last executing test programs: 19m47.440303473s ago: executing program 1 (id=2): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x18, 0x100, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x7e}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x2c}}, 0x20000400) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x1800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) rmdir(&(0x7f00000000c0)='./bus\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x10b8, 0x5, 0x4, 0x0, 0x7f}) 19m42.810402494s ago: executing program 1 (id=14): socket$inet6(0xa, 0x802, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x17a}], 0x1}}], 0x1, 0x42054) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 19m25.623858045s ago: executing program 32 (id=14): socket$inet6(0xa, 0x802, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x17a}], 0x1}}], 0x1, 0x42054) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18m39.688029624s ago: executing program 0 (id=95): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x40) openat$userio(0xffffff9c, 0x0, 0x84180, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300), &(0x7f0000000200), &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) syz_open_pts(r3, 0x2000) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 18m38.871254357s ago: executing program 0 (id=96): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x600, 0xe, 0x0, &(0x7f0000000880)="e977e82a0d0f0b11c3e35739287f", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r3, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r5, r5, 0x3, 0x2, r5, @void, @value=r5}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0xfe33) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) sendto$inet(r4, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) lstat(0x0, &(0x7f0000000600)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x182486, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 18m37.268756445s ago: executing program 0 (id=101): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="040000000000000000000000a4"], 0x20) 18m36.93963363s ago: executing program 0 (id=105): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18m35.882126474s ago: executing program 0 (id=106): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffe24, &(0x7f0000000680)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\x01\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x87\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xa5\xcd\x83\x85\x9b\x95\x86\xf5\x8d\xe1\xe0)\x96\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\x01\x01\x00\x00\x00\x00\x00\x00(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00') 18m35.781451816s ago: executing program 0 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x4, 0xd, 0x7fff, 0x8}, 0x56, [0xf, 0x5, 0xd881, 0x2, 0x0, 0x60, 0xa18, 0x4, 0x112, 0x8, 0x10000, 0x9, 0xfffffffb, 0x53, 0x8, 0x4, 0x2, 0x6, 0x0, 0x9d6e, 0xffff0001, 0xffff, 0x7, 0x4, 0xddf, 0x1, 0x7, 0x1ff, 0x7, 0x0, 0x9, 0x6, 0x7, 0x8, 0x4, 0x6, 0x4, 0x5, 0xfffffff3, 0x8, 0x7, 0x7, 0xfffffff5, 0xe3, 0xc, 0xa5f, 0x4e40, 0x2, 0x3, 0x6, 0x3, 0x10, 0x5, 0xe, 0x6, 0x1, 0x9, 0x679, 0x0, 0x6c2fa8e6, 0x8, 0x5, 0x0, 0x7], [0x1, 0xe81f, 0x9, 0x1, 0x5, 0x270, 0x9, 0x1000, 0x101, 0x5, 0x5, 0x0, 0x4, 0x8, 0x2, 0x5200, 0x7fff, 0xfffffff8, 0xfa, 0x3, 0x5, 0x9, 0x5, 0x5, 0x4, 0x7ff, 0x0, 0xffffffff, 0xa, 0x1, 0x0, 0x8, 0xae77, 0x7, 0x6, 0x9, 0x6c, 0x4, 0xff2, 0x10, 0x3ff, 0x10000, 0x7fff, 0x2, 0x7a83ba40, 0x400, 0x73f1, 0x3, 0x6, 0xa77c, 0x4, 0x82d8, 0x9, 0xff, 0x4, 0x2, 0x7, 0xd6e3, 0x0, 0x4, 0x5288, 0x80000001, 0xfff, 0xfffffffe], [0x9198, 0x7, 0x6, 0x5, 0x7, 0x3, 0xffff, 0x9, 0x100, 0x5, 0x3, 0x5, 0x5, 0x783, 0x3, 0xffffff00, 0xffff7fff, 0x9, 0x7fff, 0x8e4a, 0x5, 0x281, 0x0, 0x8, 0x6, 0x6, 0x1, 0x7, 0x7f, 0x20, 0x8, 0xb7, 0x5, 0x888a, 0x7, 0x8, 0x41, 0x2, 0xe267, 0x0, 0xefab, 0x6, 0x9, 0x3, 0x9a77, 0x101, 0xb60, 0x8, 0x24, 0x1e7, 0x5f0, 0xb40, 0x3ff, 0x4, 0x2, 0xffffffff, 0xc03, 0x0, 0x8, 0x2, 0x5, 0x8001, 0x80000000, 0x9], [0x1000000, 0xc, 0x29e, 0x8, 0x4, 0x4c8, 0x0, 0xabde, 0x61, 0x8, 0x0, 0xffffff7f, 0x0, 0xb233, 0x80000000, 0x8, 0x4, 0xc2c4, 0x80000001, 0x2, 0x9e6, 0x8, 0x8001, 0x3ff, 0x9, 0x80000001, 0x8, 0x9, 0xc, 0x5f1, 0x6, 0x5, 0xffffffff, 0xffffff7f, 0x4, 0x1, 0x80000000, 0xc, 0x200, 0x81, 0x3, 0x7, 0x9, 0xd, 0xb, 0x101, 0x2, 0x904, 0x48c, 0xfffffffa, 0x4, 0x9, 0x7, 0x73ba865f, 0xff, 0xa, 0x5, 0x1, 0x6, 0x2, 0x7, 0x9d, 0xfd, 0x3]}, 0x45c) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, 0x0, 0x0, 0x200) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x84, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x2}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x9}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4c}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7dff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000020811204000000000095000000000000000852d36fd7456c7fb21b511b1cc3a538c9c46968bb9b3e"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18m20.675013973s ago: executing program 33 (id=107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001340)={'syz0\x00', {0x4, 0xd, 0x7fff, 0x8}, 0x56, [0xf, 0x5, 0xd881, 0x2, 0x0, 0x60, 0xa18, 0x4, 0x112, 0x8, 0x10000, 0x9, 0xfffffffb, 0x53, 0x8, 0x4, 0x2, 0x6, 0x0, 0x9d6e, 0xffff0001, 0xffff, 0x7, 0x4, 0xddf, 0x1, 0x7, 0x1ff, 0x7, 0x0, 0x9, 0x6, 0x7, 0x8, 0x4, 0x6, 0x4, 0x5, 0xfffffff3, 0x8, 0x7, 0x7, 0xfffffff5, 0xe3, 0xc, 0xa5f, 0x4e40, 0x2, 0x3, 0x6, 0x3, 0x10, 0x5, 0xe, 0x6, 0x1, 0x9, 0x679, 0x0, 0x6c2fa8e6, 0x8, 0x5, 0x0, 0x7], [0x1, 0xe81f, 0x9, 0x1, 0x5, 0x270, 0x9, 0x1000, 0x101, 0x5, 0x5, 0x0, 0x4, 0x8, 0x2, 0x5200, 0x7fff, 0xfffffff8, 0xfa, 0x3, 0x5, 0x9, 0x5, 0x5, 0x4, 0x7ff, 0x0, 0xffffffff, 0xa, 0x1, 0x0, 0x8, 0xae77, 0x7, 0x6, 0x9, 0x6c, 0x4, 0xff2, 0x10, 0x3ff, 0x10000, 0x7fff, 0x2, 0x7a83ba40, 0x400, 0x73f1, 0x3, 0x6, 0xa77c, 0x4, 0x82d8, 0x9, 0xff, 0x4, 0x2, 0x7, 0xd6e3, 0x0, 0x4, 0x5288, 0x80000001, 0xfff, 0xfffffffe], [0x9198, 0x7, 0x6, 0x5, 0x7, 0x3, 0xffff, 0x9, 0x100, 0x5, 0x3, 0x5, 0x5, 0x783, 0x3, 0xffffff00, 0xffff7fff, 0x9, 0x7fff, 0x8e4a, 0x5, 0x281, 0x0, 0x8, 0x6, 0x6, 0x1, 0x7, 0x7f, 0x20, 0x8, 0xb7, 0x5, 0x888a, 0x7, 0x8, 0x41, 0x2, 0xe267, 0x0, 0xefab, 0x6, 0x9, 0x3, 0x9a77, 0x101, 0xb60, 0x8, 0x24, 0x1e7, 0x5f0, 0xb40, 0x3ff, 0x4, 0x2, 0xffffffff, 0xc03, 0x0, 0x8, 0x2, 0x5, 0x8001, 0x80000000, 0x9], [0x1000000, 0xc, 0x29e, 0x8, 0x4, 0x4c8, 0x0, 0xabde, 0x61, 0x8, 0x0, 0xffffff7f, 0x0, 0xb233, 0x80000000, 0x8, 0x4, 0xc2c4, 0x80000001, 0x2, 0x9e6, 0x8, 0x8001, 0x3ff, 0x9, 0x80000001, 0x8, 0x9, 0xc, 0x5f1, 0x6, 0x5, 0xffffffff, 0xffffff7f, 0x4, 0x1, 0x80000000, 0xc, 0x200, 0x81, 0x3, 0x7, 0x9, 0xd, 0xb, 0x101, 0x2, 0x904, 0x48c, 0xfffffffa, 0x4, 0x9, 0x7, 0x73ba865f, 0xff, 0xa, 0x5, 0x1, 0x6, 0x2, 0x7, 0x9d, 0xfd, 0x3]}, 0x45c) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, 0x0, 0x0, 0x200) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r3, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x84, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x2}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x9}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4c}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7dff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000bc0)={0x1, @sdr={0x41416770, 0x66c2}}) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000020811204000000000095000000000000000852d36fd7456c7fb21b511b1cc3a538c9c46968bb9b3e"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m8.032929758s ago: executing program 4 (id=7500): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r3, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x4) 5m7.39540789s ago: executing program 4 (id=7513): setuid(0xee00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 5m7.159553039s ago: executing program 4 (id=7519): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) chroot(&(0x7f0000000140)='./file0/../file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) unshare(0x6020400) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 5m6.775592736s ago: executing program 4 (id=7526): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m3.159662643s ago: executing program 4 (id=7585): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 5m2.798883753s ago: executing program 34 (id=7585): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 14.681772254s ago: executing program 5 (id=10839): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x2, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xfffffffb, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x6, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x30fa, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0xa, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x7, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x2, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x1ff, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x3, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x8, 0xfffff3f6, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x0, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x8, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x9, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x7, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0xffffff7f, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0xc, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x2, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x400, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb6, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x0, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000900000084"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) 13.418163684s ago: executing program 5 (id=10844): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r1 = getpgrp(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c08000340000000b10800044000000022"], 0x104}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x1, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={r1, r2, 0xffffffffffffffff}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x8}, 0x1c, &(0x7f0000000780), 0x1}}], 0x1, 0x20000014) shutdown(r4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4, 0x80000000, 0x4, 0x10, 0x1, 0x2, 0xb, 0x40003, 0x80008, 0x2, 0x2, 0x1, 0x7, 0x1, 0x3, 0xfd, 0x2, 0xd, 0xfffffff9, 0x80000000, 0x3, 0x174000, 0x101, 0x20001e58, 0xfffbffff, 0xf3a2, 0x3, 0x80002008, 0xa6b7, 0x24a05ffd, 0x1fe]}) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r0, 0x0, 0x3a) 13.182971379s ago: executing program 5 (id=10849): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r1 = getpgrp(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c08000340000000b10800044000000022"], 0x104}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x1, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={r1, r2, 0xffffffffffffffff}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x8}, 0x1c, &(0x7f0000000780), 0x1}}], 0x1, 0x20000014) shutdown(r4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4, 0x80000000, 0x4, 0x10, 0x1, 0x2, 0xb, 0x40003, 0x80008, 0x2, 0x2, 0x1, 0x7, 0x1, 0x3, 0xfd, 0x2, 0xd, 0xfffffff9, 0x80000000, 0x3, 0x174000, 0x101, 0x20001e58, 0xfffbffff, 0xf3a2, 0x3, 0x80002008, 0xa6b7, 0x24a05ffd, 0x1fe]}) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r0, 0x0, 0x3a) 12.438865913s ago: executing program 5 (id=10854): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 10.811911645s ago: executing program 7 (id=10861): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40001003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x5, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf250000000000000000"], 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.767642167s ago: executing program 5 (id=10862): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video(0x0, 0x75, 0x101140) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x6, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@x, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}}, &(0x7f00000021c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r1, 0x200004) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000100)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x3ff, 0x5, 0x3ff, r2}) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x4021, 0x2, @tid=r3}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) 9.486009859s ago: executing program 7 (id=10880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c00018006000100d10300000800034000000001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 9.254340577s ago: executing program 3 (id=10884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, 0x0) socket$nl_route(0x10, 0x3, 0x0) tkill(0x0, 0xb) r4 = io_uring_setup(0x47b0, &(0x7f0000000240)={0x0, 0xf0ce, 0x3481, 0xfffffffc, 0x227}) io_uring_enter(r4, 0x0, 0xcc, 0x1, 0x0, 0x0) 7.813374391s ago: executing program 3 (id=10891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'xchacha20\x00'}}}, 0xe0}}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x29380, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb63"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r7, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x3044}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4801) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f0000001a40)=@svm={0x102, 0x1, 0x1080, {0x30000}, {"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"}}) 7.774668771s ago: executing program 7 (id=10892): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000580000000000", @ANYBLOB, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 7.299051508s ago: executing program 7 (id=10897): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 5.949996636s ago: executing program 7 (id=10904): socket$inet6_sctp(0xa, 0x5, 0x84) read$FUSE(0xffffffffffffffff, &(0x7f00000037c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 5.724385471s ago: executing program 3 (id=10906): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x8) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x4) landlock_restrict_self(r1, 0x5) r2 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.993546529s ago: executing program 5 (id=10907): syz_open_dev$vim2m(&(0x7f0000002c80), 0x4003, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400080, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0/file0\x00', 0x98) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_set$pid(0x2, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902"], 0x0) syz_open_dev$vcsu(0x0, 0x4, 0x280402) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="f4000000010101020000000000000000000000078c00068008000100e000000214000500ff0100000000000000000000000000013c000380060001004e240800000001004e240000060002004e200000060001004e240000060001004e240000060002004e220000060001004e24000014000400fc010000000000000000040000000001140005000000000000000000000000000000000108000100e0000001140005800f000100746674702d3230a224300000060012"], 0xf4}, 0x1, 0x0, 0x0, 0x4008050}, 0x20040800) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) socket(0x23, 0x5, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040841) 4.883564349s ago: executing program 2 (id=10908): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x80002, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037", 0x3, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 4.783879536s ago: executing program 3 (id=10909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4.571696421s ago: executing program 2 (id=10911): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c08000340000000b10800044000000022"], 0x104}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, r2, 0xffffffffffffffff}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x8}, 0x1c, &(0x7f0000000780), 0x1}}], 0x1, 0x20000014) shutdown(r4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4, 0x80000000, 0x4, 0x10, 0x1, 0x2, 0xb, 0x40003, 0x80008, 0x2, 0x2, 0x1, 0x7, 0x1, 0x3, 0xfd, 0x2, 0xd, 0xfffffff9, 0x80000000, 0x3, 0x174000, 0x101, 0x20001e58, 0xfffbffff, 0xf3a2, 0x3, 0x80002008, 0xa6b7, 0x24a05ffd, 0x1fe]}) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r0, 0x0, 0x3a) 3.571039234s ago: executing program 3 (id=10913): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) 3.562709382s ago: executing program 2 (id=10914): syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000240)=@add_del={0x2, 0x0}) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x240042, 0x1) close(r0) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_emit_ethernet(0x52, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000001300), 0x7cda, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000001340)={0x0, 0x6, 0x1}) 3.2313716s ago: executing program 2 (id=10916): syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil) syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) unshare(0x2c020400) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x40400) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = getpid() process_vm_readv(r4, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) 2.062946258s ago: executing