last executing test programs: 9.318467549s ago: executing program 1 (id=1205): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sg(0x0, 0xfff, 0x40000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x38, 0x4, @tid=0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r5}, 0x18) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, 0x0, 0x3000d041) socket$kcm(0x10, 0x2, 0x4) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000040)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$procfs(0xffffff9c, &(0x7f0000000300)='/proc/mdstat\x00', 0x0, 0x0) 8.304656243s ago: executing program 1 (id=1207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$inet6(0xa, 0x80000, 0x1) recvmmsg(r0, 0x0, 0x0, 0x120, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, {0xa, 0x0, 0x8, @remote}, r6}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18) close_range(r4, 0xffffffffffffffff, 0x400000000000000) 7.257681125s ago: executing program 1 (id=1208): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="240000005800410f9c00f4f90085b3025cb1fddf08000100050100000800028001000000", 0x24) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x48, r4, 0x221, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x81}, @value=@ver_80211n={0x0, 0x7ae8, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x42, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x9, 0xf23]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x44014) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2e}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x0) 7.00798979s ago: executing program 1 (id=1211): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_macvtap\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x3, 0x1, 0x0, &(0x7f0000000080)=""/37, 0x0, 0x8000000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') dup3(r0, r2, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000001c0)) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) (async) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000003300)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/71, 0x47}], 0x2}, 0xfffff5a5}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/215, 0xd7}], 0x1, &(0x7f00000006c0)=""/230, 0xe6}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/195, 0xc3}], 0x1, &(0x7f0000003480)=""/125, 0x7d}, 0x9}, {{&(0x7f0000000940)=@ieee802154, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/222, 0xde}, {&(0x7f0000001b00)=""/224, 0xe0}, {&(0x7f0000001c00)=""/13, 0xd}, {&(0x7f0000001c40)=""/202, 0xca}, {&(0x7f0000001d40)=""/73, 0x49}], 0x7, &(0x7f0000001e40)=""/53, 0x35}}, {{&(0x7f0000001e80)=@nfc_llcp, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f00)=""/72, 0x48}, {&(0x7f0000001f80)=""/155, 0x9b}, {&(0x7f0000002040)=""/30, 0x1e}], 0x3, &(0x7f00000020c0)=""/237, 0xed}, 0x3}, {{&(0x7f00000021c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/2, 0x2}], 0x2, &(0x7f0000002300)=""/4096, 0x1000}, 0xd}], 0x6, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f0000003300)=[{{&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/71, 0x47}], 0x2}, 0xfffff5a5}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/215, 0xd7}], 0x1, &(0x7f00000006c0)=""/230, 0xe6}, 0x9}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000007c0)=""/195, 0xc3}], 0x1, &(0x7f0000003480)=""/125, 0x7d}, 0x9}, {{&(0x7f0000000940)=@ieee802154, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/20, 0x14}, {&(0x7f0000001a00)=""/222, 0xde}, {&(0x7f0000001b00)=""/224, 0xe0}, {&(0x7f0000001c00)=""/13, 0xd}, {&(0x7f0000001c40)=""/202, 0xca}, {&(0x7f0000001d40)=""/73, 0x49}], 0x7, &(0x7f0000001e40)=""/53, 0x35}}, {{&(0x7f0000001e80)=@nfc_llcp, 0x80, &(0x7f0000002080)=[{&(0x7f0000001f00)=""/72, 0x48}, {&(0x7f0000001f80)=""/155, 0x9b}, {&(0x7f0000002040)=""/30, 0x1e}], 0x3, &(0x7f00000020c0)=""/237, 0xed}, 0x3}, {{&(0x7f00000021c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002240)}, {&(0x7f0000002280)=""/2, 0x2}], 0x2, &(0x7f0000002300)=""/4096, 0x1000}, 0xd}], 0x6, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000300)={0x28, 0x7, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r7}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r7}) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) pipe(&(0x7f0000000080)) 6.811670793s ago: executing program 0 (id=1214): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRESHEX=r1], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002d80)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010002000020000000002500000008000300", @ANYRES32=r6, @ANYBLOB="08002600b41400000a000600ffffffffffff000008003500000000000a00340002020202020200002000508009000100408922a0bd0000000500020009"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00004d7000/0x4000)=nil, 0x4000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) lsm_list_modules(0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 5.89383617s ago: executing program 0 (id=1218): syz_pidfd_open(0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbdc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000300)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0xf0, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d2, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x1b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2}, {0x0, 0x8000000000000, 0x2}, {}, 0x0, 0x203502, 0x2}}, 0xf0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=@newchain={0xe0, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0xb}, {0xfff1, 0xf}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xfc}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x3}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0xa, 0xc0, 0xa9, 0xffffffff}, {0x8, 0x1, 0x9, 0xffffff80}, {0x1, 0xe, 0x80, 0x80000001}, {0x7, 0x6, 0xb, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0xe0}, 0x1, 0xf0ffffffffffff}, 0x0) 5.526520798s ago: executing program 1 (id=1220): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044850}, 0x4008000) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x20008000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 4.509024142s ago: executing program 3 (id=1223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000100001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom(r5, 0x0, 0x0, 0x40, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 4.12853649s ago: executing program 0 (id=1225): open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000200)='./file1\x00') (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0xeb54, 0xc, 0xff00, 0x41, 0x0, 0x6, 0xfffffffffffffffe, 0x9, 0xd303}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=', @ANYRESHEX, @ANYBLOB=',msize=0x0000000000001000']) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x77, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x92, 0x80, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "c934"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0xfffd, 0x5}, {0x6, 0x24, 0x1a, 0x2c6, 0x10}, [@dmm={0x7, 0x24, 0x14, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x3, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xb, 0x5, 0x1}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x3, 0x20, 0xc0, 0x40, 0xf2}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x2, 0x9, 0x80}]}, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40b}}, {0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="6603608c314aa532ebbc600991395f6dd579e6326ee242131b69909ec0f107e6db07dc8a7a240e1a5b8f9548da8240a3199277c6c2426979145c805439cd597d865888c42804bf7a70898a6fb600000000000056796301deb00f8ff6faf3cc142109e1e722a0e7180dbdee30d0ef0127fd3826e2655b69fe8b8896c29f771fd2fc31e934266930924675e1a11a13c47a6fe23ec96315d16d74b55b911b5936515595f171a9105de8d8"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xeb, &(0x7f0000000700)=@string={0xeb, 0x3, "8a9efe3dd08452da4ed2d918192733b310ad54200166f04d910e38a7396e5afcf8c4f726c908916cc8563692b5a32c2cd809c437eb05922926675e5e59d20bd1bc0852728093b17c89af4318caf6222d4710724d16c9fd35156239e5e296ffd1c383cb8f4c74b9ff2199417378684d1993de52617ce8a4500a75a0108bb6aa652227adfc3097c2e9e0a18f0a5c124cffcfba5c805e91b56061e5e44130f6b4fd667b15a56b6d2d9de2dac1163b51ae7400243bcac674520c55d7444434347e5985db9ff34b0a9383dc55ccff85a9ccb0287eed3da3b7b5eebbc166d9c1bbb5c6a601917e8bb50c040b"}}]}) (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000600)={0x2, @win={{0x70e74dec, 0x5, 0xfd, 0x1}, 0x6, 0x5, &(0x7f0000000040)={{0x6, 0x80, 0x4, 0x40}, &(0x7f0000000000)={{0x10, 0x1, 0xb, 0x8}}}, 0xdf84, &(0x7f0000000080)="e722ac1fd5bf621a63d05f7ff4c91424433a0000000000000000c5485cd52109b0c1cf816ea80886aa7cef45b2c2bfa591dbd37c2d08eee8982a5b60e79a26f2872e2414354d7814323a63aedb4c09f4199ea73b7f74c4b51c5cbc9afd3282653d57b8bc5eb4dd4685f02ae42c97d2fb31dfc3f7ef4d6cb56d212485d33644c5da95ac2f6697872b8345a1310bc711024d2f78aae9", 0x2}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000400)=0x8) 3.434919938s ago: executing program 1 (id=1227): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000480)={0x40, 0x12, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x40, 0x12, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x16, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0}) 3.383576763s ago: executing program 2 (id=1228): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a76cf820d0062206f870010203010902240001000010000904b70002e266f200090502021002020000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) capset(&(0x7f0000000000), &(0x7f0000000280)={0x0, 0xfffffffe, 0x0, 0x81, 0xffffffff, 0xfffffffd}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x2b, 0xfffffffe, 0xa22e, "74a270ee6344e41e2ff7e33a210a48b2f2a3d6a2f383f2d4116054279fe829c8250ef4947fbdd7fb0fa95f"}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x281) (async) syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000a76cf820d0062206f870010203010902240001000010000904b70002e266f200090502021002020000090582020002"], 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) capset(&(0x7f0000000000), &(0x7f0000000280)={0x0, 0xfffffffe, 0x0, 0x81, 0xffffffff, 0xfffffffd}) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x2b, 0xfffffffe, 0xa22e, "74a270ee6344e41e2ff7e33a210a48b2f2a3d6a2f383f2d4116054279fe829c8250ef4947fbdd7fb0fa95f"}) (async) 3.185222458s ago: executing program 3 (id=1230): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000000000000000000000000000a64b0f625651f68dff8a690861397f11b248469f5cb4d9d2aba81ba07bdc9a6b1eede8b04fd42523226a4b7a9c4ed5f5b546a8049e9dc750471533ddd0d536b0561756370a987cf66e8ccd53ec086259a76c43452fcab5b1dc9b66ab93053e72473d31cde220879d2ca791fe633d13bbdc41e967742524c73ecd98130d4323d46d21ccd2d648d3ff459a0cd90db7d28a1aacfd08cccfd70ce78edc6e251bfd3fa619e9d8cfdfcb8b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1d) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/14, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x3, 0x2, 0x9, 0x7, 0x8, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x9, &(0x7f00000005c0)=""/185) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0xa8c02, 0x101) mount(0x0, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) unlink(&(0x7f0000000140)='./cgroup\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf251200000018000180140002006d6163766c616e310000000000000000459f0ae40ad3d5c6c2c15ce0760e893f0cf04fab5e296a63da3dc8b19614a6472826cfac0cabc62e74ea6b5564d2ab1b8169253d2f251f71604768be68c16fa92845b4a6403f4374fa0596659951f03cff0cf88159034c82bdf08702e626d6520e057501f26519b7ad949b928b1a22948aad164c19e27c338054e7da36d72995ddbd87b6727231de554a4bcb67e2daf35cee545c623cb68767a16733730661eda2bcae88e7bfa5621c6f47095f23bbad00025b84ca0623c5d8c1e8e0761545426daa10e811ad1b6958268490f98d6dc1d80ba05cc59d9d2a4e65c7074a738daf5f8ba6a6618368cc934809"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) 3.019877307s ago: executing program 3 (id=1232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = socket$qrtr(0x2a, 0x2, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0xc0) syz_fuse_handle_req(r3, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x80, 0x10, 0x0, {0x3, 0x80000000, 0x1000, 0x1, 0x2, 0x6, 0x80000000, 0xb, 0xe26, 0x2000, 0x5, 0x0, 0x0, 0x300, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r7, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) sendmsg$qrtr(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2a, 0x0, 0xfffffffe}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="af5c1a482fa4151824ccdb1112f1", 0xe}], 0x2, &(0x7f0000000280)=[{0x40, 0x15e, 0x4000004, "622eae0b8088d43fb086e31ba21b535e445c426d1fad1a109252e714b283d5f68ec14e96ac2bbc4ea7ece14b0d"}, {0xb8, 0x0, 0x8, "6a144a85a54282c1b20da3db338d943c5044ab07c269d9fa2161bb33b58c43067c845a3f2298f8a6bab81c1eac466fe3b1f21452a981f3ee67405e6890c571a772440d7c9add73ff1a088f5ca4c4381ce8e24fc14d5304cf1f2801424094fddc3dfea89d7649dfed6b96c0d178fefdf593525185292720a5167b40a686502265c20d5c3a151d6ca7eefbb9d5aed0e3200804386b913bb52f5f828bfc24693409e7c0"}, {0x50, 0x10f, 0x69, "37eee7386492d0cf9022e8418fa285eae1a5001185261be0a407dca17ae0cccd39dd5d668d6ff1f48dfed2f2a739174b89c9765eb6beb86c62d78aec8699"}, {0xc0, 0x110, 0x80, "888a5f7e1416d0e82f9ec87d7ffbbed9f4cba092b422aeb12819bd144b742535a423ae95517dcae18d79b5a574e718596b213b9ee61af5a75b7c4ecd731fabab054834a1f62c532498bc1241a93a98262cf0c0a9d26c2b3001bfd2be0347760c3da81463b44ce7ac10697e1c5e05562695410aad222942aa43c7705f2f6e165a86ca6f8b10d48a3f5fe54fc1fc30757f9d6f6b2d5424c5f914c9ff1eb47485a2c43ef6c4b80d40bb5983494a"}, {0x58, 0x6, 0x9b4, "3062d410a446e0fc5b59faa5fd11216794cd150ec8af4df6f6f180de8d6258b1cec871b629aa0bf690c2f12216e3fc83aefc54869b12f3a49f39439d3ab0e16b30a3"}, {0x38, 0x108, 0x7fffffff, "7a4bf8f1734b1f4b4e0ee6be61e66f6e04606b932c32635c0414e901f589332171"}], 0x298, 0x800}, 0x38) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0xd0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000000100000811000009000000b0900100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="ef6bfac8737f1c507854a7d339f7c31efd2286b1f1668092a912f468796e0a9ab9dce69272fe07077f6ad6e767f45fb150de3c8dd59c9daeae7d40d90a52cff38f9fb3b00466145c53848e0f7f0d2a8a45f5048ccb27a9a422c5a564dff0d8f97b7c88e40ba46b361b08bd82ed4cbb8cfc50678d26ca6d3dc4b329bff69cac3c2b0660f798995a1700c4dbd0c5981b4d4203a39cea033c5625749d37dbb6f4bcf72ac6091d0be85656c7"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r7}, 0x38) bind$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0xd4, 0x0, 0x0, 0x6}, 0x6, 0x18000000, &(0x7f0000000300)={{0x0, 0x100000}}, 0x2, 0x0, 0x80}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)=0xa00) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000000000042bfa30000000000001602000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000260404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000005b000000b700000000000000950000000000000063e165cd844a954b26c933db8e175e097efb3f55bb2007ee51050512b5b42128aa090a79507df79f2d8129cf487130d5f24bf901115e17392ac66ad029d1c08a2c6146101e04aeacea799a22a2fa798b5adc436b27d53337e5003e4be7f8000000000000dbc2777df150b70639e25b7496cb8dcdd77b85b94109a314fd0840028f2ed1a4535550614e09d6378198a60978670838337af2abd55a87ac0394b2f82ffab7d153d62058d0a413b2173619ccf55520f22c9cb6712f3024b7041b1df65b3e1b9b31f154e89d485b1f7fc09a30f115646d14ce53d13d0cca00a1efc54fa737c28b994a8512c816fdcceaede3faedc51d29a47ffeffffff00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804dc5fa778100000000000000488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a7c2211fe4fd21a18986252a70f8f92eb6f0e8c7db35036865445971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f8d791fa99dac06b57479321a0574fb304bc2a168aa43328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20faf791ec85821d0c48fb657c29b302b0d2277b44af326f36f3e2c25a61ec45c3af97a8f17da954a9b34f79908755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d4100d8bda74d66f47cc180f82c5f573c6d294d1665016ac59de637b30824d822133a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da3239acad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389c69608241730459f0123fd383d5612ff0230dc6eb55e9d46de56ef907b059b905c0289afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5826236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d949a3564cb778f54334354ec2697a03aff14a9aa4bd908a99494a65044dd539f5096412b926b2e095b84000243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c3630eeaebde922320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000000000000001c80000000000000000000000091bee53595a779d243ac8cea769b10424d28804c026ab7f4a0281921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee8f8a836804ed3a1079b0282a12043408cd600087dc0dd22b634350761b9867682e11d94fff91af19f2f8df175d60a2892e456f5f4042bd13da2022f23daec61854f640f703db027665006e74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfac92e6de9200000000a1f6c5572a9ee7f7c8a5098600000000009ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009d9c209644bb1cb603cd60a9e241435fe82d5a96b09c68c73de2f04f15d0053875732f2258aea65559eb00e76e9d092a2a60ca770663da451080cc36000906d5a9fad98c308e89bd5ffb6151d79c1cee1cdfba05e3633becd937d7a15762e5f5a3a0bc33fdbe28a0800000000000000c92fe7f791e8f6029309508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd43758624600e78f4458542b14f29611f95d4a2aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6820b6ec96280000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000000000000000000091e12aacf2ed9ee91cc82777c6a0da37e0219260f2944eb77cb7a20ab7ebcc2fbe2a986be27eacc454147267b05cba055cda2a57efefcb9a8761bc052bbb7f4167245753d31e7c1120a886bdf372ce255ca3c2aa8b0ebe42924db5d6d81e9b1514172e2f3fb1b46a1f7561b65c265b742d792d4f572d860718b5d9e94631657021612f6c974d10769e47575509bfe2d6ffa6cae835b0f492d32d12116c95e0b3b31713c20beae2dd340d7b67c3bed62b682a12363608d736289610fa01000000010000000d6f033f8438b57cedf532ee34e42b4041a682f54dc7b57200762d45724151014b733d497190f9ab3d5bab1f0635025ba9baa3a09b886e08c6bbd6e158f8e1c4ead2dc5bb4e2976a8383d8e415149455dc78439ae1b026ef03dfaa1f197a3b8ee7fcd1e39f5600a5c978584f97df1aed893821775c9b762f5acd2bf9a0eb18215ff90fe336bd75d3e8f704662d4084fa582afdd73d23546ae0abb118bdde3f4d08661e7937b8631e7439bf23618d3f7ab482dde3249f42e660496098f30e38e152ead80d7291b54da4a3b08b8fd7ddaa830ec5933a0a674334b8d4269e425b9fa0255f3ba988cfd9ae6ed8154b633a0f108f3245d3a0212586e6c5762db4076d9ee42836d3000000000033baf08867c22a29335ab8976219d500c855a5642fd6539bac21f429e40740cd4c5ba3cb49da499c1a2c6bfb6b0e2e8d168bcb79f8054de46aeaf1d44c1f0958f24a93b88ac8d146afb94977527721e16dcfe4e014ee5a503cfe6ea2ed7fad0e83056941507016489f38643c128f5f37b453d811b185551bbd08336abed54a0e2419b1a0e53214dd296d152cf82f42472bf1fd52a22efdd111977d3cf6f20e942df77792fda2c99bee3175defd519b4fae37fc1fe86ed99335ef2ed821c64af516ac03585ec43071f5cc6030cf855b7e5d725aa8e9b7bf6d7b27a4e4e2fb2ed2501e5ce4435f8cbc0ad746c1b60d60f23d892939c96f750cd71824142404c26992c49c916b82bbc81c8d93c537c3c38cd58d0b4a64ddf9c55a7506c8cce89ff51c8ad5e63d1e2d1fd945635c130b4ad0dbcead5ec8cb3be6a0a82cef44e31148d94bd7edc9e94a4e295f1743754a5ee9f444a10838"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff4d}, 0x48) 2.784803721s ago: executing program 3 (id=1236): syz_usb_connect(0x2, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x37, 0x8e, 0x78, 0x40, 0x1781, 0x938, 0x8893, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x56, 