1737.076451][ T5873] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1737.086045][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.094257][ T5873] usb 1-1: Product: syz [ 1737.098879][ T5873] usb 1-1: Manufacturer: syz [ 1737.103652][ T5873] usb 1-1: SerialNumber: syz [ 1737.236447][ T5873] usb 1-1: config 0 descriptor?? [ 1737.679898][T18583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2948'. [ 1737.754296][T10081] usb 1-1: USB disconnect, device number 43 [ 1739.467225][T18613] team_slave_0: entered promiscuous mode [ 1739.473200][T18613] team_slave_1: entered promiscuous mode [ 1739.479722][T18613] vlan2: entered promiscuous mode [ 1739.484923][T18613] team0: entered promiscuous mode [ 1744.286697][ T5873] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1744.548171][ T5873] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1744.559783][ T5873] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1744.569417][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.699679][ T5873] usb 1-1: config 0 descriptor?? [ 1747.146518][ T5873] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1747.546821][ T5866] usb 1-1: USB disconnect, device number 44 [ 1747.561536][ T5873] usb 3-1: config 0 has no interfaces? [ 1747.766627][ T5873] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1747.776155][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.784444][ T5873] usb 3-1: Product: syz [ 1747.788971][ T5873] usb 3-1: Manufacturer: syz [ 1747.793746][ T5873] usb 3-1: SerialNumber: syz [ 1747.869411][ T5873] usb 3-1: config 0 descriptor?? [ 1748.143125][T18670] dummy0: entered promiscuous mode [ 1748.154571][T18670] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1748.168558][T18670] hsr1: entered allmulticast mode [ 1748.173790][T18670] dummy0: entered allmulticast mode [ 1748.179460][T18670] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1748.855450][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1748.864566][T18657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1749.476132][T10081] usb 3-1: USB disconnect, device number 93 [ 1750.015673][ T5873] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1750.256345][ T5873] usb 9-1: Using ep0 maxpacket: 8 [ 1750.325893][ T5873] usb 9-1: config 162 has an invalid interface number: 46 but max is 1 [ 1750.334471][ T5873] usb 9-1: config 162 has no interface number 0 [ 1750.342783][ T5873] usb 9-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1750.356350][ T5873] usb 9-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1750.367527][ T5873] usb 9-1: config 162 interface 46 altsetting 1 has an invalid endpoint descriptor of length 5, skipping [ 1750.379449][ T5873] usb 9-1: config 162 interface 46 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1750.399324][ T5873] usb 9-1: config 162 interface 1 has no altsetting 0 [ 1750.408639][ T5873] usb 9-1: config 162 interface 46 has no altsetting 0 [ 1750.780764][ T5873] usb 9-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be [ 1750.796919][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.807663][ T5873] usb 9-1: Product: syz [ 1750.812101][ T5873] usb 9-1: Manufacturer: syz [ 1750.817064][ T5873] usb 9-1: SerialNumber: syz [ 1751.417645][ T5873] usb 9-1: USB disconnect, device number 17 [ 1752.765802][T10081] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1753.262690][T16612] ===================================================== [ 1753.270766][T16612] BUG: KMSAN: uninit-value in n_tty_receive_buf_closing+0xfe/0x9a0 [ 1753.280104][T16612] n_tty_receive_buf_closing+0xfe/0x9a0 [ 1753.286769][T16612] n_tty_receive_buf_common+0x19d5/0x2540 [ 1753.293228][T16612] n_tty_receive_buf2+0x4c/0x60 [ 1753.299091][T16612] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1753.300486][T10081] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1753.305002][T16612] tty_port_default_receive_buf+0xd7/0x1a0 [ 1753.313779][T10081] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1753.313932][T10081] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.340932][T16612] flush_to_ldisc+0x43e/0xe30 [ 1753.346637][T16612] process_scheduled_works+0xb91/0x1d80 [ 1753.363440][T16612] worker_thread+0xedf/0x1590 [ 1753.372410][T16612] kthread+0xd59/0xf00 [ 1753.379240][T16612] ret_from_fork+0x1e3/0x310 [ 1753.384633][T16612] ret_from_fork_asm+0x1a/0x30 [ 1753.390317][T16612] [ 1753.393221][T16612] Uninit was stored to memory at: [ 1753.399234][T16612] n_tty_receive_buf_closing+0xf7/0x9a0 [ 1753.407401][T16612] n_tty_receive_buf_common+0x19d5/0x2540 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1753.413946][T16612] n_tty_receive_buf2+0x4c/0x60 [ 1753.419660][T16612] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1753.425718][T16612] tty_port_default_receive_buf+0xd7/0x1a0 [ 1753.432323][T16612] flush_to_ldisc+0x43e/0xe30 [ 1753.438013][T16612] process_scheduled_works+0xb91/0x1d80 [ 1753.444296][T16612] worker_thread+0xedf/0x1590 [ 1753.449898][T16612] kthread+0xd59/0xf00 [ 1753.461833][T16612] ret_from_fork+0x1e3/0x310 [ 1753.468659][T16612] ret_from_fork_asm+0x1a/0x30 [ 1753.473876][T16612] [ 1753.476675][T16612] Uninit was created at: [ 1753.481502][T16612] __kmalloc_noprof+0x95f/0x1310 [ 1753.487376][T16612] __tty_buffer_request_room+0x3d4/0x7a0 [ 1753.493440][T16612] __tty_insert_flip_string_flags+0x157/0x6f0 [ 1753.500164][T16612] uart_insert_char+0x368/0x930 [ 1753.505667][T16612] serial8250_read_char+0x1ba/0x670 [ 1753.511333][T16612] serial8250_handle_irq+0x930/0x1110 [ 1753.517225][T16612] serial8250_default_handle_irq+0x116/0x330 [ 1753.523650][T16612] serial8250_interrupt+0xcb/0x400 [ 1753.529314][T16612] __handle_irq_event_percpu+0x11f/0xbf0 [ 1753.535573][T16612] handle_irq_event+0xe0/0x2a0 [ 1753.540761][T16612] handle_edge_irq+0x2a9/0xb50 [ 1753.546150][T16612] __common_interrupt+0x9d/0x180 [ 1753.551626][T16612] common_interrupt+0x94/0xb0 [ 1753.564079][T16612] asm_common_interrupt+0x2b/0x40 [ 1753.571280][T16612] [ 1753.574116][T16612] CPU: 0 UID: 0 PID: 16612 Comm: kworker/u8:30 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(none) [ 1753.587160][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1753.598516][T16612] Workqueue: events_unbound flush_to_ldisc [ 1753.604797][T16612] ===================================================== [ 1753.612248][T16612] Disabling lock debugging due to kernel taint [ 1753.618911][T16612] Kernel panic - not syncing: kmsan.panic set ... [ 1753.625386][T16612] CPU: 0 UID: 0 PID: 16612 Comm: kworker/u8:30 Tainted: G B 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(none) [ 1753.639401][T16612] Tainted: [B]=BAD_PAGE [ 1753.643606][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1753.653736][T16612] Workqueue: events_unbound flush_to_ldisc [ 1753.659698][T16612] Call Trace: [ 1753.663023][T16612] [ 1753.665989][T16612] __dump_stack+0x26/0x30 [ 1753.670411][T16612] dump_stack_lvl+0x53/0x270 [ 1753.675097][T16612] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1753.681055][T16612] dump_stack+0x1e/0x25 [ 1753.685301][T16612] vpanic+0x361/0xc50 [ 1753.689381][T16612] panic+0x15d/0x160 [ 1753.693390][T16612] kmsan_report+0x31c/0x320 [ 1753.697978][T16612] ? __msan_warning+0x1b/0x30 [ 1753.702721][T16612] ? n_tty_receive_buf_closing+0xfe/0x9a0 [ 1753.708558][T16612] ? n_tty_receive_buf_common+0x19d5/0x2540 [ 1753.714558][T16612] ? n_tty_receive_buf2+0x4c/0x60 [ 1753.719672][T16612] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 1753.725131][T16612] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 1753.731271][T16612] ? flush_to_ldisc+0x43e/0xe30 [ 1753.736205][T16612] ? process_scheduled_works+0xb91/0x1d80 [ 1753.742024][T16612] ? worker_thread+0xedf/0x1590 [ 1753.746972][T16612] ? kthread+0xd59/0xf00 [ 1753.751279][T16612] ? ret_from_fork+0x1e3/0x310 [ 1753.756110][T16612] ? ret_from_fork_asm+0x1a/0x30 [ 1753.761147][T16612] ? ret_from_fork_asm+0x1a/0x30 [ 1753.766190][T16612] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1753.772603][T16612] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1753.778810][T16612] ? irqentry_enter+0x30/0x60 [ 1753.783653][T16612] ? common_interrupt+0x5e/0xb0 [ 1753.788700][T16612] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1753.794355][T16612] ? kmsan_get_metadata+0xfb/0x160 [ 1753.799554][T16612] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1753.805459][T16612] ? kmsan_get_metadata+0xfb/0x160 [ 1753.810662][T16612] __msan_warning+0x1b/0x30 [ 1753.815240][T16612] n_tty_receive_buf_closing+0xfe/0x9a0 [ 1753.820925][T16612] n_tty_receive_buf_common+0x19d5/0x2540 [ 1753.826784][T16612] ? _raw_spin_trylock_bh+0x91/0xc0 [ 1753.832230][T16612] ? stack_depot_save_flags+0x35/0x7b0 [ 1753.837967][T16612] n_tty_receive_buf2+0x4c/0x60 [ 1753.842926][T16612] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 1753.848568][T16612] tty_ldisc_receive_buf+0xc6/0x2c0 [ 1753.853862][T16612] tty_port_default_receive_buf+0xd7/0x1a0 [ 1753.859766][T16612] flush_to_ldisc+0x43e/0xe30 [ 1753.864540][T16612] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 1753.871060][T16612] ? __pfx_flush_to_ldisc+0x10/0x10 [ 1753.876344][T16612] process_scheduled_works+0xb91/0x1d80 [ 1753.882042][T16612] worker_thread+0xedf/0x1590 [ 1753.886883][T16612] kthread+0xd59/0xf00 [ 1753.891045][T16612] ? __pfx_worker_thread+0x10/0x10 [ 1753.896297][T16612] ? __pfx_kthread+0x10/0x10 [ 1753.900967][T16612] ret_from_fork+0x1e3/0x310 [ 1753.905629][T16612] ? __pfx_kthread+0x10/0x10 [ 1753.910298][T16612] ret_from_fork_asm+0x1a/0x30 [ 1753.915200][T16612] [ 1753.918554][T16612] Kernel Offset: disabled [ 1753.922921][T16612] Rebooting in 86400 seconds..