program 6 (id=10920): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0x1223d9c75d984443) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x2804c044}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x9, 0x7, 0xfffffeff, 0x5a088, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x0, 0x4, 0x3, 0x2, @value=r1, @void, @value=r2}, 0x50) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x209}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r4, 0x9, 0x3, 0x5, 0xfffffffe}, &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0) r6 = dup(r5) mmap(&(0x7f0000535000/0x2000)=nil, 0x2000, 0xc, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.048191402s ago: executing program 6 (id=10921): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x10, 0x80002, 0x4) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037", 0x3, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.928109564s ago: executing program 6 (id=10922): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000006c0)=ANY=[], 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe4) membarrier(0x10, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000000)={r7, 0x3, 0x8}, 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan4\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c0001800800feff", @ANYRES32, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000100)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x44}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 1.782931725s ago: executing program 6 (id=10923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/214, 0xd6}], 0x2, &(0x7f0000000640)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa4}}, {{0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000cc0)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000e40)}], 0x1}}, {{&(0x7f0000001100), 0x6e, &(0x7f0000001240)=[{&(0x7f0000001180)=""/152, 0x98}], 0x1}}], 0x4, 0x40, &(0x7f0000001400)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000140)=0x1, 0x61, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$eventfd(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) syz_open_dev$sg(0x0, 0x0, 0x80201) socket$alg(0x26, 0x5, 0x0) 1.723618164s ago: executing program 7 (id=10924): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c08000340000000b10800044000000022"], 0x104}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, r2, 0xffffffffffffffff}, 0xc) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0x8}, 0x1c, &(0x7f0000000780), 0x1}}], 0x1, 0x20000014) shutdown(r4, 0x1) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4, 0x80000000, 0x4, 0x10, 0x1, 0x2, 0xb, 0x40003, 0x80008, 0x2, 0x2, 0x1, 0x7, 0x1, 0x3, 0xfd, 0x2, 0xd, 0xfffffff9, 0x80000000, 0x3, 0x174000, 0x101, 0x20001e58, 0xfffbffff, 0xf3a2, 0x3, 0x80002008, 0xa6b7, 0x24a05ffd, 0x1fe]}) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r7, r0, 0x0, 0x3a) 1.650176736s ago: executing program 6 (id=10925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x6, 0x248, 0x9b9a}, 0x3a, [0xfffffff5, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0x2, 0x4, 0x81, 0xe4, 0x6, 0xfc000000, 0x9, 0xbbf, 0x200, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe768, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x16e, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x101, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0xb, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0x55c, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x1, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40001003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x3, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x4, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x2, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x3, 0x939, 0x6, 0x80008001, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7ffffffe, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x5, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf25000000000000000008000500d470"], 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x0, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.591567916s ago: executing program 2 (id=10926): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000050b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x34, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.033206756s ago: executing program 3 (id=10927): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) socket(0x11, 0x80a, 0x200) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) socket$inet_tcp(0x2, 0x1, 0x0) eventfd2(0x83, 0x80001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 547.852µs ago: executing program 2 (id=10928): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1, 0xffff}, 0x20) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) 0s ago: executing program 6 (id=10929): syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = shmget$private(0x0, 0x400000, 0x4, &(0x7f000000e000/0x400000)=nil) syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) unshare(0x2c020400) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x40400) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = getpid() process_vm_readv(r3, &(0x7f0000000d00)=[{&(0x7f00000009c0)=""/141, 0x8d}], 0x1, &(0x7f0000000800)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) kernel console output (not intermixed with test programs): 1 has invalid maxpacket 9865, setting to 1024 [ 940.291429][ T8573] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 940.291440][ T8573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.309319][ T8573] usb 5-1: config 0 descriptor?? [ 940.328726][T22550] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 940.797971][ T8573] asus 0003:0B05:1ABE.0021: unexpected long global item [ 940.798721][ T8573] asus 0003:0B05:1ABE.0021: Asus hid parse failed: -22 [ 940.798822][ T8573] asus 0003:0B05:1ABE.0021: probe with driver asus failed with error -22 [ 940.972613][ T8573] usb 5-1: USB disconnect, device number 38 [ 943.282396][T22731] tipc: Enabled bearer , priority 10 [ 943.804366][T22766] loop5: detected capacity change from 0 to 6 [ 943.817122][T22766] Dev loop5: unable to read RDB block 6 [ 943.817152][T22766] loop5: AHDI p1 p2 [ 943.817171][T22766] loop5: partition table partially beyond EOD, truncated [ 943.835212][T22766] loop5: p1 start 1702059890 is beyond EOD, truncated [ 943.989084][ T5951] kernel read not supported for file /video9 (pid: 5951 comm: kworker/1:8) [ 944.107879][ T31] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 944.281923][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 944.281956][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 944.281993][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 944.282013][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.349607][ T31] usb 5-1: config 0 descriptor?? [ 944.855225][ T31] hid_parser_main: 861 callbacks suppressed [ 944.855247][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855276][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855299][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855322][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855344][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855366][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855388][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855411][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855434][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.855456][ T31] kovaplus 0003:1E7D:2D50.0022: unknown main item tag 0x0 [ 944.968920][ T31] kovaplus 0003:1E7D:2D50.0022: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 945.009684][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 480 seconds [ 945.256047][ T31] kovaplus 0003:1E7D:2D50.0022: couldn't init struct kovaplus_device [ 945.256129][ T31] kovaplus 0003:1E7D:2D50.0022: couldn't install mouse [ 945.290847][ T31] kovaplus 0003:1E7D:2D50.0022: probe with driver kovaplus failed with error -71 [ 945.312543][ T31] usb 5-1: USB disconnect, device number 39 [ 945.358864][T22832] program syz.5.6848 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 945.888855][T22855] loop8: detected capacity change from 0 to 7 [ 945.893910][T22855] Dev loop8: unable to read RDB block 7 [ 945.893951][T22855] loop8: unable to read partition table [ 945.894154][T22855] loop8: partition table beyond EOD, truncated [ 945.894174][T22855] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 946.527015][T22891] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 950.172045][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6963'. [ 950.227879][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 950.379598][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 950.398554][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 950.402220][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 950.402246][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.402276][ T31] usb 4-1: Product: syz [ 950.402288][ T31] usb 4-1: Manufacturer: syz [ 950.402300][ T31] usb 4-1: SerialNumber: syz [ 950.462362][ T31] usb 4-1: config 0 descriptor?? [ 950.503273][ T31] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 950.503305][ T31] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 950.860064][T23096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6977'. [ 951.095601][ T31] em28xx 4-1:0.0: chip ID is em2765 [ 951.677010][ T31] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 951.677041][ T31] em28xx 4-1:0.0: board has no eeprom [ 951.720196][ T5607] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 951.777823][ T31] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 951.777950][ T31] em28xx 4-1:0.0: dvb set to bulk mode. [ 951.778606][ T5740] em28xx 4-1:0.0: Binding DVB extension [ 951.828655][ T31] usb 4-1: USB disconnect, device number 36 [ 951.831560][ T31] em28xx 4-1:0.0: Disconnecting em28xx [ 951.879840][ T5607] usb 5-1: Using ep0 maxpacket: 16 [ 951.884865][ T5607] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.884890][ T5607] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 951.898536][ T5607] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 951.898563][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.898581][ T5607] usb 5-1: Product: syz [ 951.898594][ T5607] usb 5-1: Manufacturer: syz [ 951.898605][ T5607] usb 5-1: SerialNumber: syz [ 952.030221][ T5607] usb 5-1: 0:2 : does not exist [ 952.034595][ T5740] em28xx 4-1:0.0: Registering input extension [ 952.062147][ T31] em28xx 4-1:0.0: Closing input extension [ 952.209162][ T5607] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 952.427928][T23151] netlink: 'syz.3.7003': attribute type 6 has an invalid length. [ 952.543753][ T31] em28xx 4-1:0.0: Freeing device [ 952.727559][ T5607] usb 5-1: USB disconnect, device number 40 [ 952.871386][T16243] udevd[16243]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 953.656414][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7033'. [ 953.656447][T23206] netlink: 'syz.4.7033': attribute type 30 has an invalid length. [ 953.693302][T23206] vxlan1: entered promiscuous mode [ 953.693327][T23206] vxlan1: entered allmulticast mode [ 953.701967][ T1850] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.702194][ T1850] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.702227][ T1850] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.702257][ T1850] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.731013][T23206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7033'. [ 953.731046][T23206] netlink: 'syz.4.7033': attribute type 30 has an invalid length. [ 953.783122][T23206] vxlan2: entered promiscuous mode [ 953.783146][T23206] vxlan2: entered allmulticast mode [ 953.786327][T23214] netlink: 'syz.3.7034': attribute type 10 has an invalid length. [ 954.382342][T23246] loop8: detected capacity change from 0 to 7 [ 954.385780][T23246] Dev loop8: unable to read RDB block 7 [ 954.385822][T23246] loop8: unable to read partition table [ 954.386015][T23246] loop8: partition table beyond EOD, truncated [ 954.386033][T23246] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 955.988239][ T5607] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 956.142835][ T5607] usb 5-1: Using ep0 maxpacket: 16 [ 956.149288][ T5607] usb 5-1: unable to get BOS descriptor or descriptor too short [ 956.153291][ T5607] usb 5-1: config 6 has an invalid interface number: 166 but max is 0 [ 956.153314][ T5607] usb 5-1: config 6 has no interface number 0 [ 956.153354][ T5607] usb 5-1: config 6 interface 166 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 8 [ 956.153374][ T5607] usb 5-1: config 6 interface 166 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 956.153391][ T5607] usb 5-1: config 6 interface 166 altsetting 2 has an endpoint descriptor with address 0x91, changing to 0x81 [ 956.153413][ T5607] usb 5-1: config 6 interface 166 altsetting 2 endpoint 0x81 has an invalid bInterval 93, changing to 10 [ 956.153445][ T5607] usb 5-1: config 6 interface 166 altsetting 2 endpoint 0x81 has invalid maxpacket 33614, setting to 1024 [ 956.153468][ T5607] usb 5-1: config 6 interface 166 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 956.153490][ T5607] usb 5-1: config 6 interface 166 has no altsetting 0 [ 956.161739][ T5607] usb 5-1: New USB device found, idVendor=0403, idProduct=f44c, bcdDevice=32.e1 [ 956.161765][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.161790][ T5607] usb 5-1: Product: syz [ 956.161803][ T5607] usb 5-1: Manufacturer: syz [ 956.161814][ T5607] usb 5-1: SerialNumber: syz [ 956.187359][T23313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 956.187664][T23313] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 956.450347][ T5607] ftdi_sio 5-1:6.166: FTDI USB Serial Device converter detected [ 956.473799][ T5607] ftdi_sio ttyUSB0: unknown device type: 0x32e1 [ 956.548127][ T5607] usb 5-1: USB disconnect, device number 41 [ 956.587089][ T5607] ftdi_sio 5-1:6.166: device disconnected [ 956.641880][T23330] loop3: detected capacity change from 0 to 7 [ 956.834956][T23330] Dev loop3: unable to read RDB block 7 [ 956.834999][T23330] loop3: unable to read partition table [ 956.835174][T23330] loop3: partition table beyond EOD, truncated [ 956.835222][T23330] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 957.518185][ T197] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 957.717813][ T197] usb 5-1: Using ep0 maxpacket: 16 [ 957.723872][ T197] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 957.723899][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.723916][ T197] usb 5-1: Product: syz [ 957.723928][ T197] usb 5-1: Manufacturer: syz [ 957.723940][ T197] usb 5-1: SerialNumber: syz [ 957.729444][ T197] usb 5-1: config 0 descriptor?? [ 957.903769][ T197] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 958.805982][ T197] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 958.834298][ T197] usb 5-1: USB disconnect, device number 42 [ 958.882278][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7125'. [ 960.655444][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7159'. [ 960.917825][ T31] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 961.101962][ T31] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 961.101993][ T31] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 8909, setting to 1024 [ 961.102018][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 961.102048][ T31] usb 6-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 961.102068][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.164596][ T31] usb 6-1: config 0 descriptor?? [ 961.611722][ T31] hid (null): unknown global tag 0xe4 [ 961.612637][ T31] hid (null): unknown global tag 0xc [ 961.612664][ T31] hid (null): unknown global tag 0xd [ 961.612686][ T31] hid (null): unknown global tag 0xd [ 961.612700][ T31] hid (null): invalid report_size 1128036094 [ 961.612714][ T31] hid (null): unknown global tag 0xc [ 961.612726][ T31] hid (null): bogus close delimiter [ 961.612767][ T31] hid (null): unknown global tag 0xb3 [ 961.671244][ T31] hid_parser_main: 222 callbacks suppressed [ 961.671265][ T31] evision 0003:320F:5041.0023: unknown main item tag 0x0 [ 961.671293][ T31] evision 0003:320F:5041.0023: unknown main item tag 0x0 [ 961.671340][ T31] evision 0003:320F:5041.0023: unknown main item tag 0x0 [ 961.671373][ T31] evision 0003:320F:5041.0023: unknown main item tag 0x0 [ 961.671397][ T31] evision 0003:320F:5041.0023: unknown main item tag 0x0 [ 961.671420][ T31] evision 0003:320F:5041.0023: unknown main item tag 0x0 [ 961.671443][ T31] evision 0003:320F:5041.0023: unknown main item tag 0x0 [ 961.671465][ T31] evision 0003:320F:5041.0023: collection stack underflow [ 961.671486][ T31] evision 0003:320F:5041.0023: item 0 0 0 12 parsing failed [ 961.672246][ T31] evision 0003:320F:5041.0023: probe with driver evision failed with error -22 [ 961.827157][ T8573] usb 6-1: USB disconnect, device number 44 [ 962.552764][T23554] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7192'. [ 