0x8, 0x2, 0xfd, 0x9e, 0x33, 0x9, [], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x2, 0xc, 0x2}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg(r1, &(0x7f000000e2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x37, 0x8e, 0x78, 0x40, 0x1781, 0x938, 0x8893, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x56, 0x8, 0x2, 0xfd, 0x9e, 0x33, 0x9, [], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x4, 0x200, 0x2, 0xc, 0x2}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) sendmmsg(r1, &(0x7f000000e2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c1) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) (async) 2.388127205s ago: executing program 0 (id=1237): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x24, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044850}, 0x4008000) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x20008000}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff) 1.910139126s ago: executing program 2 (id=1238): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) munmap(&(0x7f0000bff000/0x400000)=nil, 0x400000) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x12100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) munmap(&(0x7f0000bff000/0x400000)=nil, 0x400000) (async) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x12100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) 1.681387707s ago: executing program 2 (id=1239): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x401}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 1.348146919s ago: executing program 2 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x200440cc}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.311812656s ago: executing program 4 (id=1241): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)='\x00', 0x1}, {0x0}], 0x43) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) syz_io_uring_setup(0x422a, &(0x7f0000000340)={0x0, 0xd449, 0x40, 0x400001, 0x233}, &(0x7f0000000040), &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.285516521s ago: executing program 3 (id=1242): syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/85, 0x0}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af04, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000009500000000000020bf91000000000000b7020000000000008500000004000000b7000000000000009500"/96], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x10ba, &(0x7f0000001180)={0x0, 0x59d6, 0x80, 0x2, 0x24c}, &(0x7f0000000200), &(0x7f0000001200)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000002d40)={0x7}, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102) mount(0x0, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r3) unlink(&(0x7f0000000140)='./cgroup\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) 929.975278ms ago: executing program 2 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) fstatfs(0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0xb, 0x8}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x70, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x1000, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4cae6073803c179c}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x19}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4014) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c000280080005400000000408000140000000010800024000004f0208000b40000000000900010073797a30"], 0xc8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x5, &(0x7f0000000340)=[{0x0, 0x77, 0x9}, {0x3ff, 0x0, 0x3, 0x7}, {0xbb8, 0x9, 0xa3}, {0x20, 0x9, 0xb, 0xcc}, {0x7, 0x6, 0x21, 0xcf}]}) 521.749643ms ago: executing program 0 (id=1244): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xc, 0x8, 0x6}) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000040)) syz_emit_ethernet(0xf3, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @local, @val={@void, {0x8100, 0x7}}, {@llc_tr={0x11, {@snap={0x0, 0xab, "d273", "d34b98", 0x22eb, "35d1435f8d6328e684c7b37167fef11f86c57dac281fcd58ab9c382d77f86dfa84645749d022102be55cb0f4905d5abc7fdca46213d157082023be9437c00f3f93d58e812376f986dd9d84ea95597f1c635f375888db7718056cf93b2f36f3e42128b5fd78adc2a6a25bb9fa133ee49b06b08953ca99892bcd3688c126bd151ddc85cf4f1204c6ae7ddc4dc48b66b96be8421c7d0f9316ec9185e9dc7ae1107304969aa3e653edc083cc13ccbb25be223b79b75cf37828b5eff4698c987febc5b14497435b980f6057ba5a53be0e48593c846b1a613ded41"}}}}}, &(0x7f00000001c0)={0x1, 0x3, [0x539, 0x433, 0x980, 0xc3c]}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0xb, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x1, 0x6}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10}, {0xa, 0x4}]}, @enum64={0xb, 0x6, 0x0, 0x13, 0x0, 0x2, [{0x1, 0x4d29, 0xbd05}, {0x2, 0x7, 0x6f5}, {0x5, 0xffffffff, 0x5}, {0xf, 0x1, 0x1}, {0x5, 0xb, 0x8}, {0x5, 0x8, 0x2}]}, @enum64={0x2, 0x7, 0x0, 0x13, 0x0, 0x4, [{0xc, 0x4bd000, 0x2}, {0x6, 0x1000, 0x4}, {0xc, 0x9}, {0x1, 0x1, 0xbed9}, {0xe, 0x9, 0x7}, {0xc, 0x7, 0x1000}, {0x1, 0x9, 0x6}]}, @enum={0xe}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x9, 0x400}]}, @fwd={0x3}]}, {0x0, [0x5f, 0x51, 0x5f, 0x0, 0x0, 0x30, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000340)=""/66, 0x12f, 0x42, 0x1, 0x1}, 0x28) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x108, r3, 0xba359f331196a2f0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6112}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbea}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x108}, 0x1, 0x0, 0x0, 0x40040d0}, 0x24000011) r4 = accept$ax25(r1, &(0x7f0000000640)={{0x3, @rose}, [@rose, @bcast, @netrom, @bcast, @default, @default, @null, @bcast]}, &(0x7f00000006c0)=0x48) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000700)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000007c0)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x7, 0x1, 0x1a, 0x0, r1, 0x4, '\x00', 0x0, r1, 0x0, 0x1, 0x2, 0x4}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000940)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r8, 0x40305652, &(0x7f0000000980)={0x1, 0x3, 0x80000001, 0x900000, 0xfff, 0x2, 0x1000}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000009c0)={r2, 0x4, 0x0, 0xffff}) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc1c1}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2518}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r1) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r10, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe36, 0x16}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c890) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000c80)={0x41, 0x2}, 0x10) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000cc0)) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000d00)) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r12, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r13, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r14, 0x7e2c31eb3168ff86, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffa3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000000f80)={0xf3, 0x16, 0x8}) 431.242248ms ago: executing program 2 (id=1245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0xfffffffa, 0x2, 0xc, 0x4, 0x9, 0x8e, 0xffffffff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 383.899831ms ago: executing program 3 (id=1246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = socket$qrtr(0x2a, 0x2, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000006000000010000007f00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0xc0) syz_fuse_handle_req(r3, &(0x7f0000004900)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x78, 0x0, 0x0, {0x80, 0x10, 0x0, {0x3, 0x80000000, 0x1000, 0x1, 0x2, 0x6, 0x80000000, 0xb, 0xe26, 0x2000, 0x5, 0x0, 0x0, 0x300, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r7, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, 0x0) sendmsg$qrtr(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2a, 0x0, 0xfffffffe}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="af5c1a482fa4151824ccdb1112f1", 0xe}], 0x2, &(0x7f0000000280)=[{0x40, 0x15e, 0x4000004, "622eae0b8088d43fb086e31ba21b535e445c426d1fad1a109252e714b283d5f68ec14e96ac2bbc4ea7ece14b0d"}, {0xb8, 0x0, 0x8, "6a144a85a54282c1b20da3db338d943c5044ab07c269d9fa2161bb33b58c43067c845a3f2298f8a6bab81c1eac466fe3b1f21452a981f3ee67405e6890c571a772440d7c9add73ff1a088f5ca4c4381ce8e24fc14d5304cf1f2801424094fddc3dfea89d7649dfed6b96c0d178fefdf593525185292720a5167b40a686502265c20d5c3a151d6ca7eefbb9d5aed0e3200804386b913bb52f5f828bfc24693409e7c0"}, {0x50, 0x10f, 0x69, "37eee7386492d0cf9022e8418fa285eae1a5001185261be0a407dca17ae0cccd39dd5d668d6ff1f48dfed2f2a739174b89c9765eb6beb86c62d78aec8699"}, {0xc0, 0x110, 0x80, "888a5f7e1416d0e82f9ec87d7ffbbed9f4cba092b422aeb12819bd144b742535a423ae95517dcae18d79b5a574e718596b213b9ee61af5a75b7c4ecd731fabab054834a1f62c532498bc1241a93a98262cf0c0a9d26c2b3001bfd2be0347760c3da81463b44ce7ac10697e1c5e05562695410aad222942aa43c7705f2f6e165a86ca6f8b10d48a3f5fe54fc1fc30757f9d6f6b2d5424c5f914c9ff1eb47485a2c43ef6c4b80d40bb5983494a"}, {0x58, 0x6, 0x9b4, "3062d410a446e0fc5b59faa5fd11216794cd150ec8af4df6f6f180de8d6258b1cec871b629aa0bf690c2f12216e3fc83aefc54869b12f3a49f39439d3ab0e16b30a3"}, {0x38, 0x108, 0x7fffffff, "7a4bf8f1734b1f4b4e0ee6be61e66f6e04606b932c32635c0414e901f589332171"}], 0x298, 0x800}, 0x38) r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x120c00, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x34}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x5, 0x1, 0x0, "af431db6fdc66da16efe0577c6cb24e7ea91591beb5517e164f2ebd83fd0415b", 0x34524742}) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x94}}, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000c4190000000000000000000000000000000000000000000000000f", [0x0, 0x2000000000001]}}) 269.466656ms ago: executing program 4 (id=1248): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b003e6d00000000000000000080040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x5, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x3a}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) r3 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0xb2df, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 96.012978ms ago: executing program 4 (id=1249): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1401000000000000000008000000000085568d8e"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000700)={0x198, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd0fb}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xac}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "05ee94174e7a0759c39de38d395190679f54e9daef"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e748b7d033f50e7c883d29050ce4356d351adebe9b397f15545b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "e8c8af32f92ef6e6f85e33ca2eb17a4c04907cc0c39a"}}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xec}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6d58}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc6d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x15}, 0x20004014) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) (async) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000340)={0x9, 0x7, &(0x7f0000000140)=[0x4, 0x1, 0x0, 0x600, 0x0, 0x10, 0x5], &(0x7f00000001c0)=[0x1, 0x3], &(0x7f0000000280)=[0xffff], &(0x7f0000000300)=[0xd53a]}) (async) sendto$inet6(r0, &(0x7f0000001300)="921e", 0x2, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4040, 0x9, @empty, 0x6}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) (async) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0xd}, 0xc587}, 0x1c) writev(r6, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 0s ago: executing program 4 (id=1250): socket(0x10, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x101000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0xdddd1000, 0x4000, 0x1}) r4 = socket(0x1f, 0x4, 0xe74) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f0000000480)=0xc) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x75, 0x47504a4d, 0x3, @stepwise={0xb, 0x9, 0x3, 0x8, 0x6, 0x1}}) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): f8dc218ebe9 code=0x7ffc0000 [ 213.719269][ T30] audit: type=1326 audit(1755958704.486:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7536 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dc218ebe9 code=0x7ffc0000 [ 215.126839][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 215.577466][ T10] usb 5-1: device descriptor read/64, error -71 [ 215.966499][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 216.295860][ T10] usb 5-1: device descriptor read/64, error -71 [ 216.370791][ T7600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.433'. [ 216.405471][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 216.405490][ T30] audit: type=1326 audit(1755958709.248:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7586 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16b2d8ebe9 code=0x7fc00000 [ 216.455887][ T10] usb usb5-port1: attempt power cycle [ 216.549940][ T7602] syzkaller1: entered promiscuous mode [ 216.586149][ T7602] syzkaller1: entered allmulticast mode [ 217.000171][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 217.008671][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 217.039158][ T10] usb 5-1: device descriptor read/8, error -71 [ 217.235315][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 217.335223][ T7623] netlink: zone id is out of range [ 217.340738][ T7623] netlink: zone id is out of range [ 217.346202][ T7623] netlink: zone id is out of range [ 217.351586][ T7623] netlink: zone id is out of range [ 217.356821][ T7623] netlink: zone id is out of range [ 217.362032][ T7623] netlink: zone id is out of range [ 217.367273][ T7623] netlink: zone id is out of range [ 217.372512][ T7623] netlink: zone id is out of range [ 217.378169][ T7623] netlink: zone id is out of range [ 217.383454][ T7623] netlink: zone id is out of range [ 217.566369][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.585052][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.596853][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.624966][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.636421][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 217.646396][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.654558][ T10] usb 5-1: device descriptor read/8, error -71 [ 217.661031][ T9] usb 1-1: Product: syz [ 217.666391][ T9] usb 1-1: Manufacturer: syz [ 217.671188][ T9] usb 1-1: SerialNumber: syz [ 217.695299][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 217.716430][ T9] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 217.723075][ T9] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 217.788312][ T10] usb usb5-port1: unable to enumerate USB device [ 217.835735][ T7627] binder: 7626:7627 ioctl 894c 200000000040 returned -22 [ 217.845042][ T7627] binder: 7626:7627 ioctl c0306201 200000000080 returned -22 [ 218.003054][ T5969] usb 1-1: USB disconnect, device number 15 [ 218.219715][ T43] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 218.335546][ T43] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.664439][ T43] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 218.836377][ T43] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 218.863493][ T43] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 218.926869][ T43] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 218.941400][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.964046][ T43] usb 3-1: Product: syz [ 218.971938][ T43] usb 3-1: Manufacturer: syz [ 218.983614][ T43] usb 3-1: SerialNumber: syz [ 219.103415][ T7656] ubi31: attaching mtd0 [ 219.147069][ T7656] ubi31: scanning is finished [ 219.207788][ T43] usb 3-1: USB disconnect, device number 10 [ 219.239201][ T7661] gtp0: entered promiscuous mode [ 219.259586][ T7661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.449'. [ 219.308184][ T7656] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 219.332880][ T7657] ubi31: attaching mtd0 [ 219.345999][ T7657] ubi31: scanning is finished [ 219.445855][ T7657] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 219.458532][ T7657] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 219.471488][ T7657] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 219.498926][ T7657] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 219.516812][ T7657] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 219.522836][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.534115][ T7657] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 219.544259][ T7657] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 303027786 [ 219.554951][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.562915][ T7657] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 219.578557][ T7666] ubi31: background thread "ubi_bgt31d" started, PID 7666 [ 219.744090][ T43] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 219.959984][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 219.967909][ T43] usb 5-1: can't read configurations, error -71 [ 220.325949][ T7689] netlink: 'syz.2.456': attribute type 21 has an invalid length. [ 220.334773][ T7689] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.000493][ T10] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 221.053546][ T10] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.448747][ T5962] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 221.561175][ T7701] netlink: 'syz.1.461': attribute type 4 has an invalid length. [ 221.581149][ T7701] netlink: 17 bytes leftover after parsing attributes in process `syz.1.461'. [ 221.637198][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 221.671084][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.713693][ T5962] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 221.745488][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.776023][ T5962] usb 3-1: config 0 descriptor?? [ 222.005622][ T7696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.024599][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 222.035236][ T7696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.041235][ T7710] team0: Port device batadv1 added [ 222.616538][ T5962] logitech-hidpp-device 0003:046D:C262.0010: item fetching failed at offset 0/3 [ 222.647341][ T5962] logitech-hidpp-device 0003:046D:C262.0010: hidpp_probe:parse failed [ 222.667821][ T5962] logitech-hidpp-device 0003:046D:C262.0010: probe with driver logitech-hidpp-device failed with error -22 [ 222.717793][ T5962] usb 3-1: USB disconnect, device number 11 [ 223.002491][ T7729] /dev/nullb0: Can't open blockdev [ 223.162233][ T5921] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 223.387862][ T5921] usb 5-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 223.409852][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.464564][ T5921] usb 5-1: config 0 descriptor?? [ 223.603250][ T7733] netlink: 'syz.1.471': attribute type 10 has an invalid length. [ 223.614821][ T7733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.624602][ T7733] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 223.792087][ T5962] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 223.872407][ T5969] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.894871][ T5921] pwc: Creative Labs Webcam 5 detected. [ 223.954781][ T5962] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 223.963313][ T5962] usb 3-1: config 0 has no interface number 0 [ 223.969884][ T5962] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.982713][ T7739] ªªªªªª: renamed from vlan0 (while UP) [ 223.988971][ T5962] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 224.004422][ T5962] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.016973][ T5962] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 224.026445][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 224.034660][ T5969] usb 2-1: Using ep0 maxpacket: 8 [ 224.051509][ T5962] usb 3-1: Product: syz [ 224.056443][ T5962] usb 3-1: SerialNumber: syz [ 224.063375][ T5969] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.081962][ T5962] usb 3-1: config 0 descriptor?? [ 224.087272][ T5969] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 224.115598][ T5962] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 224.125586][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.144602][ T5962] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 224.162970][ T5969] usb 2-1: config 0 descriptor?? [ 224.231605][ T5921] pwc: Failed to set LED on/off time (-71) [ 224.238020][ T5921] pwc: send_video_command error -71 [ 224.250987][ T5921] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 224.266380][ T5921] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 224.301585][ T5921] usb 5-1: USB disconnect, device number 20 [ 224.793668][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.802054][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.809176][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.816368][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.824360][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.831514][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.838660][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.845834][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.852993][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.860143][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 224.861983][ T9] usb 3-1: USB disconnect, device number 12 [ 224.867085][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 224.870744][ T5969] usbhid 2-1:0.0: can't add hid device: -71 [ 224.901337][ T5969] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 224.921911][ T5969] usb 2-1: USB disconnect, device number 14 [ 225.023501][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 225.102115][ T5921] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 225.140732][ T5921] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.466694][ T7754] binder: Unknown parameter '@' [ 225.487846][ T7754] netlink: 228 bytes leftover after parsing attributes in process `syz.4.477'. [ 226.755428][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.481'. [ 227.171735][ T7769] syz.0.481 (7769) used greatest stack depth: 16904 bytes left [ 228.555297][ T7784] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.581829][ T5961] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 228.595532][ T7784] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.610193][ T7784] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.616476][ T7784] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.082667][ T7784] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.741144][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 229.931543][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 229.965057][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 229.978353][ T9] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 229.992130][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.033024][ T9] usb 4-1: config 0 descriptor?? [ 230.053958][ T5921] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 230.150738][ T5921] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 230.221305][ T7811] loop8: detected capacity change from 78 to 79 [ 230.248946][ T9] holtek 0003:1241:5015.0013: unbalanced collection at end of report description [ 230.278023][ T9] holtek 0003:1241:5015.0013: parse failed [ 230.304886][ T9] holtek 0003:1241:5015.0013: probe with driver holtek failed with error -22 [ 230.408672][ T5840] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 230.445364][ T9] usb 4-1: USB disconnect, device number 12 [ 230.598444][ T5840] usb 5-1: Using ep0 maxpacket: 16 [ 230.605541][ T5840] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 230.618432][ T5840] usb 5-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 230.629981][ T5840] usb 5-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 230.642548][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 230.642627][ T5840] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 230.668404][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 230.674494][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.681154][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.687403][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.719142][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.727229][ T5840] usb 5-1: Product: syz [ 230.732368][ T5840] usb 5-1: Manufacturer: syz [ 230.737118][ T5840] usb 5-1: SerialNumber: syz [ 231.417830][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.454242][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.474285][ T7835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.490073][ T7835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.502419][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 231.536709][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 231.558990][ T7837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'. [ 231.573895][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 231.584657][ T7837] netlink: 'syz.1.502': attribute type 6 has an invalid length. [ 231.590592][ T7844] netlink: 176 bytes leftover after parsing attributes in process `syz.2.505'. [ 231.602148][ T7839] netem: incorrect ge model size [ 231.607673][ T7839] netem: change failed [ 231.613414][ T7835] netem: incorrect ge model size [ 231.619421][ T7835] netem: change failed [ 231.647925][ T5969] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 231.800262][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.812829][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.856780][ T5969] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 231.866124][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.867804][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 231.883366][ T5969] usb 4-1: config 0 descriptor?? [ 232.028155][ T5840] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 232.036885][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 232.044382][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.057921][ T9] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 232.067071][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.075382][ T9] usb 1-1: Product: syz [ 232.079893][ T9] usb 1-1: Manufacturer: syz [ 232.084788][ T9] usb 1-1: SerialNumber: syz [ 232.089578][ T5921] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 232.097302][ T5969] usbhid 4-1:0.0: can't add hid device: -71 [ 232.100793][ T9] usb 1-1: config 0 descriptor?? [ 232.105430][ T5969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 232.123483][ T5969] usb 4-1: USB disconnect, device number 13 [ 232.123913][ T9] usb 1-1: bad CDC descriptors [ 232.140866][ T9] usb 1-1: unsupported MDLM descriptors [ 232.187994][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 232.197646][ T5840] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 232.206965][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.215031][ T5840] usb 2-1: Product: syz [ 232.219407][ T5840] usb 2-1: Manufacturer: syz [ 232.224026][ T5840] usb 2-1: SerialNumber: syz [ 232.233919][ T5840] usb 2-1: config 0 descriptor?? [ 232.243439][ T5840] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 232.261415][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 232.273232][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 232.284460][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 232.295708][ T5921] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.308650][ T5921] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.317869][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.336099][ T5921] usb 3-1: config 0 descriptor?? [ 232.342261][ T7862] raw-gadget.6 gadget.2: fail, usb_ep_enable returned -22 [ 232.423933][ T5969] usb 1-1: USB disconnect, device number 16 [ 232.442982][ T5840] gspca_sn9c2028: read1 error -32 [ 232.449628][ T5840] gspca_sn9c2028: read1 error -32 [ 232.455726][ T5840] gspca_sn9c2028: read1 error 0 [ 232.461067][ T5840] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -5 [ 232.656457][ T5961] usb 2-1: USB disconnect, device number 16 [ 232.755899][ T5921] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 232.775952][ T5921] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 233.142670][ T5840] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 233.235148][ T5921] usb 5-1: USB disconnect, device number 21 [ 233.364935][ T5840] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 233.393171][ T5840] usb 4-1: config 0 has no interface number 0 [ 233.415046][ T973] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 233.435437][ T5840] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 233.467776][ T973] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz1] on syz0 [ 233.490369][ T5961] usb 3-1: USB disconnect, device number 13 [ 233.598510][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.932937][ T5840] usb 4-1: Product: syz [ 233.937257][ T5840] usb 4-1: Manufacturer: syz [ 233.950773][ T5840] usb 4-1: SerialNumber: syz [ 233.959441][ T5840] usb 4-1: config 0 descriptor?? [ 233.986778][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 234.177615][ T5840] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 234.201462][ T5840] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 234.227342][ T5840] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 234.236172][ T5840] usb 4-1: media controller created [ 234.253833][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.297674][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 234.312386][ T9] usb 2-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 234.323356][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.347264][ T9] usb 2-1: Product: syz [ 234.351481][ T9] usb 2-1: Manufacturer: syz [ 234.593902][ T9] usb 2-1: SerialNumber: syz [ 234.637705][ T5840] DVB: Unable to find symbol dib7000p_attach() [ 234.644625][ T9] usb 2-1: config 0 descriptor?? [ 234.654271][ T5840] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 234.672959][ T9] ums_eneub6250 2-1:0.0: USB Mass Storage device detected [ 234.680566][ T5840] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 234.693071][ T5840] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 235.825261][ T5840] usb 4-1: media controller created [ 237.070795][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 237.266066][ T5840] dib0700: the master dib7090 has to be initialized first [ 237.273245][ T5840] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 237.333810][ T9] usb 2-1: USB disconnect, device number 17 [ 237.362764][ T7904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.519'. [ 237.475713][ T7910] input: syz0 as /devices/virtual/input/input17 [ 237.704918][ T5840] rc_core: IR keymap rc-dib0700-rc5 not found [ 237.712341][ T5840] Registered IR keymap rc-empty [ 237.718352][ T5840] dvb-usb: could not initialize remote control. [ 237.724623][ T5840] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 237.755709][ T5961] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 238.346167][ T5840] usb 4-1: USB disconnect, device number 14 [ 238.465333][ T5961] usb 3-1: Using ep0 maxpacket: 32 [ 238.472026][ T5840] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 238.485973][ T5961] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 238.531072][ T5961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.572172][ T5961] usb 3-1: config 0 descriptor?? [ 238.768114][ T7932] netlink: 88 bytes leftover after parsing attributes in process `syz.4.524'. [ 238.777303][ T7932] netlink: 40 bytes leftover after parsing attributes in process `syz.4.524'. [ 238.789931][ T30] audit: type=1326 audit(1755958731.489:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7924 comm="syz.1.525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f32f5b8ebe9 code=0x0 [ 239.258654][ T5961] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 239.268208][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.278630][ T5961] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 239.306400][ T5961] usb 3-1: media controller created [ 239.418328][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.519771][ T5961] az6027: usb out operation failed. (-71) [ 239.543598][ T5961] az6027: usb out operation failed. (-71) [ 239.574024][ T5961] stb0899_attach: Driver disabled by Kconfig [ 239.588413][ T5961] az6027: no front-end attached [ 239.588413][ T5961] [ 239.629770][ T5961] az6027: usb out operation failed. (-71) [ 239.656544][ T5961] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 239.678866][ T5969] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 239.701169][ T5961] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 239.731665][ T5969] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 239.752646][ T5961] dvb-usb: schedule remote query interval to 400 msecs. [ 239.771554][ T5961] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 239.789966][ T5961] usb 3-1: USB disconnect, device number 14 [ 239.985212][ T5961] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 240.187005][ T7948] netlink: 56 bytes leftover after parsing attributes in process `syz.3.530'. [ 240.560059][ T7959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.273471][ T5840] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 241.281257][ T973] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 241.577907][ T5840] usb 5-1: device descriptor read/64, error -71 [ 241.611132][ T973] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 242.332549][ T973] usb 1-1: config 0 has no interface number 0 [ 242.338740][ T973] usb 1-1: config 0 interface 41 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 242.462526][ T5840] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 242.676181][ T973] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00ab, bcdDevice=c8.0d [ 242.703873][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.723670][ T973] usb 1-1: Product: syz [ 242.727893][ T973] usb 1-1: Manufacturer: syz [ 242.752492][ T973] usb 1-1: SerialNumber: syz [ 242.776347][ T973] usb 1-1: config 0 descriptor?? [ 243.012370][ T5840] usb 5-1: device descriptor read/64, error -71 [ 243.204397][ T5840] usb usb5-port1: attempt power cycle [ 243.276468][ T973] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 243.375872][ T973] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 243.760507][ T973] dib0700: firmware download failed at 7 with -8 [ 244.102451][ T973] usb 1-1: USB disconnect, device number 17 [ 244.396685][ T7981] netlink: 'syz.2.539': attribute type 10 has an invalid length. [ 244.416991][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.427104][ T7981] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 244.592754][ T5969] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 244.732876][ T7978] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.538'. [ 244.785466][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.811562][ T5969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 244.831285][ T5969] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 244.860533][ T5969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.891417][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 244.891969][ T5969] usb 4-1: config 0 descriptor?? [ 244.927027][ T7987] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.956209][ T5969] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 245.172036][ T5194] bcm5974 4-1:0.0: could not read from device [ 245.183204][ T5194] bcm5974 4-1:0.0: could not read from device [ 245.202970][ T9] usb 5-1: config 0 has no interfaces? [ 245.208939][ T5969] usb 4-1: USB disconnect, device number 15 [ 245.210791][ T9] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 245.224448][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.225427][ T5194] bcm5974 4-1:0.0: could not read from device [ 245.242594][ T5840] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 245.793375][ T9] usb 5-1: Product: syz [ 245.798409][ T9] usb 5-1: Manufacturer: syz [ 245.803138][ T9] usb 5-1: SerialNumber: syz [ 245.816014][ T9] usb 5-1: config 0 descriptor?? [ 246.010795][ T5840] usb 3-1: device descriptor read/64, error -71 [ 246.031190][ T9] usb 5-1: USB disconnect, device number 25 [ 246.260288][ T5840] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 246.400581][ T5840] usb 3-1: device descriptor read/64, error -71 [ 246.530494][ T5840] usb usb3-port1: attempt power cycle [ 246.880263][ T5840] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 246.965341][ T5840] usb 3-1: device descriptor read/8, error -71 [ 247.035791][ T8019] mmap: syz.3.551 (8019): VmData 26103808 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 247.350226][ T5840] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 247.406594][ T5840] usb 3-1: device descriptor read/8, error -71 [ 247.520721][ T5840] usb usb3-port1: unable to enumerate USB device [ 248.355832][ T8044] delete_channel: no stack [ 249.799038][ T5840] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 250.193373][ T5840] usb 3-1: config 0 has an invalid interface number: 102 but max is 0 [ 250.206246][ T5840] usb 3-1: config 0 has no interface number 0 [ 250.228056][ T5840] usb 3-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 250.255291][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.275469][ T5840] usb 3-1: config 0 descriptor?? [ 250.591621][ T30] audit: type=1326 audit(1755958743.455:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8095 comm="syz.4.572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a6618ebe9 code=0x0 [ 250.843019][ T5969] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 251.228655][ T5969] usb 1-1: Using ep0 maxpacket: 8 [ 251.316144][ T5969] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.418094][ T5969] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 251.448402][ T8074] netlink: 566 bytes leftover after parsing attributes in process `syz.2.564'. [ 251.451057][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.469066][ T5840] asix 3-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 251.496616][ T5969] usb 1-1: config 0 descriptor?? [ 251.624379][ T5969] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 251.624514][ T5840] asix 3-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 251.649328][ T5840] asix 3-1:0.102: probe with driver asix failed with error -71 [ 251.665293][ T5840] usb 3-1: USB disconnect, device number 19 [ 252.407497][ T5969] gspca_vc032x: reg_r err -110 [ 252.412353][ T5969] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 253.351516][ T8114] loop6: detected capacity change from 0 to 63 [ 253.370784][ T8114] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.387199][ T8114] Buffer I/O error on dev loop6, logical block 1, async page read [ 253.405634][ T8114] Buffer I/O error on dev loop6, logical block 2, async page read [ 253.433033][ T8114] Buffer I/O error on dev loop6, logical block 3, async page read [ 253.460397][ T8114] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.492383][ T8114] Buffer I/O error on dev loop6, logical block 1, async page read [ 253.521127][ T8114] Buffer I/O error on dev loop6, logical block 2, async page read [ 253.599138][ T8114] Buffer I/O error on dev loop6, logical block 3, async page read [ 253.633143][ T8118] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.707123][ T8118] Buffer I/O error on dev loop6, logical block 1, async page read [ 254.695012][ T5840] usb 1-1: USB disconnect, device number 18 [ 255.675346][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.684471][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.738727][ T30] audit: type=1400 audit(1755958748.608:187): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8146 comm="syz.0.584" netif=wpan0 [ 256.484655][ T8151] usb usb8: usbfs: process 8151 (syz.0.584) did not claim interface 0 before use [ 257.186929][ T8168] Invalid option length (9399) for dns_resolver key [ 258.360543][ T8179] netlink: 'syz.4.595': attribute type 10 has an invalid length. [ 258.507738][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.509035][ T8179] bridge_slave_1: left allmulticast mode [ 258.509065][ T8179] bridge_slave_1: left promiscuous mode [ 258.509197][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.129703][ T8179] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 259.164372][ T8187] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 259.171137][ T8187] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 260.168830][ T8187] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 260.193892][ T8187] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 260.512430][ T8208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.600'. [ 260.603604][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 260.784555][ T8219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.893273][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 260.915528][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.083390][ T5887] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 261.564308][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.576132][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 261.587201][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 261.804938][ T9] usb 5-1: string descriptor 0 read error: -71 [ 261.825643][ T5887] usb 3-1: config 3 has an invalid interface number: 242 but max is 1 [ 261.847569][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 261.887057][ T5887] usb 3-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 261.952822][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 261.994388][ T5887] usb 3-1: config 3 has an invalid interface number: 242 but max is 1 [ 262.062520][ T9] usb 5-1: can't set config #1, error -71 [ 262.062773][ T5887] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 262.108813][ T9] usb 5-1: USB disconnect, device number 26 [ 262.155373][ T5887] usb 3-1: config 3 has no interface number 0 [ 262.161563][ T5887] usb 3-1: config 3 interface 242 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 262.214972][ T8223] overlayfs: missing 'lowerdir' [ 262.249731][ T5887] usb 3-1: config 3 interface 242 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 262.261185][ T5887] usb 3-1: config 3 interface 242 altsetting 188 has an invalid descriptor for endpoint zero, skipping [ 262.280247][ T5887] usb 3-1: config 3 interface 242 altsetting 188 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 262.298857][ T5887] usb 3-1: config 3 interface 242 altsetting 128 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 262.310857][ T5887] usb 3-1: config 3 interface 242 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 262.323245][ T5887] usb 3-1: config 3 interface 242 altsetting 128 endpoint 0xB has invalid maxpacket 2015, setting to 64 [ 262.475634][ T5887] usb 3-1: config 3 interface 242 altsetting 128 has a duplicate endpoint with address 0x9, skipping [ 262.487084][ T5887] usb 3-1: config 3 interface 242 altsetting 128 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 262.498313][ T5887] usb 3-1: config 3 interface 242 altsetting 128 has a duplicate endpoint with address 0xB, skipping [ 262.509703][ T5887] usb 3-1: config 3 interface 242 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 262.520723][ T5887] usb 3-1: config 3 interface 242 has no altsetting 0 [ 262.530865][ T5887] usb 3-1: config 3 interface 242 has no altsetting 1 [ 263.126082][ T5969] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 263.191730][ T5887] usb 3-1: Dual-Role OTG device on HNP port [ 263.367069][ T5887] usb 3-1: New USB device found, idVendor=07d1, idProduct=3a0f, bcdDevice=7b.57 [ 263.495154][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.596005][ T5887] usb 3-1: Product: ê¸ê˜ã®°âኋ톛⺆á…壪鷣ꓓ쌚ପꦘἉË컶Ύナ晣撫æ¯è­³î‚¡ï¨Šä«¢ï¦Ÿâ‰¢ê‚³è˜¢îŠè†–뾣ᾛì´è‚„蠩鰒è¢îºˆÏ¿î‚¶ïµ…å´æ€‡ì¶‹íŸ¤ï¶²äŒá³æŒªè„­á“˜îŸ—íƒç‡Œï‹¾ï°¯æ„œèˆê¡§î²·ï»žî¥î¬…æ«•â±¢á‡à°½ê¬¯Æ¼ë¥©ï˜­î¨†è³‹å¸µàµä˜ˆî¢Œá¿‚ย㴘ꬆ켽扙 쪊洵ỷéꞸ보 [ 263.742333][ T5887] usb 3-1: Manufacturer: ဠ[ 263.746988][ T5887] usb 3-1: SerialNumber: 횫ꘑꋌ䧵ì áŸ–ⶱí…੣﹆휵嗅툢刴惚悵è´ä¨¤é¯îŒ”êºèˆ³ïƒŸâ©œã…žâ«•ë‚†ã·¡ë·œïž¿ [ 264.918839][ T5887] usb 3-1: can't set config #3, error -71 [ 264.971072][ T5887] usb 3-1: USB disconnect, device number 20 [ 268.737672][ T8321] can: request_module (can-proto-0) failed. [ 269.255367][ T5962] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 270.008885][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 270.026621][ T5962] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 270.067345][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.217737][ T5962] usb 2-1: config 0 descriptor?? [ 270.807397][ T5962] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 270.922625][ T5962] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 270.965419][ T5962] usb 2-1: USB disconnect, device number 18 [ 272.413125][ T8374] netlink: 'syz.1.638': attribute type 25 has an invalid length. [ 272.421914][ T8374] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 272.430948][ T8374] bridge0: port 1(bridge_slave_0) entered learning state [ 272.940049][ T5840] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 273.178795][ T8377] Bluetooth: MGMT ver 1.23 [ 273.206852][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.640'. [ 273.806406][ T5840] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 273.868095][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.946436][ T5840] usb 5-1: Product: syz [ 273.978610][ T5840] usb 5-1: Manufacturer: syz [ 273.983413][ T5840] usb 5-1: SerialNumber: syz [ 275.040404][ T5840] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 275.135828][ T973] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 275.235472][ T973] usb 5-1: ath9k_htc: USB layer deinitialized [ 275.281768][ T5840] usb 5-1: USB disconnect, device number 27 [ 279.125389][ T5969] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 279.308655][ T5969] usb 5-1: config 9 has an invalid interface number: 1 but max is 0 [ 279.378551][ T5969] usb 5-1: config 9 has no interface number 0 [ 279.385742][ T5969] usb 5-1: config 9 interface 1 has no altsetting 0 [ 279.396018][ T5969] usb 5-1: string descriptor 0 read error: -22 [ 279.402332][ T5969] usb 5-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 279.414843][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.430719][ T5969] cx231xx 5-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 279.440662][ T5969] cx231xx 5-1:9.1: Not found matching IAD interface [ 281.199046][ T8470] syz.3.663 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 281.938569][ T5840] usb 5-1: USB disconnect, device number 28 [ 282.226772][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 282.236014][ T8480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.664'. [ 282.448539][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.666'. [ 282.532595][ T5840] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 283.012285][ T5962] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 283.617572][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.643447][ T5962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.667431][ T5962] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 283.792101][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.242649][ T5962] usb 3-1: config 0 descriptor?? [ 284.432215][ T8507] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 284.463168][ T30] audit: type=1326 audit(1755958777.332:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8505 comm="syz.0.673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b2d8ebe9 code=0x0 [ 284.575554][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.673'. [ 285.448402][ T5962] usbhid 3-1:0.0: can't add hid device: -71 [ 285.456922][ T5962] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 285.472017][ T5962] usb 3-1: USB disconnect, device number 21 [ 286.842008][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 286.858240][ T8527] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 286.880956][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 286.940700][ T8527] netlink: 208 bytes leftover after parsing attributes in process `syz.3.678'. [ 287.606022][ T8530] netlink: 'syz.3.678': attribute type 1 has an invalid length. [ 287.776189][ T8530] netlink: 208 bytes leftover after parsing attributes in process `syz.3.678'. [ 288.433728][ T8558] nfs4: Unknown parameter 'dev/sequencer' [ 290.461277][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 290.640329][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 290.685076][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 290.711419][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.725974][ T9] usb 1-1: Product: syz [ 290.734157][ T9] usb 1-1: Manufacturer: syz [ 290.754031][ T9] usb 1-1: SerialNumber: syz [ 290.895371][ T8585] input: syz0 as /devices/virtual/input/input21 [ 291.202535][ T9] usb 1-1: config 0 descriptor?? [ 291.290663][ T9] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 291.416889][ T30] audit: type=1326 audit(1755958784.296:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8592 comm="syz.1.695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f32f5b8ebe9 code=0x0 [ 291.534956][ T9] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 291.555694][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 291.577751][ T9] usb 1-1: USB disconnect, device number 19 [ 291.783918][ T8600] netlink: 2384 bytes leftover after parsing attributes in process `syz.2.693'. [ 292.885656][ T5887] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 293.501803][ T5887] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.173723][ T5887] usb 3-1: config 6 has an invalid interface number: 88 but max is 0 [ 294.245996][ T5887] usb 3-1: config 6 has no interface number 0 [ 294.252365][ T5887] usb 3-1: config 6 interface 88 has no altsetting 0 [ 294.264100][ T5887] usb 3-1: New USB device found, idVendor=12d1, idProduct=0081, bcdDevice=af.d5 [ 294.279993][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.289543][ T5887] usb 3-1: Product: syz [ 294.293752][ T5887] usb 3-1: Manufacturer: syz [ 294.298496][ T5887] usb 3-1: SerialNumber: syz [ 294.422071][ T8621] input: syz0 as /devices/virtual/input/input22 [ 295.017287][ T5969] IPVS: starting estimator thread 0... [ 295.059678][ T5887] usb-storage 3-1:6.88: USB Mass Storage device detected [ 295.126205][ T8634] IPVS: using max 31 ests per chain, 74400 per kthread [ 295.400621][ T8648] syz.3.705: attempt to access beyond end of device [ 295.400621][ T8648] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 295.414211][ T8648] hpfs: hpfs_map_sector(): read error [ 296.250147][ T5887] usb 3-1: USB disconnect, device number 22 [ 297.992592][ T30] audit: type=1800 audit(1755958790.049:190): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.711" name="/" dev="9p" ino=2 res=0 errno=0 [ 298.048571][ T5887] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 298.265178][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 298.337824][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.446196][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 298.511251][ T5887] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 298.530674][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.542746][ T5887] usb 5-1: config 0 descriptor?? [ 298.559621][ T8678] loop7: detected capacity change from 0 to 16383 [ 299.136896][ T5887] smartjoyplus 0003:0925:0005.0017: item fetching failed at offset 3/5 [ 299.159962][ T5887] smartjoyplus 0003:0925:0005.0017: parse failed [ 299.171795][ T5887] smartjoyplus 0003:0925:0005.0017: probe with driver smartjoyplus failed with error -22 [ 299.900533][ T5921] usb 5-1: USB disconnect, device number 30 [ 300.040263][ T8703] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 300.060267][ T8702] netlink: 40 bytes leftover after parsing attributes in process `syz.2.724'. [ 300.060800][ T8699] xt_TPROXY: Can be used only with -p tcp or -p udp [ 300.146093][ T8703] xt_TPROXY: Can be used only with -p tcp or -p udp [ 301.363469][ T5962] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 302.841994][ T5887] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 303.242296][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 303.256512][ T5887] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 303.272459][ T5887] usb 5-1: config 0 has no interface number 0 [ 303.288044][ T5887] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 303.303228][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.311291][ T5887] usb 5-1: Product: syz [ 303.325734][ T5887] usb 5-1: Manufacturer: syz [ 303.348066][ T5887] usb 5-1: SerialNumber: syz [ 303.764782][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 303.802471][ T5887] usb 5-1: config 0 descriptor?? [ 303.931902][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 303.962961][ T9] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 303.991704][ T9] usb 3-1: config 6 has no interface number 0 [ 304.029438][ T5887] ath6kl: Failed to submit usb control message: -71 [ 304.041707][ T5887] ath6kl: unable to send the bmi data to the device: -71 [ 304.051715][ T5887] ath6kl: Unable to send get target info: -71 [ 304.071696][ T5887] ath6kl: Failed to init ath6kl core: -71 [ 304.099553][ T5887] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 304.151990][ T5887] usb 5-1: USB disconnect, device number 31 [ 304.204253][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 304.219670][ T9] usb 3-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.233758][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 304.244745][ T9] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 304.257629][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 304.281269][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.657906][ T9] usb 3-1: Product: syz [ 304.772391][ T9] usb 3-1: Manufacturer: syz [ 304.777302][ T9] usb 3-1: SerialNumber: syz [ 305.040826][ T9] usb 3-1: can't set config #6, error -71 [ 305.088016][ T9] usb 3-1: USB disconnect, device number 23 [ 305.911185][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 306.702166][ T9] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 306.735709][ T9] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.027848][ T8776] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 307.043659][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 307.086381][ T8775] netlink: 552 bytes leftover after parsing attributes in process `syz.1.740'. [ 307.095651][ T9] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 307.095683][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.252028][ T9] usb 3-1: config 0 descriptor?? [ 307.288148][ T8775] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 307.564985][ T8781] Invalid source name [ 307.565077][ T8782] Invalid source name [ 307.569031][ T8781] UBIFS error (pid: 8781): cannot open "./file0", error -22 [ 307.604373][ T8782] UBIFS error (pid: 8782): cannot open "./file0", error -22 [ 307.746060][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 307.771253][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 308.289854][ T9] usb 3-1: USB disconnect, device number 24 [ 309.020370][ T8799] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 310.170762][ T8806] fuseblk: Unknown parameter 'dont_measure' [ 310.318527][ T5921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 310.507384][ T8797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.578419][ T5961] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 311.120702][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.130137][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 311.141924][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 311.154844][ T5921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 311.166096][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 311.188265][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 311.196450][ T5961] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 311.211719][ T5961] usb 1-1: config 4 has no interface number 0 [ 311.259264][ T5921] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 311.278041][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.286093][ T5921] usb 4-1: Product: syz [ 311.286614][ T5961] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.303269][ T5921] usb 4-1: Manufacturer: syz [ 311.307909][ T5921] usb 4-1: SerialNumber: syz [ 311.320721][ T5961] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.353228][ T5921] usb 4-1: config 0 descriptor?? [ 311.362671][ T8805] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.373368][ T5921] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 311.396936][ T5961] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 311.418743][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.451837][ T5961] hub 1-1:4.128: USB hub found [ 311.690032][ T5961] hub 1-1:4.128: 2 ports detected [ 311.744394][ T5961] hub 1-1:4.128: Using single TT (err -22) [ 311.948466][ T5961] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 311.963924][ T5961] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 312.009054][ T5961] usb 1-1: USB disconnect, device number 20 [ 312.693905][ T9] usb 4-1: USB disconnect, device number 17 [ 314.610829][ T8864] netlink: 'syz.2.761': attribute type 10 has an invalid length. [ 