963.927214][T23628] syz_tun: entered allmulticast mode [ 963.985125][T23628] syz_tun: left allmulticast mode [ 965.413780][T23702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7264'. [ 965.413808][T23702] bond0: Unable to set down delay as MII monitoring is disabled [ 965.697519][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7268'. [ 965.697543][T23709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7268'. [ 965.711255][T23709] netlink: 'syz.4.7268': attribute type 2 has an invalid length. [ 965.711275][T23709] netlink: 8824 bytes leftover after parsing attributes in process `syz.4.7268'. [ 965.711290][T23709] netlink: 'syz.4.7268': attribute type 2 has an invalid length. [ 965.714070][T23714] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7267'. [ 965.714558][T23714] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7267'. [ 965.967219][T23722] : renamed from team_slave_1 (while UP) [ 966.313283][T23741] binder: BINDER_SET_CONTEXT_MGR already set [ 966.313297][T23741] binder: 23738:23741 ioctl 4018620d 200000003280 returned -16 [ 966.316265][T23741] binder: 23738:23741 ioctl c0306201 200000000080 returned -14 [ 966.490254][ T5740] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 966.645318][ T5740] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 966.645349][ T5740] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.645367][ T5740] usb 6-1: config 2 interface 0 has no altsetting 0 [ 966.645396][ T5740] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 966.645414][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.075710][T23781] binder: BINDER_SET_CONTEXT_MGR already set [ 967.075725][T23781] binder: 23780:23781 ioctl 4018620d 200000000080 returned -16 [ 967.093975][T23781] binder_alloc: 16433: binder_alloc_buf, no vma [ 967.158449][ T5740] elo 0003:04E7:0009.0024: unknown main item tag 0x5 [ 967.158503][ T5740] elo 0003:04E7:0009.0024: item fetching failed at offset 1/5 [ 967.159163][ T5740] elo 0003:04E7:0009.0024: parse failed [ 967.159270][ T5740] elo 0003:04E7:0009.0024: probe with driver elo failed with error -22 [ 967.351276][ T5740] usb 6-1: USB disconnect, device number 45 [ 967.448295][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'. [ 969.027847][ T197] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 969.177885][ T197] usb 5-1: Using ep0 maxpacket: 16 [ 969.183721][ T197] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 969.183752][ T197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 969.224870][ T197] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 969.224898][ T197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.224915][ T197] usb 5-1: Product: syz [ 969.224928][ T197] usb 5-1: Manufacturer: syz [ 969.224941][ T197] usb 5-1: SerialNumber: syz [ 969.274770][ T197] usb 5-1: config 0 descriptor?? [ 969.289658][ T197] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 969.289688][ T197] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 969.974538][ T197] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 969.985269][ T197] em28xx 5-1:0.0: Config register raw data: 0x9a [ 970.192248][ T197] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 970.192269][ T197] em28xx 5-1:0.0: No AC97 audio processor [ 970.232237][ T197] usb 5-1: USB disconnect, device number 43 [ 970.245414][ T197] em28xx 5-1:0.0: Disconnecting em28xx [ 970.410502][ T197] em28xx 5-1:0.0: Freeing device [ 971.558080][ T197] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 971.710021][ T197] usb 6-1: Using ep0 maxpacket: 32 [ 971.713079][ T197] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 971.713129][ T197] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 971.713152][ T197] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 971.713175][ T197] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 971.773831][ T197] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 971.773860][ T197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.773879][ T197] usb 6-1: Product: syz [ 971.773892][ T197] usb 6-1: Manufacturer: syz [ 971.773904][ T197] usb 6-1: SerialNumber: syz [ 971.864258][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 972.294572][ T197] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input35 [ 972.466507][ T197] imon:send_packet: packet tx failed (-71) [ 972.482154][ T197] imon 6-1:155.0: panel buttons/knobs setup failed [ 972.482249][ T197] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 972.482261][ T197] (id 0x00) [ 972.746848][ T197] rc_core: IR keymap rc-imon-pad not found [ 972.746866][ T197] Registered IR keymap rc-empty [ 972.747021][ T197] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 972.747038][ T197] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 972.779391][ T197] imon:send_packet: packet tx failed (-71) [ 972.798456][ T197] imon 6-1:155.0: remote input dev register failed [ 972.804901][ T197] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 973.096923][ T197] imon 6-1:155.0: unable to initialize intf0, err 0 [ 973.096944][ T197] imon:imon_probe: failed to initialize context! [ 973.096955][ T197] imon 6-1:155.0: unable to register, err -19 [ 973.142467][ T197] usb 6-1: USB disconnect, device number 46 [ 975.078153][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 510 seconds [ 976.158050][ T5740] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 976.328843][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 976.331281][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.331312][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.331348][ T5740] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 976.331367][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.343658][ T5740] usb 4-1: config 0 descriptor?? [ 976.410981][ T5740] hub 4-1:0.0: USB hub found [ 976.606696][ T5740] hub 4-1:0.0: 1 port detected [ 977.223555][ T5740] hub 4-1:0.0: activate --> -90 [ 977.425111][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 977.425509][ T5740] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 977.446284][ T8573] usb 4-1: USB disconnect, device number 37 [ 977.466822][ T1883] usb 4-1: Failed to suspend device, error -19 [ 978.167227][T24280] loop2: detected capacity change from 0 to 7 [ 978.238575][T24281] ref_ctr_offset mismatch. inode: 0x1414 offset: 0x0 ref_ctr_offset(old): 0x2000000001c0 ref_ctr_offset(new): 0x0 [ 978.284812][T24280] Dev loop2: unable to read RDB block 7 [ 978.284851][T24280] loop2: unable to read partition table [ 978.285053][T24280] loop2: partition table beyond EOD, truncated [ 978.285086][T24280] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 978.984320][T24307] syz_tun: entered allmulticast mode [ 979.707888][ T197] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 979.857825][ T197] usb 4-1: Using ep0 maxpacket: 32 [ 979.876871][ T197] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 69 [ 979.880378][ T197] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 979.880403][ T197] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 979.880420][ T197] usb 4-1: Product: syz [ 979.880432][ T197] usb 4-1: Manufacturer: syz [ 979.880443][ T197] usb 4-1: SerialNumber: syz [ 979.930904][ T197] usb 4-1: config 0 descriptor?? [ 979.931714][T24319] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 979.933747][ T197] hub 4-1:0.0: bad descriptor, ignoring hub [ 979.934837][ T197] hub 4-1:0.0: probe with driver hub failed with error -5 [ 980.339676][ T5740] usb 4-1: USB disconnect, device number 38 [ 981.582218][T24392] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7578'. [ 981.627923][ T197] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 981.777885][ T197] usb 4-1: Using ep0 maxpacket: 16 [ 981.780177][ T197] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 146, changing to 7 [ 981.782719][ T197] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 981.782745][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.782762][ T197] usb 4-1: Product: syz [ 981.782774][ T197] usb 4-1: Manufacturer: syz [ 981.782787][ T197] usb 4-1: SerialNumber: syz [ 982.102503][ T197] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 982.504794][ T197] usb 4-1: USB disconnect, device number 39 [ 982.666853][T11870] udevd[11870]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.777621][T18442] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 982.863406][T18442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 982.919996][T18442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 982.926209][T18442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 982.926967][T18442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 984.677976][ T5740] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 984.868656][T24476] sg_write: data in/out 467008/136 bytes for SCSI command 0x0-- guessing data in; [ 984.868656][T24476] program syz.5.7613 not setting count and/or reply_len properly [ 985.049514][ T5612] Bluetooth: hci2: command tx timeout [ 985.268678][ T5740] usb 6-1: unable to get BOS descriptor or descriptor too short [ 985.270875][ T5740] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 985.270909][ T5740] usb 6-1: can't read configurations, error -71 [ 986.376240][T24417] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.378024][T24417] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.378274][T24417] bridge_slave_0: entered allmulticast mode [ 986.384388][T24417] bridge_slave_0: entered promiscuous mode [ 986.434364][T24417] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.434592][T24417] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.434815][T24417] bridge_slave_1: entered allmulticast mode [ 986.437272][T24417] bridge_slave_1: entered promiscuous mode [ 986.497894][ T5740] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 986.647836][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 986.679365][ T5740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.679395][ T5740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.679430][ T5740] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 986.679450][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.699267][ T5740] usb 6-1: config 0 descriptor?? [ 986.786737][ T5740] hub 6-1:0.0: USB hub found [ 986.821039][T24417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.074229][T24417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.093251][ T5740] hub 6-1:0.0: 1 port detected [ 987.117839][ T5612] Bluetooth: hci2: command tx timeout [ 987.426835][T24417] team0: Port device team_slave_0 added [ 987.441763][T24417] team0: Port device team_slave_1 added [ 987.679819][T24417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.679836][T24417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.680093][T24417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.736820][ T5740] hub 6-1:0.0: activate --> -90 [ 987.801325][T24417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.801341][T24417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.801361][T24417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 988.447415][T24417] hsr_slave_0: entered promiscuous mode [ 988.459312][T24417] hsr_slave_1: entered promiscuous mode [ 988.465355][T24417] debugfs: 'hsr0' already exists in 'hsr' [ 988.465383][T24417] Cannot create hsr debugfs directory [ 988.591570][ T8573] usb 6-1: USB disconnect, device number 49 [ 988.608710][ T5740] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 988.609249][ T5740] usb 6-1-port1: attempt power cycle [ 989.207878][ T5612] Bluetooth: hci2: command tx timeout [ 991.277919][ T5612] Bluetooth: hci2: command tx timeout [ 992.838667][ T5740] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 992.902368][T24417] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 992.934173][T24417] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.936955][T24417] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 992.959647][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.985160][T24417] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.997308][T24417] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 993.009804][ T5740] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 993.030551][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.030600][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.030619][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.034096][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.034161][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.034181][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.035333][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.035381][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.035400][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.043567][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.043638][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.043659][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.063444][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.063493][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.063512][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.091187][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.091247][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.091267][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.117922][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.117975][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.117994][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.120329][ T5740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 993.120377][ T5740] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 993.120396][ T5740] usb 6-1: config 0 interface 0 has no altsetting 0 [ 993.139572][ T5740] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 993.139599][ T5740] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 993.139617][ T5740] usb 6-1: Product: syz [ 993.139630][ T5740] usb 6-1: Manufacturer: syz [ 993.139642][ T5740] usb 6-1: SerialNumber: syz [ 993.168478][ T5740] usb 6-1: config 0 descriptor?? [ 993.191718][ T5740] yurex 6-1:0.0: Could not find endpoints [ 993.368410][T24417] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.377638][T24417] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 993.433939][ T5740] usb 6-1: USB disconnect, device number 54 [ 993.463549][T24417] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.769897][T24417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.796950][T24417] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.807429][T18608] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.807655][T18608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.873254][ T1785] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.873376][ T1785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 994.587841][ T31] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 994.750138][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 994.752738][ T31] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 994.752791][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.752814][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.752833][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 994.752870][ T31] usb 6-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 994.752888][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.793118][ T31] usb 6-1: config 0 descriptor?? [ 995.251137][ T31] hid (null): global environment stack underflow [ 995.293675][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293708][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293731][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293755][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293780][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293805][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293829][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293855][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293881][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.293906][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: unknown main item tag 0x0 [ 995.300738][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: global environment stack underflow [ 995.300759][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: item 0 1 1 11 parsing failed [ 995.301757][ T31] aquacomputer_d5next 0003:0C70:F00E.0025: probe with driver aquacomputer_d5next failed with error -22 [ 995.476905][ T31] usb 6-1: USB disconnect, device number 55 [ 995.767870][ T5740] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 995.918157][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 996.117267][T24417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.941216][ T5740] usb 4-1: unable to get BOS descriptor or descriptor too short [ 996.942207][ T5740] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 996.942238][ T5740] usb 4-1: can't read configurations, error -71 [ 997.315514][T24417] veth0_vlan: entered promiscuous mode [ 997.333375][T24417] veth1_vlan: entered promiscuous mode [ 997.854091][T24417] veth0_macvtap: entered promiscuous mode [ 997.985935][T24417] veth1_macvtap: entered promiscuous mode [ 998.063481][T24417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.100469][T24417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.132338][ T3411] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.132538][ T3411] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.132572][ T3411] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.132602][ T3411] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.159832][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7795'. [ 999.370974][T18609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.370994][T18609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.665648][ T1785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.665665][ T1785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.379722][T24945] netlink: 'syz.7.7586': attribute type 4 has an invalid length. [ 1000.627975][ T8573] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1000.777810][ T8573] usb 6-1: Using ep0 maxpacket: 16 [ 1000.783168][ T8573] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1000.783193][ T8573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.783209][ T8573] usb 6-1: Product: syz [ 1000.783277][ T8573] usb 6-1: Manufacturer: syz [ 1000.783289][ T8573] usb 6-1: SerialNumber: syz [ 1001.677884][T24997] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7848'. [ 1001.732778][ T8573] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1001.777604][ T8573] usb 6-1: USB disconnect, device number 56 [ 1001.918053][ T5612] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1003.857903][ T5951] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1004.007831][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 1004.013822][ T5951] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1004.013853][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1004.068262][ T5951] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1004.068291][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.068308][ T5951] usb 6-1: Product: syz [ 1004.068320][ T5951] usb 6-1: Manufacturer: syz [ 1004.068333][ T5951] usb 6-1: SerialNumber: syz [ 1004.123525][ T5951] usb 6-1: config 0 descriptor?? [ 1004.143287][ T5951] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1004.145562][ T5951] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1004.755733][ T5951] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1004.762829][ T5951] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1005.177184][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 540 seconds [ 1005.367870][ T5951] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1005.368656][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1005.572899][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1005.573321][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1005.574283][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1005.574692][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1005.612958][ T5951] usb 6-1: USB disconnect, device number 57 [ 1007.925625][T25206] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7949'. [ 1007.925654][T25206] nbd: must specify a device to reconfigure [ 1008.388138][ T8573] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1008.607867][ T5740] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1008.647838][ T8573] usb 8-1: Using ep0 maxpacket: 16 [ 1008.650468][ T8573] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1008.650498][ T8573] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1008.691587][ T8573] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1008.691614][ T8573] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.691631][ T8573] usb 8-1: Product: syz [ 1008.691642][ T8573] usb 8-1: Manufacturer: syz [ 1008.691654][ T8573] usb 8-1: SerialNumber: syz [ 1008.741145][ T8573] usb 8-1: config 0 descriptor?? [ 1008.747361][ T8573] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1008.747390][ T8573] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1009.374453][ T8573] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1009.379964][ T8573] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1010.011959][ T8573] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 1010.012726][ T8573] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 1010.018190][ T8573] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 1010.226589][ T8573] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 1010.227012][ T8573] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 1010.227393][ T8573] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 1010.249631][ T8573] usb 8-1: USB disconnect, device number 2 [ 1011.352195][T25317] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1011.352220][T25317] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1011.352305][T25317] vhci_hcd vhci_hcd.0: Device attached [ 1012.029276][T25321] vhci_hcd: connection closed [ 1012.124352][ T1785] vhci_hcd vhci_hcd.3: stop threads [ 1012.124378][ T1785] vhci_hcd vhci_hcd.3: release socket [ 1012.124447][ T1785] vhci_hcd vhci_hcd.3: disconnect device [ 1012.808003][ T5951] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1012.958202][ T5951] usb 8-1: Using ep0 maxpacket: 8 [ 1012.960392][ T5951] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.960414][ T5951] usb 8-1: config 0 has no interfaces? [ 1012.967080][ T5951] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1012.967107][ T5951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.967126][ T5951] usb 8-1: Product: syz [ 1012.967138][ T5951] usb 8-1: Manufacturer: syz [ 1012.967150][ T5951] usb 8-1: SerialNumber: syz [ 1013.051317][ T5951] usb 8-1: config 0 descriptor?? [ 1015.533174][ T197] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1015.730034][ T197] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1015.730085][ T197] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1015.730123][ T197] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1015.730144][ T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.746097][ T197] usb 4-1: config 0 descriptor?? [ 1015.774474][ T197] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1015.925793][ T197] usb 8-1: USB disconnect, device number 3 [ 1016.417908][ T197] usb 4-1: USB disconnect, device number 42 [ 1019.870977][ T31] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1020.039952][ T31] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1020.039979][ T31] usb 4-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1020.039998][ T31] usb 4-1: Product: syz [ 1020.040011][ T31] usb 4-1: Manufacturer: syz [ 1020.040023][ T31] usb 4-1: SerialNumber: syz [ 1020.082726][ T31] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1020.507543][ T31] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1020.507600][ T31] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1021.435903][ T31] usb 4-1: USB disconnect, device number 43 [ 1023.139126][ T8573] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1023.289650][ T8573] usb 8-1: Using ep0 maxpacket: 8 [ 1023.291724][ T8573] usb 8-1: config 248 has an invalid descriptor of length 45, skipping remainder of the config [ 1023.291749][ T8573] usb 8-1: config 248 has 0 interfaces, different from the descriptor's value: 1 [ 1023.291783][ T8573] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1023.291802][ T8573] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.956512][T25621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.007026][T25621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.270346][ T8573] usb 8-1: string descriptor 0 read error: -71 [ 1024.299028][ T8573] usb 8-1: USB disconnect, device number 4 [ 1025.107352][T25652] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1034.547957][ T31] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1035.177878][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1035.181054][ T31] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1035.181072][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1035.187909][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1035.187935][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.187951][ T31] usb 6-1: Product: syz [ 1035.187962][ T31] usb 6-1: Manufacturer: syz [ 1035.187974][ T31] usb 6-1: SerialNumber: syz [ 1035.210999][ T31] usb 6-1: config 0 descriptor?? [ 1035.248767][ T31] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1035.252688][ T31] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1035.281372][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 570 seconds [ 1036.578379][ T31] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1036.584192][ T31] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1036.585994][ T31] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1036.586011][ T31] em28xx 6-1:0.0: No AC97 audio processor [ 1036.662212][ T31] usb 6-1: USB disconnect, device number 58 [ 1036.689720][ T31] em28xx 6-1:0.0: Disconnecting em28xx [ 1037.019284][ T31] em28xx 6-1:0.0: Freeing device [ 1037.567907][ T31] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1037.809206][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 1037.829977][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1037.848490][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1037.848517][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.848534][ T31] usb 6-1: Product: syz [ 1037.848544][ T31] usb 6-1: Manufacturer: syz [ 1037.848554][ T31] usb 6-1: SerialNumber: syz [ 1037.955814][ T31] usb 6-1: config 0 descriptor?? [ 1037.981052][ T31] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1037.981073][ T31] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1039.587387][ T31] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1039.755096][ T31] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1039.755125][ T31] em28xx 6-1:0.0: board has no eeprom [ 1040.509532][ T31] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1040.509559][ T31] em28xx 6-1:0.0: dvb set to bulk mode. [ 1040.522281][ T5951] em28xx 6-1:0.0: Binding DVB extension [ 1040.630471][ T31] usb 6-1: USB disconnect, device number 59 [ 1040.641076][ T31] em28xx 6-1:0.0: Disconnecting em28xx [ 1040.861684][T25930] tipc: Started in network mode [ 1040.861713][T25930] tipc: Node identity 7f000001, cluster identity 4711 [ 1041.020635][T25930] tipc: Enabled bearer , priority 10 [ 1042.067214][ T5951] em28xx 6-1:0.0: Registering input extension [ 1042.086847][ T31] em28xx 6-1:0.0: Closing input extension [ 1042.105142][ T5793] tipc: Node number set to 2130706433 [ 1042.649657][ T31] em28xx 6-1:0.0: Freeing device [ 1043.599099][ T5607] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1043.750332][ T5607] usb 4-1: config 0 has no interfaces? [ 1043.755218][ T5607] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1043.755245][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.755262][ T5607] usb 4-1: Product: syz [ 1043.755274][ T5607] usb 4-1: Manufacturer: syz [ 1043.755286][ T5607] usb 4-1: SerialNumber: syz [ 1043.822419][ T5607] usb 4-1: config 0 descriptor?? [ 1044.026552][T25980] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8283'. [ 1045.763661][ T5607] usb 4-1: USB disconnect, device number 44 [ 1054.498263][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.023657][ T5793] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1056.287874][ T5793] usb 4-1: device descriptor read/64, error -71 [ 1056.555817][ T5793] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1056.658282][T26179] fuse: Bad value for 'fd' [ 1056.888719][T26179] loop8: detected capacity change from 0 to 8 [ 1057.347972][ T5793] usb 4-1: device descriptor read/64, error -71 [ 1057.354420][T26179] Dev loop8: unable to read RDB block 8 [ 1057.354451][T26179] loop8: unable to read partition table [ 1057.354576][T26179] loop8: partition table beyond EOD, truncated [ 1057.354599][T26179] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1057.458233][ T5793] usb usb4-port1: attempt power cycle [ 1058.037857][ T5793] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1058.109766][ T5793] usb 4-1: device descriptor read/8, error -71 [ 1061.730202][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1061.892838][ T31] usb 8-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1061.892864][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1061.895740][ T31] usb 8-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1061.895764][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.895781][ T31] usb 8-1: Product: syz [ 1061.895793][ T31] usb 8-1: Manufacturer: syz [ 1061.895805][ T31] usb 8-1: SerialNumber: syz [ 1062.042099][ T31] usb 8-1: config 0 descriptor?? [ 1062.278681][T26270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.282399][T26270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.931502][ T31] mos7840 8-1:0.0: required endpoints missing [ 1065.155802][ T5793] usb 8-1: USB disconnect, device number 5 [ 1065.805198][T26323] erofs (device loop7): cannot find valid erofs superblock [ 1066.638124][ T31] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1066.657676][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 600 seconds [ 1066.911676][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1066.912563][ T31] usb 4-1: not running at top speed; connect to a high speed hub [ 1066.914334][ T31] usb 4-1: config 5 has an invalid interface number: 124 but max is 0 [ 1066.914355][ T31] usb 4-1: config 5 has no interface number 0 [ 1066.914383][ T31] usb 4-1: config 5 interface 124 has no altsetting 0 [ 1066.959459][ T31] usb 4-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=94.95 [ 1066.959486][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.959502][ T31] usb 4-1: Product: syz [ 1066.959515][ T31] usb 4-1: Manufacturer: syz [ 1066.959528][ T31] usb 4-1: SerialNumber: syz [ 1068.501881][ T31] gspca_main: spca506-2.14.0 probing 0734:043b [ 1069.154894][ T31] usb 4-1: USB disconnect, device number 49 [ 1071.049377][T26371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8441'. [ 1081.427242][T26494] fuse: Unknown parameter 'fd0x0000000000000009' [ 1081.713553][ T5798] IPVS: starting estimator thread 0... [ 1081.717983][ T197] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1081.899368][ T197] usb 6-1: Using ep0 maxpacket: 16 [ 1081.901844][ T197] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1081.901868][ T197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.901884][ T197] usb 6-1: config 0 has no interface number 0 [ 1081.907587][ T197] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1081.907621][ T197] usb 6-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 1081.907638][ T197] usb 6-1: Product: syz [ 1081.907650][ T197] usb 6-1: Manufacturer: syz [ 1081.907663][ T197] usb 6-1: SerialNumber: syz [ 1081.909153][T26506] IPVS: using max 9 ests per chain, 21600 per kthread [ 1082.598745][ T197] usb 6-1: config 0 descriptor?? [ 1082.889118][ T5951] usb 6-1: USB disconnect, device number 60 [ 1084.742585][T21618] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1084.907873][T21618] usb 4-1: Using ep0 maxpacket: 32 [ 1084.909834][T21618] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 1084.912977][T21618] usb 4-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 1084.913003][T21618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.913020][T21618] usb 4-1: Product: syz [ 1084.913032][T21618] usb 4-1: Manufacturer: syz [ 1084.913043][T21618] usb 4-1: SerialNumber: syz [ 1085.020902][T21618] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1085.478025][T26569] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1086.302155][T21618] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1086.678868][T21618] snd-usb-us122l 4-1:1.1: usb_set_interface error [ 1086.679332][T21618] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1086.772261][T21618] usb 4-1: USB disconnect, device number 50 [ 1087.066411][T16243] udevd[16243]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.352835][T26594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.121902][T26649] kvm: pic: level sensitive irq not supported [ 1089.121959][T26649] kvm: pic: level sensitive irq not supported [ 1089.122348][T26649] kvm: pic: single mode not supported [ 1089.122395][T26649] kvm: pic: single mode not supported [ 1089.122660][T26649] kvm: pic: level sensitive irq not supported [ 1089.122696][T26649] kvm: pic: level sensitive irq not supported [ 1089.122778][T26649] kvm: pic: single mode not supported [ 1089.122786][T26649] kvm: pic: level sensitive irq not supported [ 1089.122821][T26649] kvm: pic: single mode not supported [ 1089.122828][T26649] kvm: pic: level sensitive irq not supported [ 1089.128913][T26649] kvm: pic: single mode not supported [ 1089.128924][T26649] kvm: pic: level sensitive irq not supported [ 1089.128961][T26649] kvm: pic: single mode not supported [ 1089.128970][T26649] kvm: pic: level sensitive irq not supported [ 1089.129361][T26649] kvm: pic: non byte read [ 1089.138711][T26649] kvm: pic: non byte write [ 1090.031548][ T5612] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1094.717980][ T5951] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1094.769475][ T197] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1094.877964][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1094.883411][ T5951] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1094.883435][ T5951] usb 4-1: config 0 has no interface number 0 [ 1094.884417][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1094.884437][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1094.884459][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1094.884482][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1094.884501][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1094.884521][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1094.884539][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1094.884559][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 1094.884579][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1094.884601][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1094.918124][ T197] usb 6-1: Using ep0 maxpacket: 8 [ 1094.928626][ T197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1094.928656][ T197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1094.928674][ T197] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1094.928695][ T197] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1094.928717][ T197] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1094.928750][ T197] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1094.928769][ T197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.963489][ T197] usb 6-1: config 0 descriptor?? [ 1094.980629][T26759] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1095.077806][ T5951] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1095.077832][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.077849][ T5951] usb 4-1: Product: syz [ 1095.077862][ T5951] usb 4-1: Manufacturer: syz [ 1095.077874][ T5951] usb 4-1: SerialNumber: syz [ 1095.206615][ T5951] usb 4-1: config 0 descriptor?? [ 1095.207910][T26755] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1095.208098][T26755] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1095.241233][ T5951] usb 4-1: will this work? Response EP is not usually 3 [ 1095.241260][ T5951] usb 4-1: will this work? Image data EP is not usually 2 [ 1095.300974][ T5951] scsi host1: microtekX6 [ 1095.711298][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1095.762364][ T5612] Bluetooth: hci4: Opcode 0x0c03 failed: -32 [ 1095.855586][ T197] usb 6-1: USB disconnect, device number 61 [ 1095.922445][ T5951] usb 4-1: USB disconnect, device number 51 [ 1095.926119][ T1785] usb 4-1: error -19 submitting URB [ 1095.948230][ T72] usb 4-1: error -19 submitting URB [ 1095.998042][ T72] usb 4-1: error -19 submitting URB [ 1096.353089][T26799] netlink: 'syz.3.8618': attribute type 21 has an invalid length. [ 1096.353203][T26799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8618'. [ 1096.353349][T26799] netlink: 'syz.3.8618': attribute type 1 has an invalid length. [ 1097.634218][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 630 seconds [ 1097.653110][T26831] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1097.653134][T26831] CIFS mount error: No usable UNC path provided in device string! [ 1097.653134][T26831] [ 1097.653360][T26831] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1099.329221][ T8573] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 1099.493796][ T8573] usb 6-1: config 142 has an invalid interface number: 149 but max is 0 [ 1099.493822][ T8573] usb 6-1: config 142 has no interface number 0 [ 1099.493852][ T8573] usb 6-1: config 142 interface 149 has no altsetting 0 [ 1099.499630][ T8573] usb 6-1: string descriptor 0 read error: -22 [ 1099.499771][ T8573] usb 6-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice= 5.1f [ 1099.499790][ T8573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.527401][ T8573] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 1099.877938][ T8573] usb 6-1: USB disconnect, device number 62 [ 1102.217915][ T8573] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1102.238026][ T5951] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1102.367854][ T8573] usb 6-1: Using ep0 maxpacket: 16 [ 1102.371312][ T8573] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1102.371329][ T8573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.371338][ T8573] usb 6-1: Product: syz [ 1102.371345][ T8573] usb 6-1: Manufacturer: syz [ 1102.371352][ T8573] usb 6-1: SerialNumber: syz [ 1102.374785][ T8573] usb 6-1: config 0 descriptor?? [ 1102.377164][ T8573] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1102.397858][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1102.400814][ T5951] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1102.400835][ T5951] usb 4-1: config 0 has no interface number 0 [ 1102.400866][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1102.400883][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1102.400903][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1102.400923][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1102.400941][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1102.400960][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1102.400976][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1102.400995][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 1102.401014][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1102.401032][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1102.408018][ T5951] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1102.408044][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.408059][ T5951] usb 4-1: Product: syz [ 1102.408071][ T5951] usb 4-1: Manufacturer: syz [ 1102.408084][ T5951] usb 4-1: SerialNumber: syz [ 1102.595726][ T8573] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 1102.616582][ T5951] usb 4-1: config 0 descriptor?? [ 1102.618418][T26868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1102.618628][T26868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1102.639308][ T5951] usb 4-1: will this work? Response EP is not usually 3 [ 1102.639329][ T5951] usb 4-1: will this work? Image data EP is not usually 2 [ 1102.646664][ T8573] usb 6-1: USB disconnect, device number 63 [ 1102.695094][ T5951] scsi host1: microtekX6 [ 1102.984837][ T5951] usb 4-1: USB disconnect, device number 52 [ 1102.987882][ T72] usb 4-1: error -19 submitting URB [ 1105.767985][ T8573] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1105.961504][ T8573] usb 8-1: config 14 has an invalid interface number: 128 but max is 0 [ 1105.961529][ T8573] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.961545][ T8573] usb 8-1: config 14 has no interface number 0 [ 1105.961587][ T8573] usb 8-1: config 14 interface 128 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1105.961611][ T8573] usb 8-1: config 14 interface 128 has no altsetting 0 [ 1105.973118][ T8573] usb 8-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1105.973145][ T8573] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.973163][ T8573] usb 8-1: Product: syz [ 1105.973175][ T8573] usb 8-1: Manufacturer: syz [ 1105.973186][ T8573] usb 8-1: SerialNumber: syz [ 1106.226960][ T8573] radioshark2 8-1:14.128: Invalid radioSHARK2 device [ 1106.226995][ T8573] radioshark2 8-1:14.128: probe with driver radioshark2 failed with error -22 [ 1106.227312][ T8573] usbhid 8-1:14.128: couldn't find an input interrupt endpoint [ 1106.261420][ T8573] usb 8-1: USB disconnect, device number 6 [ 1107.695254][T26618] Bluetooth: hci2: command 0x0406 tx timeout [ 1108.037997][ T5951] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1108.187938][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1108.191263][ T5951] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1108.191285][ T5951] usb 4-1: config 0 has no interface number 0 [ 1108.191327][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1108.191345][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1108.191367][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1108.191390][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1108.191410][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1108.191430][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1108.191448][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1108.191468][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 1108.191490][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1108.191509][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1108.193881][ T5951] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1108.193905][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.193922][ T5951] usb 4-1: Product: syz [ 1108.193934][ T5951] usb 4-1: Manufacturer: syz [ 1108.193946][ T5951] usb 4-1: SerialNumber: syz [ 1108.383321][ T5951] usb 4-1: config 0 descriptor?? [ 1108.385516][T26988] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1108.385688][T26988] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1108.449003][ T5951] usb 4-1: will this work? Response EP is not usually 3 [ 1108.449025][ T5951] usb 4-1: will this work? Image data EP is not usually 2 [ 1108.493957][ T5951] scsi host1: microtekX6 [ 1108.614751][ T8573] usb 4-1: USB disconnect, device number 53 [ 1108.618716][T10983] usb 4-1: error -19 submitting URB [ 1108.660709][T10983] usb 4-1: error -19 submitting URB [ 1108.697890][T10983] usb 4-1: error -19 submitting URB [ 1114.917364][T27216] netlink: 'syz.3.8813': attribute type 2 has an invalid length. [ 1115.533585][T27226] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8816'. [ 1115.843671][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.360211][T27344] netlink: 'syz.3.8866': attribute type 5 has an invalid length. [ 1118.807822][ T5951] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1118.967851][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 1118.970017][ T5951] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 1118.970041][ T5951] usb 4-1: config 0 has no interface number 0 [ 1118.970081][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1118.970099][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1118.970120][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1118.970142][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1118.970162][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1118.970181][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1118.970198][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1118.970218][ T5951] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 1118.970239][ T5951] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1118.970258][ T5951] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1118.973668][ T5951] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1118.973693][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.973710][ T5951] usb 4-1: Product: syz [ 1118.973723][ T5951] usb 4-1: Manufacturer: syz [ 1118.973734][ T5951] usb 4-1: SerialNumber: syz [ 1119.155144][ T5951] usb 4-1: config 0 descriptor?? [ 1119.157176][T27356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1119.157397][T27356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1119.185092][ T5951] usb 4-1: will this work? Response EP is not usually 3 [ 1119.185115][ T5951] usb 4-1: will this work? Image data EP is not usually 2 [ 1119.208141][ T5951] scsi host1: microtekX6 [ 1119.380310][ T5951] usb 4-1: USB disconnect, device number 54 [ 1119.399986][ T72] usb 4-1: error -19 submitting URB [ 1119.437912][ T72] usb 4-1: error -19 submitting URB [ 1119.642672][T27395] netlink: 'syz.7.8888': attribute type 7 has an invalid length. [ 1119.642693][T27395] netlink: 'syz.7.8888': attribute type 8 has an invalid length. [ 1120.035451][T27405] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1120.035467][T27405] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1123.510507][T27496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8935'. [ 1123.511353][T27496] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1131.288275][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 660 seconds [ 1132.327848][ T5951] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1132.460439][ T5951] usb 8-1: device descriptor read/64, error -71 [ 1132.717928][ T5951] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1132.783705][T27594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8981'. [ 1132.857852][ T5951] usb 8-1: device descriptor read/64, error -71 [ 1132.968200][ T5951] usb usb8-port1: attempt power cycle [ 1133.307810][ T5951] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1133.328939][ T5951] usb 8-1: device descriptor read/8, error -71 [ 1133.578568][ T5951] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1133.581762][T27636] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1133.607748][ T5951] usb 8-1: device descriptor read/8, error -71 [ 1133.718300][ T5951] usb usb8-port1: unable to enumerate USB device [ 1134.107583][T27666] netlink: 'syz.3.9015': attribute type 15 has an invalid length. [ 1135.323226][T27726] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9044'. [ 1135.323319][T27726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1135.323331][T27726] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.323400][T27726] IPv6: NLM_F_CREATE should be set when creating new route [ 1135.978363][T27748] netlink: 80 bytes leftover after parsing attributes in process `syz.7.9050'. [ 1136.479844][ T5612] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1136.639599][T27787] bond0: entered promiscuous mode [ 1136.639640][T27787] bond_slave_0: entered promiscuous mode [ 1136.639867][T27787] bond_slave_1: entered promiscuous mode [ 1136.640119][T27787] bond0: entered allmulticast mode [ 1136.640137][T27787] bond_slave_0: entered allmulticast mode [ 1136.640157][T27787] bond_slave_1: entered allmulticast mode [ 1137.315699][T27819] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9086'. [ 1137.932694][T27850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1140.146418][T27884] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1140.837828][T21618] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1140.990077][T21618] usb 8-1: Using ep0 maxpacket: 8 [ 1140.994987][T21618] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1140.995010][T21618] usb 8-1: config 179 has no interface number 0 [ 1140.995052][T21618] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1140.995074][T21618] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1140.995098][T21618] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1140.995120][T21618] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1140.995142][T21618] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1140.995176][T21618] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1140.995197][T21618] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.026286][T27892] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1141.272940][ T5612] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 1141.373670][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1141.373729][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1141.422673][T21618] usb 8-1: USB disconnect, device number 11 [ 1141.460350][ T8573] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1141.528806][ T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1141.607822][ T8573] usb 4-1: Using ep0 maxpacket: 16 [ 1141.610360][ T8573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.610388][ T8573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.610422][ T8573] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1141.610443][ T8573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.616651][ T8573] usb 4-1: config 0 descriptor?? [ 1141.678355][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1141.684745][ T9] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1141.684767][ T9] usb 6-1: config 0 has no interface number 0 [ 1141.684806][ T9] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1141.684825][ T9] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1141.684847][ T9] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1141.684870][ T9] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1141.684889][ T9] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1141.684922][ T9] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1141.684947][ T9] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1141.684967][ T9] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1141.684985][ T9] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1141.706743][ T9] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1141.706770][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.706787][ T9] usb 6-1: Product: syz [ 