314.619042][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.626535][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.668207][ T8864] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.675492][ T8864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.683097][ T8864] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.690322][ T8864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.721935][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'. [ 314.804996][ T8864] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 315.318830][ T8875] net_ratelimit: 8 callbacks suppressed [ 315.318849][ T8875] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 316.253596][ T30] audit: type=1800 audit(1755958809.108:191): pid=8880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.764" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 316.407656][ T8878] sp0: Synchronizing with TNC [ 316.452403][ T30] audit: type=1400 audit(1755958809.348:192): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8876 comm="syz.0.765" dest=20002 netif=wpan0 [ 317.082285][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.344702][ T5961] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 318.590036][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.772'. [ 318.696312][ T5961] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 318.704098][ T5961] usb 5-1: can't read configurations, error -61 [ 318.772370][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 318.888541][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.902158][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.910107][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.918037][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.926335][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.934046][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.941822][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.949510][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.957264][ T5961] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 318.964909][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.972626][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.980320][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.988143][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 318.995930][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.003651][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.006564][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.011366][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.027803][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.035625][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.043345][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.051081][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.058771][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.066457][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.074220][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.081892][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.089599][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.097281][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.104976][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.112645][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.120382][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.128408][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.144118][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.151858][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.159760][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.168327][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 319.179452][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 319.308242][ T9] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 319.324326][ T9] usb 4-1: config 7 has an invalid interface number: 6 but max is 0 [ 319.360014][ T5961] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 319.414417][ T5961] usb 5-1: can't read configurations, error -61 [ 319.462045][ T5961] usb usb5-port1: attempt power cycle [ 319.500660][ T9] usb 4-1: config 7 has no interface number 0 [ 319.844064][ T5961] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 319.845067][ T8923] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 319.866994][ T9] usb 4-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254 [ 320.066304][ T9] usb 4-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.079478][ T9] usb 4-1: config 7 interface 6 has no altsetting 0 [ 320.121701][ T9] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=10.9e [ 320.146080][ T8919] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 320.200936][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.239622][ T5961] usb 5-1: device descriptor read/8, error -71 [ 320.239644][ T9] usb 4-1: Product: syz [ 320.282319][ T9] usb 4-1: Manufacturer: syz [ 320.304051][ T9] usb 4-1: SerialNumber: syz [ 320.317805][ T8927] netlink: 560 bytes leftover after parsing attributes in process `syz.2.778'. [ 320.447098][ T8934] netlink: 28 bytes leftover after parsing attributes in process `syz.4.780'. [ 320.467034][ T8934] sch_tbf: peakrate 1 is lower than or equals to rate 256 ! [ 320.483508][ T5962] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 320.538025][ T9] option 4-1:7.6: GSM modem (1-port) converter detected [ 320.554922][ T9] usb 4-1: USB disconnect, device number 18 [ 320.568491][ T9] option 4-1:7.6: device disconnected [ 321.333070][ T5962] usb 2-1: Using ep0 maxpacket: 16 [ 321.571461][ T5962] usb 2-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=6f.9e [ 321.631547][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.640601][ T5962] usb 2-1: Product: syz [ 321.657167][ T5962] usb 2-1: Manufacturer: syz [ 321.661994][ T5962] usb 2-1: SerialNumber: syz [ 321.670094][ T5962] usb 2-1: config 0 descriptor?? [ 322.716109][ T8952] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 322.784566][ T5962] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 323.101662][ T8957] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 324.096449][ T5194] bcm5974 2-1:0.0: could not read from device [ 324.179010][ T5194] bcm5974 2-1:0.0: could not read from device [ 324.188535][ T5962] usb 2-1: USB disconnect, device number 19 [ 324.200250][ T5194] bcm5974 2-1:0.0: could not read from device [ 324.411502][ T973] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 324.581460][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 324.593926][ T973] usb 1-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 324.639743][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.668994][ T973] usb 1-1: Product: syz [ 324.706024][ T973] usb 1-1: Manufacturer: syz [ 324.710683][ T973] usb 1-1: SerialNumber: syz [ 324.727897][ T973] usb 1-1: config 0 descriptor?? [ 325.749897][ T973] usb 1-1: ignoring: not an USB2CAN converter [ 326.374555][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 326.375637][ T5843] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 326.667772][ T9016] ubi: mtd0 is already attached to ubi31 [ 326.882447][ T9026] serio: Serial port pty22 [ 327.256892][ T5962] usb 1-1: USB disconnect, device number 21 [ 328.138589][ T973] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 328.323664][ T973] usb 2-1: device descriptor read/64, error -71 [ 328.730883][ T973] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 329.379179][ T5921] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 329.495435][ T973] usb 2-1: device descriptor read/64, error -71 [ 329.525855][ T9051] sp0: Synchronizing with TNC [ 329.763252][ T973] usb usb2-port1: attempt power cycle [ 330.677203][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 330.776878][ T5921] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 330.833420][ T5921] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 330.927483][ T9051] [U] è [ 331.089689][ T5921] usb 4-1: config 135 has no interface number 0 [ 331.099246][ T5921] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 331.115999][ T5921] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 331.129831][ T973] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 331.205627][ T5921] usb 4-1: config 135 interface 230 has no altsetting 0 [ 331.216647][ T5921] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 331.238295][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.256758][ T5921] usb 4-1: Product: syz [ 331.261238][ T5921] usb 4-1: Manufacturer: syz [ 331.265869][ T5921] usb 4-1: SerialNumber: syz [ 331.288375][ T5921] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 331.294849][ T5921] usb 4-1: No valid video chain found. [ 331.659215][ T9078] Invalid source name [ 331.663303][ T9078] UBIFS error (pid: 9078): cannot open "ubifs", error -22 [ 332.339633][ T5914] usb 4-1: USB disconnect, device number 19 [ 332.393427][ T9085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.507635][ T5921] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 332.680081][ T5921] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.710101][ T5921] usb 3-1: config 0 has no interface number 0 [ 332.748950][ T5921] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 332.790769][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.814706][ T5921] usb 3-1: config 0 descriptor?? [ 332.841682][ T5921] usb 3-1: selecting invalid altsetting 1 [ 332.873472][ T5921] dvb_ttusb_budget: ttusb_init_controller: error [ 332.905893][ T5921] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 333.093662][ T5921] DVB: Unable to find symbol cx22700_attach() [ 333.175980][ T5921] DVB: Unable to find symbol tda10046_attach() [ 333.182362][ T5921] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 333.198242][ T5921] usb 3-1: USB disconnect, device number 25 [ 333.272080][ T973] usb 2-1: device descriptor read/8, error -71 [ 333.824124][ T5961] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 333.935949][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.975874][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.121288][ T5961] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 334.139755][ T5961] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 334.179324][ T5921] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 334.216332][ T5961] usb 5-1: Product: syz [ 334.237837][ T5961] usb 5-1: Manufacturer: syz [ 334.242491][ T5961] usb 5-1: SerialNumber: syz [ 334.265483][ T9130] binder: 9129:9130 ioctl 8400941f 2000000003c0 returned -22 [ 334.276715][ T5961] usb 5-1: config 0 descriptor?? [ 334.299350][ T9135] binder: 9129:9135 ioctl 8400941f 2000000003c0 returned -22 [ 334.531882][ T9145] FAULT_INJECTION: forcing a failure. [ 334.531882][ T9145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.565871][ T9145] CPU: 0 UID: 0 PID: 9145 Comm: syz.3.832 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 334.565912][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.565930][ T9145] Call Trace: [ 334.565939][ T9145] [ 334.565948][ T9145] dump_stack_lvl+0x189/0x250 [ 334.565977][ T9145] ? __pfx____ratelimit+0x10/0x10 [ 334.565999][ T9145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.566022][ T9145] ? __pfx__printk+0x10/0x10 [ 334.566060][ T9145] should_fail_ex+0x414/0x560 [ 334.566087][ T9145] _copy_to_user+0x31/0xb0 [ 334.566116][ T9145] simple_read_from_buffer+0xe1/0x170 [ 334.566143][ T9145] proc_fail_nth_read+0x1df/0x250 [ 334.566170][ T9145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.566198][ T9145] ? rw_verify_area+0x258/0x650 [ 334.566226][ T9145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.566251][ T9145] vfs_read+0x200/0x980 [ 334.566288][ T9145] ? __pfx___mutex_lock+0x10/0x10 [ 334.566308][ T9145] ? __pfx_vfs_read+0x10/0x10 [ 334.566336][ T9145] ? __fget_files+0x2a/0x420 [ 334.566360][ T9145] ? __fget_files+0x3a0/0x420 [ 334.566379][ T9145] ? __fget_files+0x2a/0x420 [ 334.566408][ T9145] ksys_read+0x145/0x250 [ 334.566427][ T9145] ? __pfx_ksys_read+0x10/0x10 [ 334.566457][ T9145] ? rcu_is_watching+0x15/0xb0 [ 334.566482][ T9145] ? do_syscall_64+0xbe/0x3b0 [ 334.566504][ T9145] do_syscall_64+0xfa/0x3b0 [ 334.566523][ T9145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.566539][ T9145] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 334.566554][ T9145] ? clear_bhb_loop+0x60/0xb0 [ 334.566577][ T9145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.566593][ T9145] RIP: 0033:0x7f8dc218d5fc [ 334.566616][ T9145] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.566633][ T9145] RSP: 002b:00007f8dc2f87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.566660][ T9145] RAX: ffffffffffffffda RBX: 00007f8dc23b5fa0 RCX: 00007f8dc218d5fc [ 334.566675][ T9145] RDX: 000000000000000f RSI: 00007f8dc2f870a0 RDI: 0000000000000004 [ 334.566687][ T9145] RBP: 00007f8dc2f87090 R08: 0000000000000000 R09: 0000000000000000 [ 334.566699][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.566710][ T9145] R13: 00007f8dc23b6038 R14: 00007f8dc23b5fa0 R15: 00007ffe8c8af648 [ 334.566741][ T9145] [ 335.670406][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 335.922387][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.068043][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.223220][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 336.265945][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.315823][ T9] usb 2-1: config 0 descriptor?? [ 336.394770][ T5961] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 336.429112][ T5961] asix 5-1:0.0: probe with driver asix failed with error -71 [ 336.444301][ T5961] usb 5-1: USB disconnect, device number 36 [ 336.751791][ T9] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 336.764382][ T9] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 336.772431][ T9] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 336.779987][ T9] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 336.790307][ T9] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 336.797633][ T9] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 336.804630][ T9] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 336.811996][ T5914] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 336.829589][ T9] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 337.312138][ T9] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 337.330461][ T5914] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 337.340442][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 337.349957][ T5914] usb 1-1: Product: syz [ 337.365218][ T5914] usb 1-1: SerialNumber: syz [ 337.377936][ T5914] usb 1-1: config 0 descriptor?? [ 337.588972][ T9190] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 337.742380][ T9159] cp2112 0003:10C4:EA90.0018: Unsupported transaction 0 [ 337.752352][ T30] audit: type=1326 audit(1755958830.659:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9188 comm="syz.2.846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa55f8ebe9 code=0x0 [ 337.754662][ T5914] hso 1-1:0.0: Failed to find BULK IN ep [ 337.924673][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'. [ 338.001595][ T9] cp2112 0003:10C4:EA90.0018: error reading lock byte: -71 [ 338.003058][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.023648][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.026174][ T9] usb 2-1: USB disconnect, device number 24 [ 338.833358][ T9210] netlink: 248 bytes leftover after parsing attributes in process `syz.1.852'. [ 339.845862][ T5914] usb 1-1: USB disconnect, device number 22 [ 340.123602][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 341.155618][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 341.264267][ T9245] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 341.346914][ T9] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 341.362427][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 341.387459][ T30] audit: type=1326 audit(1755958834.301:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9238 comm="syz.4.859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a6618ebe9 code=0x0 [ 341.510832][ T9243] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.860'. [ 341.634681][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 341.735092][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.003405][ T9] usb 3-1: config 0 descriptor?? [ 342.024127][ T9239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 342.151471][ T9258] netlink: 'syz.0.864': attribute type 3 has an invalid length. [ 343.085457][ T9] logitech 0003:046D:C626.0019: item fetching failed at offset 5/7 [ 343.117096][ T9] logitech 0003:046D:C626.0019: parse failed [ 343.274914][ T9267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 343.354092][ T9] logitech 0003:046D:C626.0019: probe with driver logitech failed with error -22 [ 343.549100][ T9] usb 3-1: USB disconnect, device number 26 [ 343.841967][ T5962] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 344.501599][ T5962] usb 1-1: device descriptor read/64, error -71 [ 344.752970][ T5962] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 345.211969][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 345.306519][ T5961] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 345.370998][ T5962] usb 1-1: device descriptor read/64, error -71 [ 345.444053][ T9294] tipc: New replicast peer: 0.0.0.0 [ 345.449863][ T9294] tipc: Enabled bearer , priority 10 [ 345.458070][ T9294] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 345.468944][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.473220][ T5961] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 345.486411][ T5962] usb usb1-port1: attempt power cycle [ 345.487383][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 345.497202][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.515189][ T5961] usb 4-1: config 0 descriptor?? [ 345.520467][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 345.523320][ T5961] cp210x 4-1:0.0: cp210x converter detected [ 345.549517][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 345.560033][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 345.579984][ T9] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 345.610626][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.626771][ T9] usb 3-1: Product: syz [ 345.651283][ T9] usb 3-1: Manufacturer: syz [ 345.665558][ T9] usb 3-1: SerialNumber: syz [ 346.181254][ T5961] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 346.181778][ T9] usb 3-1: config 0 descriptor?? [ 346.283228][ T5962] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 346.291489][ T9289] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 346.293000][ T9] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 346.332969][ T5961] cp210x 4-1:0.0: querying part number failed [ 346.465163][ T5962] usb 1-1: device descriptor read/8, error -71 [ 346.544720][ T5961] usb 4-1: cp210x converter now attached to ttyUSB0 [ 346.583220][ T5969] tipc: Node number set to 2886997007 [ 346.592499][ T5961] usb 4-1: USB disconnect, device number 21 [ 346.612500][ T5961] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 346.632031][ T5961] cp210x 4-1:0.0: device disconnected [ 347.323334][ T9302] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 347.342279][ T30] audit: type=1326 audit(1755958840.244:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9301 comm="syz.4.