1141.706800][ T9] usb 6-1: Manufacturer: syz [ 1141.706813][ T9] usb 6-1: SerialNumber: syz [ 1141.858739][ T9] usb 6-1: config 0 descriptor?? [ 1141.860262][T27912] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1141.882976][ T9] usb 6-1: can only deal with bulk endpoints; endpoint 1 is not bulk. [ 1141.883363][ T9] usb 6-1: couldn't find an output bulk endpoint. Bailing out. [ 1142.110670][ T5740] usb 6-1: USB disconnect, device number 64 [ 1142.179069][ T8573] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1143.460172][ T8573] usb 4-1: USB disconnect, device number 55 [ 1144.212301][T27977] sg_write: data in/out 286804/136 bytes for SCSI command 0x0-- guessing data in; [ 1144.212301][T27977] program syz.5.9160 not setting count and/or reply_len properly [ 1144.687983][ T5740] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1144.949766][ T5740] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1145.279978][T26618] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1145.326380][ T5740] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.326589][ T5740] usb 8-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1145.326660][ T5740] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1145.404898][T26618] Bluetooth: hci2: Injecting HCI hardware error event [ 1145.428149][T26618] Bluetooth: hci2: hardware error 0x00 [ 1145.596704][T28010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9172'. [ 1145.945799][ T5740] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1145.945817][ T5740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.945826][ T5740] usb 8-1: Product: syz [ 1145.945833][ T5740] usb 8-1: Manufacturer: syz [ 1145.945840][ T5740] usb 8-1: SerialNumber: syz [ 1146.218637][ T5740] cdc_ether 8-1:1.0: skipping garbage [ 1146.218662][ T5740] cdc_ether 8-1:1.0: missing cdc header ether descriptor [ 1146.320688][ T5740] usb 8-1: USB disconnect, device number 12 [ 1147.111457][T28057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9197'. [ 1147.115701][T28056] sg_write: data in/out 307589/136 bytes for SCSI command 0x0-- guessing data in; [ 1147.115701][T28056] program syz.7.9196 not setting count and/or reply_len properly [ 1148.318029][T26618] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1149.357904][T26618] Bluetooth: hci4: command 0xfc11 tx timeout [ 1149.413519][ T5612] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 1151.397900][ T5607] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 1151.558498][ T5607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1151.558528][ T5607] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.561265][ T5607] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1151.561281][ T5607] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1151.561291][ T5607] usb 6-1: Manufacturer: syz [ 1151.567071][ T5607] usb 6-1: config 0 descriptor?? [ 1152.215157][ T5607] hid_parser_main: 46 callbacks suppressed [ 1152.215180][ T5607] cougar 0003:060B:700A.0027: unknown main item tag 0x0 [ 1152.215305][ T5607] cougar 0003:060B:700A.0027: unknown main item tag 0x0 [ 1152.215430][ T5607] cougar 0003:060B:700A.0027: unknown main item tag 0x0 [ 1152.215559][ T5607] cougar 0003:060B:700A.0027: unknown main item tag 0x0 [ 1152.215593][ T5607] cougar 0003:060B:700A.0027: unknown main item tag 0x0 [ 1152.294035][T28238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9276'. [ 1152.801175][ T5607] cougar 0003:060B:700A.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1152.882203][ T5607] usb 6-1: USB disconnect, device number 65 [ 1153.277066][T28247] fido_id[28247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1154.077511][T28282] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9296'. [ 1154.265368][T28279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9293'. [ 1156.757857][T21618] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1156.918595][T21618] usb 6-1: Using ep0 maxpacket: 32 [ 1156.921274][T21618] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1156.921309][T21618] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.939773][T21618] usb 6-1: config 0 descriptor?? [ 1156.956675][T21618] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1157.592503][T21618] usb 6-1: USB disconnect, device number 66 [ 1158.664337][T28454] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9375'. [ 1160.258507][ T37] audit: type=1326 audit(1782783212.108:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.260115][ T37] audit: type=1326 audit(1782783212.108:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.266887][ T37] audit: type=1326 audit(1782783212.108:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.266942][ T37] audit: type=1326 audit(1782783212.108:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.266993][ T37] audit: type=1326 audit(1782783212.108:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.267031][ T37] audit: type=1326 audit(1782783212.108:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.267069][ T37] audit: type=1326 audit(1782783212.108:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.267104][ T37] audit: type=1326 audit(1782783212.108:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.267141][ T37] audit: type=1326 audit(1782783212.108:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.267176][ T37] audit: type=1326 audit(1782783212.108:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28488 comm="syz.7.9391" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c3d1ce59 code=0x7ffc0000 [ 1160.488371][T28486] vivid-000: kernel_thread() failed [ 1161.962565][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 690 seconds [ 1162.957992][ T5740] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1162.978241][T28564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9424'. [ 1163.107812][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 1163.110462][ T5740] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1163.110485][ T5740] usb 6-1: config 0 has no interface number 0 [ 1163.110525][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1163.110543][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1163.110565][ T5740] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1163.110586][ T5740] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1163.110606][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1163.110624][ T5740] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1163.110641][ T5740] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1163.110659][ T5740] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29304, setting to 1024 [ 1163.110687][ T5740] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1163.110706][ T5740] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.248488][ T5740] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1163.248516][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.248533][ T5740] usb 6-1: Product: syz [ 1163.248546][ T5740] usb 6-1: Manufacturer: syz [ 1163.248558][ T5740] usb 6-1: SerialNumber: syz [ 1163.254455][ T5740] usb 6-1: config 0 descriptor?? [ 1163.255554][T28557] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1163.255725][T28557] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1163.325908][ T5740] usb 6-1: will this work? Response EP is not usually 3 [ 1163.326734][ T5740] usb 6-1: will this work? Image data EP is not usually 2 [ 1163.344959][ T5740] scsi host1: microtekX6 [ 1163.473122][ T5740] usb 6-1: USB disconnect, device number 67 [ 1163.508173][ T72] usb 6-1: error -19 submitting URB [ 1163.548344][ T72] usb 6-1: error -19 submitting URB [ 1165.794831][T28668] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9471'. [ 1168.608024][T28756] netlink: 104 bytes leftover after parsing attributes in process `syz.7.9511'. [ 1168.608046][T28756] netlink: 'syz.7.9511': attribute type 2 has an invalid length. [ 1168.608057][T28756] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9511'. [ 1168.648212][ T5740] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1168.746564][T28764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9514'. [ 1168.802742][ T5740] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1168.805399][ T5740] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1168.805425][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.805441][ T5740] usb 6-1: Product: syz [ 1168.805453][ T5740] usb 6-1: Manufacturer: syz [ 1168.805465][ T5740] usb 6-1: SerialNumber: syz [ 1168.816073][ T5740] usb 6-1: config 0 descriptor?? [ 1169.079777][ T5607] usb 6-1: USB disconnect, device number 68 [ 1170.212910][T28798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9529'. [ 1171.200058][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9535'. [ 1173.800594][T28852] netlink: 'syz.7.9555': attribute type 1 has an invalid length. [ 1174.067380][T28852] bond1: entered promiscuous mode [ 1174.067553][T28852] bond1: entered allmulticast mode [ 1174.071759][T28852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1175.752778][T28945] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 1175.752797][T28945] binder: 28944:28945 ioctl 4018620d 2000000000c0 returned -1 [ 1175.876101][T28950] netlink: 'syz.5.9598': attribute type 1 has an invalid length. [ 1175.876128][T28950] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9598'. [ 1177.280427][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.239512][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 1178.239528][ T37] audit: type=1326 audit(1782783230.088:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.243033][ T37] audit: type=1326 audit(1782783230.088:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.306537][ T37] audit: type=1326 audit(1782783230.148:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.307884][ T37] audit: type=1326 audit(1782783230.148:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.307930][ T37] audit: type=1326 audit(1782783230.148:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.307971][ T37] audit: type=1326 audit(1782783230.148:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.308006][ T37] audit: type=1326 audit(1782783230.148:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.308040][ T37] audit: type=1326 audit(1782783230.148:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.308297][ T37] audit: type=1326 audit(1782783230.148:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1178.315053][ T37] audit: type=1326 audit(1782783230.158:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29051 comm="syz.5.9646" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efecad2ce59 code=0x7ffc0000 [ 1179.073216][T29063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9649'. [ 1180.407113][ T5607] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1180.560026][ T5607] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 1180.560052][ T5607] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 1180.564831][ T5607] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1180.564857][ T5607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.564875][ T5607] usb 6-1: Product: syz [ 1180.564887][ T5607] usb 6-1: Manufacturer: syz [ 1180.564900][ T5607] usb 6-1: SerialNumber: syz [ 1180.607997][ T5607] usb 6-1: config 0 descriptor?? [ 1180.838739][ T5607] mos7840 6-1:0.0: required endpoints missing [ 1181.045865][ T5607] usb 6-1: USB disconnect, device number 69 [ 1182.857927][ T5607] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1183.038367][ T5607] usb 8-1: Using ep0 maxpacket: 32 [ 1183.040356][ T5607] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1183.042697][ T5607] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1183.042722][ T5607] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1183.042759][ T5607] usb 8-1: Product: syz [ 1183.042771][ T5607] usb 8-1: Manufacturer: syz [ 1183.042782][ T5607] usb 8-1: SerialNumber: syz [ 1183.054182][ T5607] usb 8-1: config 0 descriptor?? [ 1183.058776][T29202] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1183.139201][ T9] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1183.296939][T29233] block nbd0: not configured, cannot reconfigure [ 1183.353168][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1183.356293][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1183.356323][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1183.356355][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1183.356375][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.370995][ T9] usb 6-1: config 0 descriptor?? [ 1183.402616][ T9] hub 6-1:0.0: USB hub found [ 1183.594046][ T9] hub 6-1:0.0: 3 ports detected [ 1183.798833][ T9] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1183.798858][ T9] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1183.855601][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1183.855714][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1183.899030][ T9] usb 6-1: USB disconnect, device number 70 [ 1184.408030][ T5740] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1184.559140][ T5740] usb 4-1: Using ep0 maxpacket: 32 [ 1184.564389][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.564418][ T5740] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1184.564451][ T5740] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1184.564471][ T5740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.592057][ T5740] usb 4-1: config 0 descriptor?? [ 1184.642678][ T5740] hub 4-1:0.0: USB hub found [ 1184.818657][ T5740] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 1185.239747][ T5740] hid-generic 0003:046D:C31C.0028: collection stack underflow [ 1185.239779][ T5740] hid-generic 0003:046D:C31C.0028: item 0 0 0 12 parsing failed [ 1185.242350][ T5740] hid-generic 0003:046D:C31C.0028: probe with driver hid-generic failed with error -22 [ 1185.665987][ T5740] usb 4-1: USB disconnect, device number 56 [ 1185.741726][ T5740] usb 8-1: USB disconnect, device number 13 [ 1185.952646][T29317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9763'. [ 1190.505877][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1190.540265][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1190.575059][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1190.606988][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1190.628255][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1191.102976][ T55] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.588456][T29495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9846'. [ 1192.054974][T26369] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 720 seconds [ 1192.879033][T26618] Bluetooth: hci2: command tx timeout [ 1192.898771][ T55] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.422695][ T55] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.216722][ T55] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.962834][T26618] Bluetooth: hci2: command tx timeout [ 1195.260378][ T5951] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1195.420600][ T5951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1195.424891][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.424913][ T5951] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1195.424962][ T5951] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1195.424997][ T5951] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1195.425033][ T5951] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1195.425056][ T5951] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1195.430588][ T5951] usb 4-1: string descriptor 0 read error: -22 [ 1195.430718][ T5951] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1195.430739][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.964880][ T5951] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1195.964908][ T5951] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1195.964924][ T5951] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1196.570914][T29458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.571208][T29458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.571529][T29458] bridge_slave_0: entered allmulticast mode [ 1196.577295][T29458] bridge_slave_0: entered promiscuous mode [ 1196.737913][ T5951] usb 4-1: USB disconnect, device number 57 [ 1196.806582][T29458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.806703][T29458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.806957][T29458] bridge_slave_1: entered allmulticast mode [ 1196.870299][T29458] bridge_slave_1: entered promiscuous mode [ 1197.048003][T26618] Bluetooth: hci2: command tx timeout [ 1197.288551][T29458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.301865][T29458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.578631][ T55] bridge_slave_1: left allmulticast mode [ 1197.578666][ T55] bridge_slave_1: left promiscuous mode [ 1197.578924][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.742484][ T55] bridge_slave_0: left allmulticast mode [ 1197.742518][ T55] bridge_slave_0: left promiscuous mode [ 1197.742758][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.645659][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9959'. [ 1199.120021][T26618] Bluetooth: hci2: command tx timeout [ 1200.306612][T29781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9972'. [ 1200.598151][T21618] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1200.748719][T21618] usb 6-1: too many configurations: 255, using maximum allowed: 8 [ 1200.750243][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.750264][T21618] usb 6-1: config 0 has no interfaces? [ 1200.752229][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.752250][T21618] usb 6-1: config 0 has no interfaces? [ 1200.753624][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.753644][T21618] usb 6-1: config 0 has no interfaces? [ 1200.754837][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.754856][T21618] usb 6-1: config 0 has no interfaces? [ 1200.756657][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.756677][T21618] usb 6-1: config 0 has no interfaces? [ 1200.879886][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.879910][T21618] usb 6-1: config 0 has no interfaces? [ 1200.881608][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.881628][T21618] usb 6-1: config 0 has no interfaces? [ 1200.884008][T21618] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.884027][T21618] usb 6-1: config 0 has no interfaces? [ 1200.941690][T21618] usb 6-1: New USB device found, idVendor=046d, idProduct=a9db, bcdDevice=59.aa [ 1200.941718][T21618] usb 6-1: New USB device strings: Mfr=40, Product=154, SerialNumber=107 [ 1200.941740][T21618] usb 6-1: Product: syz [ 1200.941752][T21618] usb 6-1: Manufacturer: syz [ 1200.941765][T21618] usb 6-1: SerialNumber: syz [ 1201.007916][T21618] usb 6-1: config 0 descriptor?? [ 1201.241892][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1201.245378][ T5793] usb 6-1: USB disconnect, device number 71 [ 1201.277164][ T55] bond_slave_0: left promiscuous mode [ 1201.277477][ T55] bond_slave_0: left allmulticast mode [ 1201.319146][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.359915][ T55] bond_slave_1: left promiscuous mode [ 1201.360119][ T55] bond_slave_1: left allmulticast mode [ 1201.365345][ T55] bond0 (unregistering): Released all slaves [ 1201.459071][ T55] bond1 (unregistering): Released all slaves [ 1201.525267][T29458] team0: Port device team_slave_0 added [ 1201.801844][T29458] team0: Port device team_slave_1 added [ 1201.801964][ T55] tipc: Disabling bearer [ 1201.852931][ T55] tipc: Left network mode [ 1202.141431][T29458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.141448][T29458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.141468][T29458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.227380][T29458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.227396][T29458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.227429][T29458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.419603][T29458] hsr_slave_0: entered promiscuous mode [ 1202.420954][T29458] hsr_slave_1: entered promiscuous mode [ 1202.421873][T29458] debugfs: 'hsr0' already exists in 'hsr' [ 1202.421896][T29458] Cannot create hsr debugfs directory [ 1204.097027][ T5262] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1204.517896][ T8573] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1204.675465][ T8573] usb 6-1: Using ep0 maxpacket: 8 [ 1204.684826][ T8573] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1204.687505][ T8573] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1204.687529][ T8573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.687546][ T8573] usb 6-1: Product: syz [ 1204.687558][ T8573] usb 6-1: Manufacturer: syz [ 1204.687570][ T8573] usb 6-1: SerialNumber: syz [ 1204.762752][ T8573] usb 6-1: config 0 descriptor?? [ 1204.791772][ T8573] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1205.607099][ T8573] gspca_zc3xx: reg_w_i err -71 [ 1206.141044][T29967] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10051'. [ 1206.187912][ T8573] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1206.188004][ T8573] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1206.217904][ T8573] usb 6-1: USB disconnect, device number 72 [ 1206.646643][ T5262] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1207.038945][ T55] hsr_slave_0: left promiscuous mode [ 1207.086295][ T55] hsr_slave_1: left promiscuous mode [ 1207.087351][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.087376][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.163417][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.163444][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.333081][ T55] veth1_macvtap: left promiscuous mode [ 1207.333180][ T55] veth0_macvtap: left promiscuous mode [ 1207.333475][ T55] veth1_vlan: left promiscuous mode [ 1207.333674][ T55] veth0_vlan: left promiscuous mode [ 1207.351939][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10069'. [ 1208.228476][T30051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10085'. [ 1209.927913][ T9] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1210.020402][ T55] team0 (unregistering): Port device team_slave_1 removed [ 1210.077827][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1210.084491][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1210.084520][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1210.099619][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1210.099646][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.099664][ T9] usb 6-1: Product: syz [ 1210.099677][ T9] usb 6-1: Manufacturer: syz [ 1210.099690][ T9] usb 6-1: SerialNumber: syz [ 1210.159544][ T9] usb 6-1: config 0 descriptor?? [ 1210.176559][ T9] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1210.176589][ T9] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1210.201605][ T55] team0 (unregistering): Port device team_slave_0 removed [ 1210.787672][ T9] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1210.791159][ T5262] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1210.797266][ T9] em28xx 6-1:0.0: Config register raw data: 0x41 [ 1212.491957][T30201] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1212.746856][ T5951] usb 6-1: USB disconnect, device number 73 [ 1212.749944][ T5951] em28xx 6-1:0.0: Disconnecting em28xx [ 1212.857075][ T5951] em28xx 6-1:0.0: Freeing device [ 1213.096548][T30211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10158'. [ 1213.154640][T30218] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1215.533054][ T55] IPVS: stop unused estimator thread 0... [ 1215.917968][T30308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10190'. [ 1219.112007][T29458] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1219.303241][T29458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1219.304635][T29458] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1219.564307][T29458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1219.572033][T29458] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1219.846051][T29458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1219.850812][T29458] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1219.875826][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10242'. [ 1219.965722][T29458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1220.706624][T29458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.781549][T29458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1220.866105][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1220.866228][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.160044][T23883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.160175][T23883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.100423][ T4967] udevd[4967]: worker [10900] /devices/virtual/block/nbd4 timeout; kill it [ 1222.100531][ T4967] udevd[4967]: seq 16329 '/devices/virtual/block/nbd4' killed [ 1222.160809][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 750 seconds [ 1223.351849][T29458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1223.858920][ T5951] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1224.051749][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 1224.058729][ T5951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1224.061985][ T5951] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1224.062010][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1224.062028][ T5951] usb 6-1: Product: syz [ 1224.062040][ T5951] usb 6-1: Manufacturer: syz [ 1224.062052][ T5951] usb 6-1: SerialNumber: syz [ 1224.084580][ T5951] usb 6-1: config 0 descriptor?? [ 1224.091467][T30575] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1224.469932][T29458] veth0_vlan: entered promiscuous mode [ 1224.507427][ T5951] usb 6-1: USB disconnect, device number 74 [ 1224.613322][T29458] veth1_vlan: entered promiscuous mode [ 1224.765375][T29458] veth0_macvtap: entered promiscuous mode [ 1224.786431][T29458] veth1_macvtap: entered promiscuous mode [ 1224.967516][T29458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.091919][T29458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.154130][ T1850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.217615][ T67] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.236174][ T67] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.259282][ T67] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.933612][ T1850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.933633][ T1850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.190454][T18609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1227.190473][T18609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1227.877850][ T5951] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1228.030895][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 1228.033189][ T5951] usb 4-1: config 0 interface 0 altsetting 97 endpoint 0x81 has an invalid bInterval 41, changing to 9 [ 1228.033229][ T5951] usb 4-1: config 0 interface 0 altsetting 97 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 1228.033251][ T5951] usb 4-1: config 0 interface 0 altsetting 97 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.033274][ T5951] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1228.033302][ T5951] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 1228.033322][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.094578][ T5951] usb 4-1: config 0 descriptor?? [ 1228.100036][T30683] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1228.615722][ T5951] uclogic 0003:28BD:0055.0029: interface is invalid, ignoring [ 1228.799554][ T8573] usb 4-1: USB disconnect, device number 58 [ 1231.057905][ T8573] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1231.187902][ T8573] usb 8-1: device descriptor read/64, error -71 [ 1231.246478][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10404'. [ 1231.246519][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10404'. [ 1231.428302][ T8573] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1231.563910][ T8573] usb 8-1: device descriptor read/64, error -71 [ 1231.574761][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1231.574777][ T37] audit: type=1804 audit(1782783283.398:636): pid=30832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.10410" name="/newroot/1271/file0" dev="tmpfs" ino=6536 res=1 errno=0 [ 1231.668520][ T8573] usb usb8-port1: attempt power cycle [ 1232.058357][ T8573] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1232.083416][ T8573] usb 8-1: device descriptor read/8, error -71 [ 1232.318149][ T8573] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1232.345073][ T8573] usb 8-1: device descriptor read/8, error -71 [ 1232.448236][ T8573] usb usb8-port1: unable to enumerate USB device [ 1233.812495][T30920] block nbd0: not configured, cannot reconfigure [ 1234.309269][T30915] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1234.309299][T30915] overlayfs: failed to set xattr on upper [ 1234.309307][T30915] overlayfs: ...falling back to redirect_dir=nofollow. [ 1234.309315][T30915] overlayfs: ...falling back to index=off. [ 1234.309322][T30915] overlayfs: ...falling back to uuid=null. [ 1236.067884][T21618] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1236.221067][T21618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1236.221118][T21618] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1236.221139][T21618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.265191][T21618] usb 4-1: config 0 descriptor?? [ 1236.274215][T30994] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1236.730308][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730344][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730369][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730394][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730417][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730441][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730464][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730487][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730510][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.730534][T21618] zeroplus 0003:0C12:0030.002A: unknown main item tag 0x0 [ 1236.831692][T21618] zeroplus 0003:0C12:0030.002A: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 1236.831722][T21618] zeroplus 0003:0C12:0030.002A: no inputs found [ 1236.907027][ T8573] usb 4-1: USB disconnect, device number 59 [ 1236.995986][T31033] fido_id[31033]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1238.044435][T21618] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1238.730415][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.108318][T31110] mmap: syz.7.10537 (31110): VmData 37392384 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 1239.227395][T31116] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10540'. [ 1240.520905][T31157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10558'. [ 1240.520928][T31157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10558'. [ 1240.527882][ T197] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1240.658147][ T197] usb 6-1: device descriptor read/64, error -71 [ 1240.909234][ T197] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1241.295699][ T197] usb 6-1: device descriptor read/64, error -71 [ 1241.398167][ T197] usb usb6-port1: attempt power cycle [ 1241.738167][ T197] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1241.761796][ T197] usb 6-1: device descriptor read/8, error -71 [ 1241.998008][ T197] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1242.020882][ T197] usb 6-1: device descriptor read/8, error -71 [ 1242.128395][ T197] usb usb6-port1: unable to enumerate USB device [ 1242.768603][ T197] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1242.947941][ T197] usb 8-1: Using ep0 maxpacket: 32 [ 1242.950158][ T197] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1242.950181][ T197] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.950197][ T197] usb 8-1: config 0 has no interface number 0 [ 1242.950235][ T197] usb 8-1: config 0 interface 146 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.952755][ T197] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1242.952781][ T197] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.952799][ T197] usb 8-1: Product: syz [ 1242.952812][ T197] usb 8-1: Manufacturer: syz [ 1242.952825][ T197] usb 8-1: SerialNumber: syz [ 1243.058892][ T197] usb 8-1: config 0 descriptor?? [ 1243.067522][ T197] usb 8-1: expecting 3 got 0 endpoints! Bailing out. [ 1243.267244][ T197] usb 8-1: USB disconnect, device number 18 [ 1249.050532][T31363] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1249.052958][T31363] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1249.053081][T31363] kvm: requested 15085 ns i8254 timer period limited to 200000 ns [ 1249.075451][T31363] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1249.078034][T31363] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 1249.078369][T31363] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 1249.078799][T31363] kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 1249.078943][T31363] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 1249.079180][T31363] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 1249.079321][T31363] kvm: requested 77104 ns i8254 timer period limited to 200000 ns [ 1249.472413][T31376] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10657'. [ 1250.637931][ T31] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1250.938427][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 1251.649335][T31406] netlink: 'syz.7.10671': attribute type 2 has an invalid length. [ 1251.737904][T31406] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10671'. [ 1251.787824][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1251.790223][ T31] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1251.790256][ T31] usb 8-1: can't read configurations, error -71 [ 1253.202950][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 780 seconds [ 1255.780164][T31457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10690'. [ 1256.097866][ T5793] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1256.250822][ T5793] usb 8-1: Using ep0 maxpacket: 16 [ 1256.253943][ T5793] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.253965][ T5793] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1256.288328][ T5793] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1256.288537][ T5793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.288549][ T5793] usb 8-1: Product: syz [ 1256.288557][ T5793] usb 8-1: Manufacturer: syz [ 1256.288564][ T5793] usb 8-1: SerialNumber: syz [ 1256.353780][ T5793] usb 8-1: 0:2 : does not exist [ 1256.550630][ T5793] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1256.696458][ T5793] usb 8-1: USB disconnect, device number 21 [ 1256.805597][T16243] udevd[16243]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1257.375475][T31500] ALSA: mixer_oss: invalid OSS volume 'tKfE*ņ{N)~G{OC' [ 1257.375498][T31500] ALSA: mixer_oss: invalid OSS volume '0ap%bB-=UGo' [ 1257.375511][T31500] ALSA: mixer_oss: invalid OSS volume 'rf ! 