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a6618ebe9 code=0x0 [ 348.077876][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 348.088322][ T9] usb 3-1: USB disconnect, device number 27 [ 348.486101][ T5962] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 349.484896][ T9323] tmpfs: Bad value for 'mpol' [ 349.620069][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 349.757822][ T5962] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.887579][ T5962] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.887621][ T5962] usb 1-1: config 0 interface 0 has no altsetting 0 [ 349.887847][ T5962] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 349.887898][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.012972][ T5962] usb 1-1: config 0 descriptor?? [ 350.481889][ T5962] holtek_kbd 0003:04D9:A055.001A: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 350.735761][ T9342] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.358905][ T5962] usb 1-1: USB disconnect, device number 27 [ 352.913527][ T5921] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 353.067308][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 353.080153][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.104612][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.625635][ T9362] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 353.811336][ T30] audit: type=1326 audit(1755958846.727:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9352 comm="syz.4.891" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a6618ebe9 code=0x0 [ 353.843109][ T5914] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 353.865205][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.891'. [ 353.966825][ T5921] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.996347][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.037406][ T9373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.894'. [ 354.106860][ T5921] usb 4-1: Product: syz [ 354.127985][ T5921] usb 4-1: Manufacturer: syz [ 354.141880][ T5914] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.577459][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 354.592630][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 354.603966][ T5921] usb 4-1: can't set config #1, error -71 [ 354.610800][ T5921] usb 4-1: USB disconnect, device number 22 [ 354.616759][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 354.991536][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 355.077050][ T5914] usb 1-1: string descriptor 0 read error: -71 [ 355.083408][ T5914] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 355.158840][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.181548][ T5914] usb 1-1: config 0 descriptor?? [ 355.194340][ T5914] usb 1-1: can't set config #0, error -71 [ 355.207755][ T9384] fuse: Unknown parameter '' [ 355.213862][ T5914] usb 1-1: USB disconnect, device number 28 [ 355.526011][ T5921] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 355.559085][ T9388] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 355.565979][ T9388] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 355.576047][ T5914] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 355.576207][ T9388] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.590068][ T9388] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 355.599603][ T9388] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 355.605526][ T9388] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 355.615886][ T9388] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 355.621820][ T9388] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 355.739563][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 355.807637][ T5921] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 355.839257][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.055612][ T5921] usb 2-1: config 0 has no interface number 0 [ 356.061778][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 356.072229][ T5914] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 356.082584][ T5914] usb 1-1: config 0 has no interface number 0 [ 356.090204][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 356.101476][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.113128][ T5914] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 356.134147][ T5921] usb 2-1: Product: syz [ 356.138965][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 356.147134][ T5921] usb 2-1: Manufacturer: syz [ 356.151770][ T5921] usb 2-1: SerialNumber: syz [ 356.156460][ T5914] usb 1-1: Product: syz [ 356.160636][ T5914] usb 1-1: Manufacturer: syz [ 356.168426][ T5921] usb 2-1: config 0 descriptor?? [ 356.226764][ T5914] usb 1-1: config 0 descriptor?? [ 356.308417][ T9402] sp0: Synchronizing with TNC [ 356.471258][ T5962] usb 1-1: USB disconnect, device number 29 [ 356.992776][ T9408] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 357.061079][ T30] audit: type=1326 audit(1755958849.969:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.4.904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a6618ebe9 code=0x0 [ 357.157094][ T9406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.904'. [ 357.401609][ T9419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.688576][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.907'. [ 357.708733][ T9415] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.792262][ T5962] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 358.305100][ T5969] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 358.353515][ T5962] usb 5-1: Using ep0 maxpacket: 32 [ 358.397277][ T5962] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 358.417050][ T5962] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.432226][ T5962] usb 5-1: config 0 has no interface number 0 [ 358.439020][ T5914] usb 2-1: USB disconnect, device number 25 [ 358.447520][ T5962] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 358.460331][ T5962] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 358.501285][ T5962] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 358.658689][ T5969] usb 3-1: unable to get BOS descriptor or descriptor too short [ 359.081615][ T5962] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 359.106597][ T5969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 359.125602][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.175096][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 31360, setting to 1024 [ 359.201411][ T5962] usb 5-1: Product: syz [ 359.224218][ T5962] usb 5-1: Manufacturer: syz [ 359.245572][ T5962] usb 5-1: SerialNumber: syz [ 359.252187][ T5969] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024 [ 359.469458][ T5969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 359.480713][ T5962] usb 5-1: config 0 descriptor?? [ 359.546334][ T5969] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 359.581609][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.781415][ T5969] usb 3-1: Product: syz [ 359.812929][ T5969] usb 3-1: Manufacturer: syz [ 359.826991][ T5969] usb 3-1: SerialNumber: syz [ 359.833346][ T5962] usb 5-1: probing VID:PID(0424:012C) [ 359.844664][ T5969] usb 3-1: config 0 descriptor?? [ 359.855066][ T5962] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 359.862854][ T9425] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 359.871699][ T5969] pn533_usb 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 359.888821][ T5962] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 359.933459][ T5962] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 359.964067][ T5962] usb 5-1: USB disconnect, device number 37 [ 360.098404][ T9459] netlink: 'syz.1.918': attribute type 1 has an invalid length. [ 360.306350][ T9464] (syz.3.916,9464,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 360.315131][ T9464] (syz.3.916,9464,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 360.447576][ T9467] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 360.463307][ T8250] Bluetooth: (null): Invalid header checksum [ 360.481747][ T30] audit: type=1326 audit(1755958853.400:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9465 comm="syz.0.919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b2d8ebe9 code=0x0 [ 360.520329][ T8250] Bluetooth: (null): Invalid header checksum [ 360.876849][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'. [ 360.948426][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 361.020625][ T9469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.153883][ T5962] usb 3-1: USB disconnect, device number 28 [ 362.892363][ T5914] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 363.241184][ T9516] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 363.330981][ T5914] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 363.489352][ T30] audit: type=1326 audit(1755958856.292:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9513 comm="syz.0.932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b2d8ebe9 code=0x0 [ 363.511520][ T5914] usb 2-1: config 0 has no interface number 0 [ 363.525980][ T5914] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid maxpacket 1023, setting to 64 [ 363.539770][ T5914] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 363.562447][ T9518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.932'. [ 363.683421][ T5914] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 363.692689][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.700694][ T5914] usb 2-1: Product: syz [ 363.716385][ T5914] usb 2-1: Manufacturer: syz [ 363.721122][ T5914] usb 2-1: SerialNumber: syz [ 363.733355][ T5914] usb 2-1: config 0 descriptor?? [ 363.739197][ T9512] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 364.955999][ T9534] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 365.362519][ T5914] usb 2-1: USB disconnect, device number 27 [ 365.517965][ T9537] Cannot find del_set index 0 as target [ 365.602862][ T5962] kernel write not supported for file /743/clear_refs (pid: 5962 comm: kworker/1:7) [ 365.607438][ T30] audit: type=1800 audit(1755958858.523:200): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.937" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 366.603743][ T5914] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 366.983647][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 366.993488][ T5914] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 367.009045][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.019031][ T5914] usb 2-1: Product: syz [ 367.044017][ T5914] usb 2-1: Manufacturer: syz [ 367.048860][ T5914] usb 2-1: SerialNumber: syz [ 367.449682][ T5914] r8152-cfgselector 2-1: Unknown version 0x0000 [ 367.456073][ T5914] r8152-cfgselector 2-1: config 0 descriptor?? [ 367.918964][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.004522][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.536046][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.947'. [ 368.545780][ T9578] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 368.928795][ T5969] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 369.100249][ T5969] usb 4-1: device descriptor read/64, error -71 [ 369.429369][ T5969] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 369.672872][ T5969] usb 4-1: device descriptor read/64, error -71 [ 369.792014][ T5913] r8152-cfgselector 2-1: USB disconnect, device number 28 [ 369.822505][ T5969] usb usb4-port1: attempt power cycle [ 369.999334][ T9596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'. [ 370.033432][ T43] IPVS: starting estimator thread 0... [ 370.158767][ T9599] IPVS: using max 24 ests per chain, 57600 per kthread [ 370.189079][ T5969] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 370.300980][ T5969] usb 4-1: device descriptor read/8, error -71 [ 371.294478][ T5914] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 371.383445][ T5969] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 371.429953][ T5969] usb 4-1: device descriptor read/8, error -71 [ 371.538618][ T5969] usb usb4-port1: unable to enumerate USB device [ 371.590557][ T5914] usb 3-1: config 2 has an invalid interface number: 219 but max is 0 [ 372.255874][ T5914] usb 3-1: config 2 has no interface number 0 [ 372.263647][ T5914] usb 3-1: config 2 interface 219 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 372.304290][ T5914] usb 3-1: New USB device found, idVendor=19d2, idProduct=1099, bcdDevice=2c.93 [ 372.462742][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.733123][ T5914] usb 3-1: Product: syz [ 372.820578][ T5914] usb 3-1: Manufacturer: syz [ 372.827179][ T5914] usb 3-1: SerialNumber: syz [ 372.835502][ T9605] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 372.852671][ T5914] option 3-1:2.219: GSM modem (1-port) converter detected [ 373.291783][ T5914] usb 3-1: USB disconnect, device number 29 [ 373.309581][ T5914] option 3-1:2.219: device disconnected [ 373.728741][ T9634] xt_CT: No such helper "snmp" [ 373.779162][ T9643] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 3, id = 0 [ 373.991162][ T9636] can: request_module (can-proto-0) failed. [ 377.142470][ T9691] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 377.255608][ T30] audit: type=1326 audit(1755958870.159:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9688 comm="syz.0.976" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b2d8ebe9 code=0x0 [ 377.510073][ T9694] /dev/nullb0: Can't open blockdev [ 377.922086][ T9689] Cannot find add_set index 0 as target [ 377.935025][ T9690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.976'. [ 378.489953][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.343720][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 380.422533][ T9713] netlink: 'syz.3.981': attribute type 3 has an invalid length. [ 380.575397][ T43] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 380.587230][ T43] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 380.833333][ T43] usb 3-1: config 220 has no interface number 2 [ 380.839735][ T43] usb 3-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping [ 380.853279][ T5921] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 380.874965][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 380.896184][ T9719] can: request_module (can-proto-0) failed. [ 380.904933][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 380.937548][ T43] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 380.955866][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 380.967996][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 380.968648][ T43] usb 3-1: config 220 interface 0 has no altsetting 0 [ 380.994096][ T5921] usb 4-1: device descriptor read/64, error -71 [ 381.003264][ T43] usb 3-1: config 220 interface 76 has no altsetting 0 [ 381.023307][ T43] usb 3-1: config 220 interface 1 has no altsetting 0 [ 381.035257][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 381.085426][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.130284][ T43] usb 3-1: Product: syz [ 381.159520][ T43] usb 3-1: Manufacturer: syz [ 381.397964][ T43] usb 3-1: SerialNumber: syz [ 381.504376][ T5921] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 381.682929][ T5921] usb 4-1: device descriptor read/64, error -71 [ 381.794747][ T5921] usb usb4-port1: attempt power cycle [ 381.807312][ T43] usb 3-1: selecting invalid altsetting 0 [ 381.845782][ T43] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 381.855576][ T43] usb 3-1: No valid video chain found. [ 381.895574][ T43] usb 3-1: selecting invalid altsetting 0 [ 381.907198][ T43] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 381.939082][ T43] usb 3-1: USB disconnect, device number 30 [ 381.993208][ T9749] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 382.079257][ T30] audit: type=1326 audit(1755958875.011:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9747 comm="syz.0.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16b2d8ebe9 code=0x0 [ 382.244137][ T5921] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 382.270191][ T9750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.989'. [ 382.423221][ T5921] usb 4-1: device descriptor read/8, error -71 [ 383.262250][ T5921] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 383.282675][ T5921] usb 4-1: device descriptor read/8, error -71 [ 383.392409][ T5921] usb usb4-port1: unable to enumerate USB device [ 384.078701][ T9778] netlink: 165 bytes leftover after parsing attributes in process `syz.3.995'. [ 384.135761][ T9778] netlink: 165 bytes leftover after parsing attributes in process `syz.3.995'. [ 384.162449][ T5913] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 384.243466][ T9778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 384.302640][ T5913] usb 5-1: device descriptor read/64, error -71 [ 384.315873][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.997'. [ 384.561487][ T5913] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 385.083363][ T5969] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 385.237875][ T5913] usb 5-1: device descriptor read/64, error -71 [ 385.351046][ T5969] usb 1-1: Using ep0 maxpacket: 16 [ 385.397935][ T5913] usb usb5-port1: attempt power cycle [ 385.450544][ T5969] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 385.504550][ T5969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 385.609552][ T5969] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 385.646672][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.658698][ T5969] usb 1-1: Product: syz [ 385.676774][ T5969] usb 1-1: Manufacturer: syz [ 385.708604][ T5969] usb 1-1: SerialNumber: syz [ 385.734779][ T5969] usb 1-1: config 0 descriptor?? [ 385.757159][ T5969] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 385.850705][ T5969] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 385.860995][ T5913] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 385.883680][ T5913] usb 5-1: device descriptor read/8, error -71 [ 386.168732][ T9802] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 386.180764][ T5913] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 386.247711][ T5969] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 386.279185][ T30] audit: type=1326 audit(1755958879.173:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9799 comm="syz.3.1002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dc218ebe9 code=0x0 [ 386.346554][ T5969] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 386.366769][ T5913] usb 5-1: device descriptor read/8, error -71 [ 386.392381][ T9805] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1002'. [ 386.414711][ T5969] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 386.659350][ T5913] usb usb5-port1: unable to enumerate USB device [ 386.668198][ T5969] em28xx 1-1:0.0: No AC97 audio processor [ 386.708721][ T5969] usb 1-1: USB disconnect, device number 30 [ 386.731188][ T5969] em28xx 1-1:0.0: Disconnecting em28xx [ 387.427987][ T5969] em28xx 1-1:0.0: Freeing device [ 388.664333][ T9826] can0: slcan on ttyS3. [ 389.259421][ T9826] can0 (unregistered): slcan off ttyS3. [ 389.499460][ T5921] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 389.658919][ T5921] usb 1-1: device descriptor read/64, error -71 [ 389.779752][ T9837] trusted_key: syz.4.1011 sent an empty control message without MSG_MORE. [ 389.869104][ T9840] binder: BINDER_SET_CONTEXT_MGR already set [ 389.889488][ T9840] binder: 9838:9840 ioctl 4018620d 2000000000c0 returned -16 [ 389.911947][ T9839] 9pnet_fd: Insufficient options for proto=fd [ 389.940708][ T5921] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 390.012456][ T9843] xt_hashlimit: max too large, truncated to 1048576 [ 390.099026][ T5921] usb 1-1: device descriptor read/64, error -71 [ 390.230854][ T5921] usb usb1-port1: attempt power cycle [ 390.588627][ T5921] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 390.631531][ T5921] usb 1-1: device descriptor read/8, error -71 [ 390.961098][ T5921] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 391.069665][ T5921] usb 1-1: device descriptor read/8, error -71 [ 391.138514][ T5913] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 391.198715][ T5921] usb usb1-port1: unable to enumerate USB device [ 391.340038][ T9865] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 391.400147][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 391.419048][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 391.466094][ T30] audit: type=1326 audit(1755958884.396:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9862 comm="syz.4.1017" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a6618ebe9 code=0x0 [ 391.506352][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 391.589667][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 392.620045][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.664471][ T9863] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1017'. [ 392.675527][ T9880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 392.691070][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 392.715438][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.750240][ T9882] futex_wake_op: syz.0.1020 tries to shift op by 535; fix this program [ 392.946635][ T5913] usb 4-1: GET_CAPABILITIES returned 0 [ 392.970730][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 393.041797][ T9893] Cannot find add_set index 0 as target [ 393.989145][ T973] usb 4-1: USB disconnect, device number 31 [ 395.679336][ T9931] netlink: 'syz.4.1029': attribute type 11 has an invalid length. [ 395.687368][ T9931] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1029'. [ 396.041336][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 396.050603][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'. [ 397.689030][ T9944] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1030'. [ 398.490062][ T9951] vcan0: tx drop: invalid da for name 0xf7fffffffffffffe [ 398.682206][ T30] audit: type=1326 audit(1755958891.619:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9947 comm="syz.2.1033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa55f8ebe9 code=0x0 [ 398.825713][ T9949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1033'. [ 398.870834][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1035'. [ 398.912846][ T9961] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1035'. [ 399.066374][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 399.087057][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1038'. [ 399.114224][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 399.893679][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 399.924841][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 399.932992][ T9] usb 5-1: config 0 has no interface number 0 [ 399.970426][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 399.994323][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.002369][ T9] usb 5-1: Product: syz [ 400.072760][ T9] usb 5-1: Manufacturer: syz [ 400.083601][ T9] usb 5-1: SerialNumber: syz [ 400.104488][ T9] usb 5-1: config 0 descriptor?? [ 400.122639][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 400.713593][ T9991] xt_connbytes: Forcing CT accounting to be enabled [ 400.720997][ T9991] Cannot find set identified by id 0 to match [ 401.053899][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 401.117330][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 402.808521][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 402.819452][ T5887] usb 5-1: USB disconnect, device number 42 [ 402.835705][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 402.861618][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 402.942801][ T5887] quatech2 5-1:0.51: device disconnected [ 404.457616][T10033] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1052'. [ 408.256687][T10084] 9pnet_fd: Insufficient options for proto=fd [ 409.693846][T10106] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 409.708889][T10102] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 410.044969][T10116] ipvlan2: entered promiscuous mode [ 410.068351][T10116] bridge0: port 3(ipvlan2) entered blocking state [ 410.131300][ T5887] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 410.248072][T10116] bridge0: port 3(ipvlan2) entered disabled state [ 410.265045][T10116] ipvlan2: entered allmulticast mode [ 410.278657][T10116] erspan0: entered allmulticast mode [ 410.292707][T10119] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1069'. [ 410.303830][T10116] ipvlan2: left allmulticast mode [ 410.315520][T10116] erspan0: left allmulticast mode [ 410.398461][ T973] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 410.475453][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 410.483930][ T5887] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 410.494416][ T5887] usb 4-1: config 1 has an invalid descriptor of length 41, skipping remainder of the config [ 410.537685][ T5887] usb 4-1: config 1 has no interface number 0 [ 410.563440][ T973] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.577204][ T973] usb 3-1: config 0 interface 0 has no altsetting 0 [ 410.579876][ T5887] usb 4-1: too many endpoints for config 1 interface 105 altsetting 0: 162, using maximum allowed: 30 [ 410.603457][ T973] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 410.639638][ T5887] usb 4-1: config 1 interface 105 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 162 [ 410.644404][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.670829][ T5887] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 410.671073][ T973] usb 3-1: config 0 descriptor?? [ 410.680407][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.680433][ T5887] usb 4-1: Product: syz [ 410.680448][ T5887] usb 4-1: Manufacturer: syz [ 410.680463][ T5887] usb 4-1: SerialNumber: syz [ 411.064381][ T5887] usb 4-1: USB disconnect, device number 32 [ 411.330221][ T973] cherry 0003:046A:0023.001B: item fetching failed at offset 1/3 [ 411.349573][ T973] cherry 0003:046A:0023.001B: probe with driver cherry failed with error -22 [ 412.368366][T10116] input: syz0 as /devices/virtual/input/input26 [ 412.430300][ T5921] usb 3-1: USB disconnect, device number 31 [ 413.976884][ T973] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 414.397122][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 414.406248][T10147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.408072][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.008418][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.018346][ T973] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 415.028352][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.047274][ T973] usb 5-1: config 0 descriptor?? [ 415.521999][ T973] hid-multitouch 0003:1FD2:6007.001C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 417.052749][ T5887] usb 5-1: USB disconnect, device number 43 [ 417.068393][T10201] overlayfs: failed to resolve './file2': -2 [ 418.704714][ T5887] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 418.983554][ T5887] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 419.006034][ T5887] usb 1-1: config 0 has no interface number 0 [ 419.026794][ T5887] usb 1-1: New USB device found, idVendor=0079, idProduct=85eb, bcdDevice=90.b7 [ 419.037022][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.046768][ T5887] usb 1-1: Product: syz [ 419.051011][ T5887] usb 1-1: Manufacturer: syz [ 419.055996][ T5887] usb 1-1: SerialNumber: syz [ 419.119775][ T5887] usb 1-1: config 0 descriptor?? [ 419.632523][ T9] usb 1-1: USB disconnect, device number 35 [ 421.164903][ T5887] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 421.369459][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 421.415497][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.465943][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.511254][ T5887] usb 5-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00 [ 421.545244][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.577398][ T5887] usb 5-1: config 0 descriptor?? [ 422.885249][ T5887] usbhid 5-1:0.0: can't add hid device: -71 [ 422.891236][ T5887] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 422.918640][ T5887] usb 5-1: USB disconnect, device number 44 [ 424.350724][T10296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.364527][T10296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.581427][ T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 424.694852][T10315] binder: 10309:10315 unknown command 0 [ 424.700759][T10315] binder: 10309:10315 ioctl c0306201 200000000080 returned -22 [ 426.769291][ T5969] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 427.090278][ T5969] usb 2-1: Using ep0 maxpacket: 16 [ 427.160193][ T5969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.632806][ T5969] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 427.689379][ T5969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.708660][T10351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1126'. [ 427.737159][ T5969] usb 2-1: config 0 descriptor?? [ 428.388169][ T5969] aquacomputer_d5next 0003:0C70:F00E.001D: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0 [ 428.437041][T10364] netlink: 'syz.2.1129': attribute type 9 has an invalid length. [ 428.458651][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 428.485950][T10364] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1129'. [ 428.568449][T10323] geneve2: entered promiscuous mode [ 428.573953][T10323] geneve2: entered allmulticast mode [ 428.755635][T10323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 429.148801][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1134'. [ 429.878828][ T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 430.848792][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 430.943124][ T9] usb 4-1: too many configurations: 117, using maximum allowed: 8 [ 431.018170][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 431.035871][ T973] usb 2-1: USB disconnect, device number 29 [ 431.042213][ T9] usb 4-1: can't read configurations, error -61 [ 431.048578][T10397] 9pnet_fd: Insufficient options for proto=fd [ 431.203756][T10399] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1138'. [ 431.218107][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 431.558421][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 432.123053][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 432.135285][ T9] usb 4-1: device descriptor read/all, error -71 [ 432.142014][ T9] usb usb4-port1: attempt power cycle [ 433.815388][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 433.824457][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1146'. [ 433.952954][T10431] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1146'. [ 434.897842][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 435.054272][T10471] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1152'. [ 435.076185][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 435.252933][T10483] lo speed is unknown, defaulting to 1000 [ 435.270896][T10483] lo speed is unknown, defaulting to 1000 [ 435.290946][T10483] lo speed is unknown, defaulting to 1000 [ 436.293534][T10495] ptrace attach of "./syz-executor exec"[5842] was attempted by ""[10495] [ 436.313347][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1161'. [ 436.790805][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 437.345583][T10505] can0: slcan on ptm0. [ 437.645043][T10504] can0 (unregistered): slcan off ptm0. [ 437.713048][T10483] infiniband syz0: set down [ 437.719577][ T973] lo speed is unknown, defaulting to 1000 [ 437.802752][T10483] infiniband syz0: added lo [ 437.810687][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1167'. [ 437.832631][T10483] syz0: rxe_create_cq: returned err = -12 [ 437.863164][T10483] infiniband syz0: Couldn't create ib_mad CQ [ 437.879059][T10483] infiniband syz0: Couldn't open port 1 [ 437.904841][ T5887] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 437.963268][T10483] RDS/IB: syz0: added [ 437.976874][T10483] smc: adding ib device syz0 with port count 1 [ 437.990947][T10483] smc: ib device syz0 port 1 has pnetid [ 438.017694][ T973] lo speed is unknown, defaulting to 1000 [ 438.033405][T10483] lo speed is unknown, defaulting to 1000 [ 438.075461][ T5887] usb 3-1: device descriptor read/64, error -71 [ 438.454766][ T5887] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 438.512376][T10483] lo speed is unknown, defaulting to 1000 [ 438.734251][ T973] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 438.750193][ T5887] usb 3-1: device descriptor read/64, error -71 [ 438.894364][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 438.910769][ T973] usb 4-1: unable to get BOS descriptor or descriptor too short [ 438.950386][ T973] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 439.059295][ T973] usb 4-1: config 128 has an invalid descriptor of length 58, skipping remainder of the config [ 439.198745][ T973] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 439.311789][ T973] usb 4-1: config 128 has no interface number 0 [ 439.332055][ T5887] usb usb3-port1: attempt power cycle [ 439.354201][ T973] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 49, changing to 9 [ 439.376457][T10483] lo speed is unknown, defaulting to 1000 [ 439.382403][ T973] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 9292, setting to 1024 [ 439.552532][ T973] usb 4-1: config 128 interface 127 has no altsetting 0 [ 439.589802][ T973] usb 4-1: Dual-Role OTG device on HNP port [ 439.608408][ T973] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 439.623261][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.785031][T10545] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 439.883943][ T5887] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 439.898624][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.991094][ T5887] usb 3-1: device descriptor read/8, error -71 [ 440.199733][ T973] usb 4-1: Product: syz [ 440.204002][ T973] usb 4-1: Manufacturer: syz [ 440.208619][ T973] usb 4-1: SerialNumber: syz [ 440.305972][T10530] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 440.353563][ T5887] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 440.402646][ T5887] usb 3-1: device descriptor read/8, error -71 [ 440.523909][ T5887] usb usb3-port1: unable to enumerate USB device [ 440.561779][T10483] lo speed is unknown, defaulting to 1000 [ 440.996240][T10564] tmpfs: Unknown parameter 'os¹à>' [ 441.059547][T10483] lo speed is unknown, defaulting to 1000 [ 441.119457][ T973] usb 4-1: USB disconnect, device number 37 [ 442.534911][T10586] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.544161][T10586] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.553004][T10586] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.561796][T10586] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.952922][ T5887] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 443.139663][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'. [ 443.162109][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 443.173636][ T5887] usb 4-1: config 0 has an invalid interface number: 192 but max is 0 [ 443.182065][ T5887] usb 4-1: config 0 has no interface number 0 [ 443.239786][ T5887] usb 4-1: config 0 interface 192 has no altsetting 0 [ 443.272586][ T5887] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=f4.c6 [ 443.352056][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.381724][ T5887] usb 4-1: Product: syz [ 443.392066][ T5887] usb 4-1: Manufacturer: syz [ 443.396716][ T5887] usb 4-1: SerialNumber: syz [ 443.423563][ T5887] usb 4-1: config 0 descriptor?? [ 443.492297][ T973] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 443.503317][T10605] sp0: Synchronizing with TNC [ 443.662485][ T973] usb 3-1: Using ep0 maxpacket: 32 [ 443.669263][ T973] usb 3-1: config 0 has an invalid interface number: 99 but max is 0 [ 443.686842][T10586] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 443.720822][T10586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.727253][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 443.737530][T10586] team0: Port device bond0 added [ 443.741751][ T5914] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 443.750189][ T973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.753132][ T5887] kvaser_usb 4-1:0.192: error -EPROTO: Cannot get software info [ 443.763532][ T973] usb 3-1: config 0 has no interface number 0 [ 443.774535][ T973] usb 3-1: config 0 interface 99 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 443.796669][ T5887] kvaser_usb 4-1:0.192: probe with driver kvaser_usb failed with error -71 [ 443.798139][ T973] usb 3-1: config 0 interface 99 has no altsetting 0 [ 443.811295][ T5887] usb 4-1: USB disconnect, device number 38 [ 443.827126][ T973] usb 3-1: New USB device found, idVendor=19d2, idProduct=0142, bcdDevice=3d.21 [ 443.836534][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.844632][ T973] usb 3-1: Product: syz [ 443.848833][ T973] usb 3-1: Manufacturer: syz [ 443.853624][ T973] usb 3-1: SerialNumber: syz [ 443.860797][ T973] usb 3-1: config 0 descriptor?? [ 443.903529][ T5914] usb 1-1: Using ep0 maxpacket: 8 [ 443.911179][ T5914] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 443.924983][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 443.934471][ T5914] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 443.944042][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.952496][ T5914] usb 1-1: Product: syz [ 443.956680][ T5914] usb 1-1: Manufacturer: syz [ 443.961282][ T5914] usb 1-1: SerialNumber: syz [ 443.968916][ T5914] usb 1-1: config 0 descriptor?? [ 443.978607][ T5914] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 444.001764][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 444.079341][ T973] option 3-1:0.99: GSM modem (1-port) converter detected [ 444.089683][ T973] usb 3-1: USB disconnect, device number 36 [ 444.096918][ T973] option 3-1:0.99: device disconnected [ 444.156897][ T9] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 444.166215][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.176838][ T9] usb 2-1: config 0 descriptor?? [ 444.193837][ T5914] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 444.206215][ T5914] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 444.395027][ T5887] usb 1-1: USB disconnect, device number 36 [ 444.403954][ T9] kaweth 2-1:0.0: Firmware present in device. [ 444.600419][ T9] kaweth 2-1:0.0: Statistics collection: 0 [ 444.611325][ T9] kaweth 2-1:0.0: Multicast filter limit: 0 [ 444.617456][ T9] kaweth 2-1:0.0: MTU: 0 [ 444.630093][ T9] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 445.111263][ T5887] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 446.109608][ T9] kaweth 2-1:0.0: kaweth interface created at eth1 [ 446.121860][ T5887] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 446.204615][ T5887] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 446.211157][ T9] usb 2-1: USB disconnect, device number 30 [ 446.262428][ T5887] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 446.283923][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 446.293614][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 446.302426][ T5887] usb 3-1: Product: syz [ 446.307443][ T5887] usb 3-1: Manufacturer: syz [ 446.313946][ T5887] usb 3-1: SerialNumber: syz [ 446.386610][T10644] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1204'. [ 447.185446][ T5887] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 447.392296][T10632] C: renamed from team_slave_0 (while UP) [ 447.518686][ T5913] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 447.535890][T10632] netlink: 'syz.2.1201': attribute type 4 has an invalid length. [ 447.549131][T10632] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1201'. [ 447.559263][T10632] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 448.347419][ T5887] usb 3-1: USB disconnect, device number 37 [ 448.380030][ T5913] usb 5-1: device descriptor read/64, error -71 [ 448.504532][ T5887] usblp0: removed [ 448.699464][ T5913] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 448.979666][ T5913] usb 5-1: device descriptor read/64, error -71 [ 449.092104][ T5913] usb usb5-port1: attempt power cycle [ 449.438963][ T5913] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 449.546754][ T5913] usb 5-1: device descriptor read/8, error -71 [ 450.205271][T10697] siw: device registration error -23 [ 450.850423][T10711] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1220'. [ 452.007745][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 452.174015][T10729] fuse: Bad value for 'fd' [ 452.189568][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 452.202832][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.217186][ T9] usb 1-1: config 0 descriptor?? [ 452.235894][ T9] pwc: Philips SPC 900NC USB webcam detected. [ 452.311330][T10737] ucma_write: process 854 (syz.4.1229) changed security contexts after opening file descriptor, this is not allowed. [ 452.591220][ T5913] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 452.598940][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 452.646604][T10746] IPVS: Unknown mcast interface:  [ 452.656863][ T9] pwc: send_video_command error -71 [ 452.663860][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 452.673147][ T9] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 452.689285][ T9] usb 1-1: USB disconnect, device number 37 [ 452.769701][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 452.774914][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 452.941266][ T43] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 452.949684][ T5913] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 452.957992][ T5913] usb 3-1: config 0 has no interface number 0 [ 452.964412][ T43] usb 2-1: config 0 has no interface number 0 [ 452.970611][ T5913] usb 3-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 452.980749][ T43] usb 2-1: config 0 interface 12 has no altsetting 0 [ 452.989957][ T5913] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 452.999169][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.007397][ T5913] usb 3-1: Product: syz [ 453.011682][ T5913] usb 3-1: Manufacturer: syz [ 453.016656][ T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 453.025802][ T5913] usb 3-1: SerialNumber: syz [ 453.030542][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.041588][ T43] usb 2-1: Product: syz [ 453.047922][ T5913] usb 3-1: config 0 descriptor?? [ 453.054027][ T43] usb 2-1: Manufacturer: syz [ 453.058760][ T43] usb 2-1: SerialNumber: syz [ 453.059012][T10735] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 453.081559][ T43] usb 2-1: config 0 descriptor?? [ 453.137197][ T9] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 453.287515][T10735] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 453.308594][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 453.331290][ T5913] net1080 3-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, f2:7e:a5:25:b5:84 [ 453.331784][ T9] usb 4-1: config 95 has an invalid interface number: 86 but max is 0 [ 453.360184][ T9] usb 4-1: config 95 has no interface number 0 [ 453.444544][T10760] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1237'. [ 453.499359][T10735] program syz.2.1228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.619464][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.636372][ T9] usb 4-1: config 95 interface 86 altsetting 8 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 453.667292][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.702839][ T5887] usb 3-1: USB disconnect, device number 38 [ 453.710547][ T5887] net1080 3-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 453.730884][ T9] usb 4-1: config 95 interface 86 has no altsetting 0 [ 453.761558][ T9] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=88.93 [ 453.795755][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.844034][ T9] usb 4-1: Product: syz [ 453.875269][ T9] usb 4-1: Manufacturer: syz [ 453.913783][ T9] usb 4-1: SerialNumber: syz [ 454.063895][T10772] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 454.194072][T10754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.208758][T10754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.360844][ T9] iguanair 4-1:95.86: probe with driver iguanair failed with error -12 [ 454.448530][ T9] usb 4-1: USB disconnect, device number 39 [ 455.168122][ T43] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 455.191684][ T43] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 455.213883][ T43] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 455.224287][ T43] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 455.238585][ T43] usb 2-1: USB disconnect, device number 31 [ 455.385048][T10791] tipc: Started in network mode [ 455.390352][T10791] tipc: Node identity 42e52fc2551b, cluster identity 4711 [ 455.410918][T10791] tipc: Enabled bearer , priority 0 [ 455.424903][T10796] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1248'. [ 455.434763][T10796] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1248'. [ 455.491793][T10791] syzkaller0: entered promiscuous mode [ 455.513012][T10791] syzkaller0: entered allmulticast mode [ 455.640344][T10791] tipc: Resetting bearer [ 562.762637][ C0] ------------[ cut here ]------------ [ 562.769286][ C0] WARNING: CPU: 0 PID: 10733 at kernel/rcu/tree_stall.h:1015 rcu_check_gp_start_stall+0x2e4/0x470 [ 562.780120][ C0] Modules linked in: [ 562.785146][ C0] CPU: 0 UID: 0 PID: 10733 Comm: syz.1.1227 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 562.795149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.805345][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 562.811742][ C0] Code: ff ff 48 c7 c7 00 04 ac 99 be 04 00 00 00 e8 63 51 78 00 4c 89 f7 b8 01 00 00 00 87 05 b5 45 04 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 44 14 8e 74 47 48 c7 c0 30 e5 a0 8f 48 c1 e8 [ 562.831658][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 562.837950][ C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7be3d [ 562.846309][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144480 [ 562.854484][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 562.862682][ C0] R10: dffffc0000000000 R11: fffffbfff3358080 R12: 0000000000002904 [ 562.870693][ C0] R13: 1ffff110170c75c2 R14: ffffffff8e144480 R15: dffffc0000000000 [ 562.878835][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 562.887815][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.894448][ C0] CR2: 000000110c34c1ba CR3: 000000000df38000 CR4: 00000000003526f0 [ 562.902450][ C0] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 562.910439][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 562.918443][ C0] Call Trace: [ 562.922009][ C0] [ 562.924877][ C0] rcu_core+0x5f7/0x1710 [ 562.929189][ C0] ? __pfx_rcu_core+0x10/0x10 [ 562.934125][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 562.939838][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 562.945185][ C0] handle_softirqs+0x283/0x870 [ 562.949977][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 562.954811][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 562.960153][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 562.965415][ C0] __irq_exit_rcu+0xca/0x1f0 [ 562.970043][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 562.975457][ C0] irq_exit_rcu+0x9/0x30 [ 562.979759][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 562.985453][ C0] [ 562.988402][ C0] [ 562.991342][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.997582][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 563.004291][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 563.024271][ C0] RSP: 0018:ffffc90003fbf360 EFLAGS: 00000293 [ 563.030628][ C0] RAX: ffffffff81b4bbb0 RBX: ffff8880b863b040 RCX: ffff888020b7da00 [ 563.038621][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 563.046658][ C0] RBP: ffffc90003fbf4c0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 563.054704][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170e7f2d [ 563.062866][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 563.071149][ C0] ? smp_call_function_many_cond+0xf80/0x12d0 [ 563.077469][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 563.083846][ C0] ? rcu_is_watching+0x15/0xb0 [ 563.088635][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 563.093854][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 563.098988][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 563.104353][ C0] ? free_pgd_range+0x144b/0x14c0 [ 563.109423][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 563.115095][ C0] tlb_flush_mmu+0x1a7/0x680 [ 563.119765][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 563.124376][ C0] ? free_pgd_range+0x144b/0x14c0 [ 563.129427][ C0] free_ldt_pgtables+0x17b/0x320 [ 563.134414][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 563.139943][ C0] ? down_read+0x1ad/0x2e0 [ 563.144389][ C0] exit_mmap+0x17c/0xb50 [ 563.148663][ C0] ? uprobe_clear_state+0x20f/0x290 [ 563.153947][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 563.158831][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 563.164595][ C0] ? __pfx_exit_aio+0x10/0x10 [ 563.169305][ C0] ? uprobe_clear_state+0x274/0x290 [ 563.174524][ C0] ? mm_update_next_owner+0xa7/0x870 [ 563.179841][ C0] __mmput+0x118/0x410 [ 563.183943][ C0] exit_mm+0x1da/0x2c0 [ 563.188061][ C0] ? __pfx_exit_mm+0x10/0x10 [ 563.192678][ C0] ? rcu_is_watching+0x15/0xb0 [ 563.197465][ C0] do_exit+0x648/0x22e0 [ 563.201655][ C0] ? do_raw_spin_lock+0x121/0x290 [ 563.206706][ C0] ? __pfx_do_exit+0x10/0x10 [ 563.211365][ C0] do_group_exit+0x21c/0x2d0 [ 563.216007][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.221413][ C0] get_signal+0x125e/0x1310 [ 563.226060][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 563.231646][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 563.237892][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 563.243470][ C0] exit_to_user_mode_loop+0x75/0x110 [ 563.248911][ C0] do_syscall_64+0x2bd/0x3b0 [ 563.253567][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.259666][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 563.265328][ C0] ? clear_bhb_loop+0x60/0xb0 [ 563.270052][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.276258][ C0] RIP: 0033:0x7f32f5b8ebe9 [ 563.281072][ C0] Code: Unable to access opcode bytes at 0x7f32f5b8ebbf. [ 563.288153][ C0] RSP: 002b:00007f32f696e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.296616][ C0] RAX: fffffffffffffe00 RBX: 00007f32f5db5fa8 RCX: 00007f32f5b8ebe9 [ 563.305147][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f32f5db5fa8 [ 563.314464][ C0] RBP: 00007f32f5db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 563.323370][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.332235][ C0] R13: 00007f32f5db6038 R14: 00007fff32a18900 R15: 00007fff32a189e8 [ 563.340697][ C0] [ 563.343755][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 563.351164][ C0] CPU: 0 UID: 0 PID: 10733 Comm: syz.1.1227 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 563.361161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 563.371425][ C0] Call Trace: [ 563.374776][ C0] [ 563.377659][ C0] dump_stack_lvl+0x99/0x250 [ 563.382990][ C0] ? __asan_memcpy+0x40/0x70 [ 563.387610][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 563.392834][ C0] ? __pfx__printk+0x10/0x10 [ 563.397468][ C0] panic+0x2db/0x790 [ 563.401478][ C0] ? __pfx_panic+0x10/0x10 [ 563.406029][ C0] __warn+0x31b/0x4b0 [ 563.410030][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 563.415810][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 563.421558][ C0] report_bug+0x2be/0x4f0 [ 563.425903][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 563.431687][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 563.437435][ C0] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 563.443287][ C0] handle_bug+0x84/0x160 [ 563.447570][ C0] exc_invalid_op+0x1a/0x50 [ 563.452104][ C0] asm_exc_invalid_op+0x1a/0x20 [ 563.456971][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 563.463329][ C0] Code: ff ff 48 c7 c7 00 04 ac 99 be 04 00 00 00 e8 63 51 78 00 4c 89 f7 b8 01 00 00 00 87 05 b5 45 04 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 44 14 8e 74 47 48 c7 c0 30 e5 a0 8f 48 c1 e8 [ 563.483049][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 563.489139][ C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7be3d [ 563.497129][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144480 [ 563.505204][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 563.513201][ C0] R10: dffffc0000000000 R11: fffffbfff3358080 R12: 0000000000002904 [ 563.521217][ C0] R13: 1ffff110170c75c2 R14: ffffffff8e144480 R15: dffffc0000000000 [ 563.529231][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 563.535005][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 563.540757][ C0] rcu_core+0x5f7/0x1710 [ 563.545137][ C0] ? __pfx_rcu_core+0x10/0x10 [ 563.549845][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 563.555173][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 563.560513][ C0] handle_softirqs+0x283/0x870 [ 563.565325][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 563.570215][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 563.575533][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 563.580761][ C0] __irq_exit_rcu+0xca/0x1f0 [ 563.585408][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 563.590644][ C0] irq_exit_rcu+0x9/0x30 [ 563.594913][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 563.600594][ C0] [ 563.603542][ C0] [ 563.606494][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.612510][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 563.619461][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 563.639569][ C0] RSP: 0018:ffffc90003fbf360 EFLAGS: 00000293 [ 563.645734][ C0] RAX: ffffffff81b4bbb0 RBX: ffff8880b863b040 RCX: ffff888020b7da00 [ 563.653827][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 563.661825][ C0] RBP: ffffc90003fbf4c0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 563.669838][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170e7f2d [ 563.677958][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 563.686140][ C0] ? smp_call_function_many_cond+0xf80/0x12d0 [ 563.692394][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 563.699037][ C0] ? rcu_is_watching+0x15/0xb0 [ 563.703954][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 563.709191][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 563.714372][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 563.719557][ C0] ? free_pgd_range+0x144b/0x14c0 [ 563.724733][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 563.730322][ C0] tlb_flush_mmu+0x1a7/0x680 [ 563.735011][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 563.739644][ C0] ? free_pgd_range+0x144b/0x14c0 [ 563.744886][ C0] free_ldt_pgtables+0x17b/0x320 [ 563.749905][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 563.755646][ C0] ? down_read+0x1ad/0x2e0 [ 563.760098][ C0] exit_mmap+0x17c/0xb50 [ 563.764357][ C0] ? uprobe_clear_state+0x20f/0x290 [ 563.769579][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 563.774358][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 563.780304][ C0] ? __pfx_exit_aio+0x10/0x10 [ 563.785114][ C0] ? uprobe_clear_state+0x274/0x290 [ 563.790423][ C0] ? mm_update_next_owner+0xa7/0x870 [ 563.795775][ C0] __mmput+0x118/0x410 [ 563.799981][ C0] exit_mm+0x1da/0x2c0 [ 563.804108][ C0] ? __pfx_exit_mm+0x10/0x10 [ 563.808952][ C0] ? rcu_is_watching+0x15/0xb0 [ 563.813741][ C0] do_exit+0x648/0x22e0 [ 563.817985][ C0] ? do_raw_spin_lock+0x121/0x290 [ 563.823070][ C0] ? __pfx_do_exit+0x10/0x10 [ 563.827825][ C0] do_group_exit+0x21c/0x2d0 [ 563.832469][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 563.837738][ C0] get_signal+0x125e/0x1310 [ 563.842787][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 563.849069][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 563.855318][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 563.860939][ C0] exit_to_user_mode_loop+0x75/0x110 [ 563.866341][ C0] do_syscall_64+0x2bd/0x3b0 [ 563.870987][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.877106][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 563.883388][ C0] ? clear_bhb_loop+0x60/0xb0 [ 563.888096][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.894093][ C0] RIP: 0033:0x7f32f5b8ebe9 [ 563.898522][ C0] Code: Unable to access opcode bytes at 0x7f32f5b8ebbf. [ 563.905594][ C0] RSP: 002b:00007f32f696e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.914759][ C0] RAX: fffffffffffffe00 RBX: 00007f32f5db5fa8 RCX: 00007f32f5b8ebe9 [ 563.923213][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f32f5db5fa8 [ 563.931298][ C0] RBP: 00007f32f5db5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 563.939375][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.947451][ C0] R13: 00007f32f5db6038 R14: 00007fff32a18900 R15: 00007fff32a189e8 [ 563.955461][ C0] [ 565.095499][ C0] Shutting down cpus with NMI [ 565.100879][ C0] Kernel Offset: disabled [ 565.105332][ C0] Rebooting in 86400 seconds..