4濟遷?‘߮0؃' [ 1257.375531][T31500] ALSA: mixer_oss: invalid OSS volume '9\+T;nSEP],(#OA2"' [ 1257.375546][T31500] ALSA: mixer_oss: invalid OSS volume 'VqZ'`){7 ' [ 1257.375579][T31500] ALSA: mixer_oss: invalid OSS volume '2jޖGN'qgH' [ 1257.375596][T31500] ALSA: mixer_oss: invalid OSS volume 'eM!hךy,@d9:~vB(' [ 1257.375617][T31500] ALSA: mixer_oss: invalid OSS volume '#AO/ aEv2h' [ 1257.375633][T31500] ALSA: mixer_oss: invalid OSS volume '3g67W2gEqIWC' [ 1257.375659][T31500] ALSA: mixer_oss: invalid OSS volume 'STTl7_ᑲH_{' [ 1257.375683][T31500] ALSA: mixer_oss: invalid OSS volume '^*"6lciLnjU"w4:L|' [ 1257.378196][T31500] ALSA: mixer_oss: invalid OSS volume '2gre_SKT' [ 1257.378217][T31500] ALSA: mixer_oss: invalid OSS volume 'c+г|<ѯjaʏ' [ 1257.378249][T31500] ALSA: mixer_oss: invalid OSS volume '!lN?1r*Nۗw䑚3' [ 1257.378261][T31500] ALSA: mixer_oss: invalid OSS volume '^:pxQ' [ 1257.378278][T31500] ALSA: mixer_oss: invalid OSS volume 'ꣃ߷R*AJʍ&jS' [ 1257.378291][T31500] ALSA: mixer_oss: invalid OSS volume 'x' [ 1257.378303][T31500] ALSA: mixer_oss: invalid OSS volume 'E츫/_˂cˆYV>KHaL%' [ 1257.378314][T31500] ALSA: mixer_oss: invalid OSS volume '' [ 1257.378326][T31500] ALSA: mixer_oss: invalid OSS volume '^͹~ڥEN~:D(' [ 1257.378368][T31500] ALSA: mixer_oss: invalid OSS volume '_1n`qvtZRxRu' [ 1257.378380][T31500] ALSA: mixer_oss: invalid OSS volume '〙hvw7R'֛c' [ 1257.378401][T31500] ALSA: mixer_oss: invalid OSS volume ';rArcdxV8ӊ' [ 1257.378415][T31500] ALSA: mixer_oss: invalid OSS volume 'Q-c֨:ᣕ~1"m' [ 1257.378427][T31500] ALSA: mixer_oss: invalid OSS volume ' x.V:' [ 1257.378439][T31500] ALSA: mixer_oss: invalid OSS volume 'ؘ.ܣ(Ltt=΃{o,4:' [ 1257.378454][T31500] ALSA: mixer_oss: invalid OSS volume ' }Z1m' [ 1257.378501][T31500] ALSA: mixer_oss: invalid OSS volume 'z8gqleѫw?1P' [ 1257.378513][T31500] ALSA: mixer_oss: invalid OSS volume ''`gYXu|o?7yWCG' [ 1257.378523][T31500] ALSA: mixer_oss: invalid OSS volume 'tåJ?k'j2' [ 1257.378552][T31500] ALSA: mixer_oss: invalid OSS volume '4]Ǩ:i5ţ' [ 1257.378571][T31500] ALSA: mixer_oss: invalid OSS volume 'd7cHQW,oJ!%%s' [ 1257.378587][T31500] ALSA: mixer_oss: invalid OSS volume 'i뢎THz)jo:dBw' [ 1257.378604][T31500] ALSA: mixer_oss: invalid OSS volume 'pЈ,@ή^wRudOߕ~'' [ 1257.378617][T31500] ALSA: mixer_oss: invalid OSS volume 'Á*5/L' [ 1257.378624][T31500] ALSA: mixer_oss: invalid OSS volume 'yŦD6n' [ 1257.378637][T31500] ALSA: mixer_oss: invalid OSS volume '1%[o' [ 1257.378662][T31500] ALSA: mixer_oss: invalid OSS volume 'CYy~4ufbdfN&9' [ 1257.378683][T31500] ALSA: mixer_oss: invalid OSS volume 'PP׈J͹MuqI\`-s' [ 1257.378698][T31500] ALSA: mixer_oss: invalid OSS volume 'iT>\^n96Gl^4$cMNX' [ 1257.385590][T31489] create_pit_timer: 9 callbacks suppressed [ 1257.385606][T31489] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 1257.385753][T31489] kvm: requested 102247 ns i8254 timer period limited to 200000 ns [ 1257.387427][T31489] kvm: requested 159238 ns i8254 timer period limited to 200000 ns [ 1259.465719][T31573] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10739'. [ 1260.604377][T31587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10744'. [ 1262.740664][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10759'. [ 1263.700982][T31640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10766'. [ 1266.133200][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10781'. [ 1266.382626][T31696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10786'. [ 1267.367996][T21618] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1267.647845][T21618] usb 6-1: Using ep0 maxpacket: 32 [ 1268.230811][T21618] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1268.230864][T21618] usb 6-1: no configurations [ 1268.230870][T21618] usb 6-1: can't read configurations, error -22 [ 1268.317227][T31714] syz.5.10795 (31714) used greatest stack depth: 16352 bytes left [ 1268.438696][T31739] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10807'. [ 1272.507494][T31841] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10853'. [ 1278.714223][T31956] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1279.587343][T31970] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 1279.587483][T31970] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 1279.587561][T31970] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1281.237894][ T197] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1281.238168][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1281.389359][ T197] usb 6-1: device descriptor read/64, error -32 [ 1282.440519][ T197] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1282.591085][ T197] usb 6-1: config 0 has no interfaces? [ 1282.593822][ T197] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1282.593848][ T197] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.593867][ T197] usb 6-1: Product: syz [ 1282.593880][ T197] usb 6-1: Manufacturer: syz [ 1282.593894][ T197] usb 6-1: SerialNumber: syz [ 1282.720623][ T197] usb 6-1: config 0 descriptor?? [ 1282.926993][T31979] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10907'. [ 1283.362732][T32019] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10924'. [ 1283.830782][T10983] block nbd4: Possible stuck request ffff888026f47000: control (read@0,1024B). Runtime 810 seconds [ 1284.944878][T32029] ================================================================== [ 1284.944894][T32029] BUG: KASAN: slab-use-afte[ 1284.944894][T32029] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x350 [ 1284.945059][T32029] Read of size 8 at addr ffff88802bf74018 by task syz.3.10927/32029 [ 1284.945091][T32029] [ 1284.945106][T32029] CPU: 1 UID: 0 PID: 32029 Comm: syz.3.10927 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1284.945132][T32029] Tainted: [L]=SOFTLOCKUP [ 1284.945139][T32029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1284.945152][T32029] Call Trace: [ 1284.945160][T32029] [ 1284.945168][T32029] dump_stack_lvl+0xe8/0x150 [ 1284.945194][T32029] print_address_description+0x55/0x1e0 [ 1284.945230][T32029] ? dvb_device_open+0xc4/0x350 [ 1284.945255][T32029] print_report+0x58/0x70 [ 1284.945275][T32029] kasan_report+0x117/0x150 [ 1284.945337][T32029] ? dvb_device_open+0xc4/0x350 [ 1284.945365][T32029] dvb_device_open+0xc4/0x350 [ 1284.945390][T32029] ? rt_spin_unlock+0x163/0x200 [ 1284.945478][T32029] chrdev_open+0x4dc/0x600 [ 1284.945525][T32029] ? __pfx_chrdev_open+0x10/0x10 [ 1284.945544][T32029] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1284.945627][T32029] ? __pfx_chrdev_open+0x10/0x10 [ 1284.945646][T32029] do_dentry_open+0x849/0x1420 [ 1284.945674][T32029] vfs_open+0x3b/0x350 [ 1284.945692][T32029] ? path_openat+0x2e49/0x3850 [ 1284.945744][T32029] path_openat+0x2e60/0x3850 [ 1284.945773][T32029] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1284.945796][T32029] ? __x64_sys_openat+0x138/0x170 [ 1284.945816][T32029] ? do_syscall_64+0x174/0x580 [ 1284.945846][T32029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.945876][T32029] do_file_open+0x23e/0x4a0 [ 1284.945900][T32029] ? lockdep_hardirqs_on+0x7a/0x110 [ 1284.945924][T32029] ? __pfx_do_file_open+0x10/0x10 [ 1284.945961][T32029] ? alloc_fd+0x654/0x6d0 [ 1284.945988][T32029] do_sys_openat2+0x115/0x200 [ 1284.946011][T32029] ? __pfx_do_sys_openat2+0x10/0x10 [ 1284.946032][T32029] ? exc_page_fault+0x6a/0xc0 [ 1284.946053][T32029] ? do_user_addr_fault+0xc4a/0x1340 [ 1284.946144][T32029] __x64_sys_openat+0x138/0x170 [ 1284.946168][T32029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.946186][T32029] do_syscall_64+0x174/0x580 [ 1284.946207][T32029] ? trace_irq_disable+0x3b/0x140 [ 1284.946229][T32029] ? clear_bhb_loop+0x40/0x90 [ 1284.946250][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.946267][T32029] RIP: 0033:0x7fb802a9d68e [ 1284.946285][T32029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1284.946300][T32029] RSP: 002b:00007fb800d35b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1284.946321][T32029] RAX: ffffffffffffffda RBX: 00007fb800d366c0 RCX: 00007fb802a9d68e [ 1284.946335][T32029] RDX: 0000000000000400 RSI: 00007fb800d35c00 RDI: ffffffffffffff9c [ 1284.946349][T32029] RBP: 00007fb800d35c00 R08: 0000000000000000 R09: 0000000000000000 [ 1284.946361][T32029] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1284.946374][T32029] R13: 00007fb802d56038 R14: 00007fb802d55fa0 R15: 00007fff945adbf8 [ 1284.946397][T32029] [ 1284.946404][T32029] [ 1284.946414][T32029] Allocated by task 31573: [ 1284.946424][T32029] kasan_save_track+0x3e/0x80 [ 1284.946445][T32029] __kasan_kmalloc+0x93/0xb0 [ 1284.946465][T32029] __kmalloc_cache_noprof+0x3d2/0x6b0 [ 1284.946487][T32029] sctp_endpoint_new+0xe1/0xa70 [ 1284.946570][T32029] sctp_init_sock+0x94e/0x1380 [ 1284.946635][T32029] sctp_v6_init_sock+0x16/0x70 [ 1284.946654][T32029] inet6_create+0xf0b/0x1280 [ 1284.946740][T32029] __sock_create+0x4b3/0x9d0 [ 1284.946824][T32029] __sys_socket+0xd6/0x1b0 [ 1284.946849][T32029] __x64_sys_socket+0x7a/0x90 [ 1284.946867][T32029] do_syscall_64+0x174/0x580 [ 1284.946886][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.946902][T32029] [ 1284.946907][T32029] Freed by task 28: [ 1284.946916][T32029] kasan_save_track+0x3e/0x80 [ 1284.946935][T32029] kasan_save_free_info+0x40/0x50 [ 1284.946952][T32029] __kasan_slab_free+0x5c/0x80 [ 1284.946972][T32029] kfree+0x1c5/0x6c0 [ 1284.946988][T32029] rcu_cpu_kthread+0x950/0x1480 [ 1284.947064][T32029] smpboot_thread_fn+0x57c/0xa80 [ 1284.947116][T32029] kthread+0x388/0x470 [ 1284.947159][T32029] ret_from_fork+0x514/0xb70 [ 1284.947218][T32029] ret_from_fork_asm+0x1a/0x30 [ 1284.947239][T32029] [ 1284.947244][T32029] Last potentially related work creation: [ 1284.947252][T32029] kasan_save_stack+0x3e/0x60 [ 1284.947270][T32029] kasan_record_aux_stack+0xbd/0xd0 [ 1284.947285][T32029] call_rcu+0xee/0x8b0 [ 1284.947334][T32029] sctp_destroy_sock+0x1ae/0x350 [ 1284.947352][T32029] sk_common_release+0x75/0x330 [ 1284.947395][T32029] sctp_close+0x79f/0x950 [ 1284.947412][T32029] inet_release+0x143/0x190 [ 1284.947464][T32029] sock_close+0xad/0x220 [ 1284.947479][T32029] __fput+0x42a/0xa80 [ 1284.947498][T32029] task_work_run+0x1d9/0x270 [ 1284.947543][T32029] get_signal+0x1182/0x12c0 [ 1284.947592][T32029] arch_do_signal_or_restart+0xbb/0x860 [ 1284.947635][T32029] exit_to_user_mode_loop+0x104/0x730 [ 1284.947701][T32029] do_syscall_64+0x353/0x580 [ 1284.947717][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.947732][T32029] [ 1284.947736][T32029] The buggy address belongs to the object at ffff88802bf74000 [ 1284.947736][T32029] which belongs to the cache kmalloc-512 of size 512 [ 1284.947750][T32029] The buggy address is located 24 bytes inside of [ 1284.947750][T32029] freed 512-byte region [ffff88802bf74000, ffff88802bf74200) [ 1284.947767][T32029] [ 1284.947772][T32029] The buggy address belongs to the physical page: [ 1284.947792][T32029] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802bf74000 pfn:0x2bf74 [ 1284.947810][T32029] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1284.947825][T32029] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1284.947851][T32029] page_type: f5(slab) [ 1284.947867][T32029] raw: 0080000000000240 ffff88801a017c80 ffffea0001785710 ffffea0000ad7d10 [ 1284.947882][T32029] raw: ffff88802bf74000 000000080010000f 00000000f5000000 0000000000000000 [ 1284.947900][T32029] head: 0080000000000240 ffff88801a017c80 ffffea0001785710 ffffea0000ad7d10 [ 1284.947917][T32029] head: ffff88802bf74000 000000080010000f 00000000f5000000 0000000000000000 [ 1284.947934][T32029] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1284.947949][T32029] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 1284.947959][T32029] page dumped because: kasan: bad access detected [ 1284.947972][T32029] page_owner tracks the page as allocated [ 1284.947979][T32029] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 13917531829, free_ts 0 [ 1284.948009][T32029] post_alloc_hook+0x1f9/0x250 [ 1284.948061][T32029] get_page_from_freelist+0x262a/0x26a0 [ 1284.948110][T32029] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1284.948134][T32029] allocate_slab+0x79/0x5e0 [ 1284.948175][T32029] refill_objects+0x2d8/0x350 [ 1284.948191][T32029] __pcs_replace_empty_main+0x330/0x690 [ 1284.948215][T32029] __kmalloc_cache_noprof+0x468/0x6b0 [ 1284.948237][T32029] device_add+0xb6/0xb80 [ 1284.948336][T32029] cdev_device_add+0x1c6/0x380 [ 1284.948353][T32029] i2cdev_attach_adapter+0x2e4/0x500 [ 1284.948417][T32029] notifier_call_chain+0x1a5/0x3d0 [ 1284.948460][T32029] blocking_notifier_call_chain+0x6a/0x90 [ 1284.948478][T32029] bus_notify+0x146/0x180 [ 1284.948501][T32029] device_add+0x53a/0xb80 [ 1284.948524][T32029] i2c_register_adapter+0xc9f/0x1400 [ 1284.948564][T32029] vidtv_bridge_probe+0x29d/0xf60 [ 1284.948616][T32029] page_owner free stack trace missing [ 1284.948623][T32029] [ 1284.948627][T32029] Memory state around the buggy address: [ 1284.948638][T32029] ffff88802bf73f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1284.948651][T32029] ffff88802bf73f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1284.948664][T32029] >ffff88802bf74000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1284.948673][T32029] ^ [ 1284.948683][T32029] ffff88802bf74080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1284.948695][T32029] ffff88802bf74100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1284.948704][T32029] ================================================================== [ 1284.963740][T32029] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1284.963762][T32029] CPU: 1 UID: 0 PID: 32029 Comm: syz.3.10927 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1284.963788][T32029] Tainted: [L]=SOFTLOCKUP [ 1284.963795][T32029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1284.963806][T32029] Call Trace: [ 1284.963814][T32029] [ 1284.963824][T32029] vpanic+0x56c/0xa60 [ 1284.963854][T32029] ? __pfx_vpanic+0x10/0x10 [ 1284.963875][T32029] ? __pfx___schedule+0x10/0x10 [ 1284.963898][T32029] panic+0xc5/0xd0 [ 1284.963918][T32029] ? __pfx_panic+0x10/0x10 [ 1284.963939][T32029] ? preempt_schedule_thunk+0x16/0x40 [ 1284.963969][T32029] ? dvb_device_open+0xc4/0x350 [ 1284.963995][T32029] check_panic_on_warn+0x89/0xb0 [ 1284.964083][T32029] ? dvb_device_open+0xc4/0x350 [ 1284.964107][T32029] end_report+0x73/0x170 [ 1284.964132][T32029] ? dvb_device_open+0xc4/0x350 [ 1284.964155][T32029] kasan_report+0x128/0x150 [ 1284.964178][T32029] ? dvb_device_open+0xc4/0x350 [ 1284.964205][T32029] dvb_device_open+0xc4/0x350 [ 1284.964230][T32029] ? rt_spin_unlock+0x163/0x200 [ 1284.964255][T32029] chrdev_open+0x4dc/0x600 [ 1284.964274][T32029] ? __pfx_chrdev_open+0x10/0x10 [ 1284.964290][T32029] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1284.964327][T32029] ? __pfx_chrdev_open+0x10/0x10 [ 1284.964345][T32029] do_dentry_open+0x849/0x1420 [ 1284.964372][T32029] vfs_open+0x3b/0x350 [ 1284.964390][T32029] ? path_openat+0x2e49/0x3850 [ 1284.964418][T32029] path_openat+0x2e60/0x3850 [ 1284.964446][T32029] ? kmem_cache_alloc_noprof+0x355/0x650 [ 1284.964466][T32029] ? __x64_sys_openat+0x138/0x170 [ 1284.964485][T32029] ? do_syscall_64+0x174/0x580 [ 1284.964505][T32029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.964532][T32029] do_file_open+0x23e/0x4a0 [ 1284.964554][T32029] ? lockdep_hardirqs_on+0x7a/0x110 [ 1284.964576][T32029] ? __pfx_do_file_open+0x10/0x10 [ 1284.964610][T32029] ? alloc_fd+0x654/0x6d0 [ 1284.964643][T32029] do_sys_openat2+0x115/0x200 [ 1284.964665][T32029] ? __pfx_do_sys_openat2+0x10/0x10 [ 1284.964687][T32029] ? exc_page_fault+0x6a/0xc0 [ 1284.964708][T32029] ? do_user_addr_fault+0xc4a/0x1340 [ 1284.964731][T32029] __x64_sys_openat+0x138/0x170 [ 1284.964754][T32029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.964771][T32029] do_syscall_64+0x174/0x580 [ 1284.964790][T32029] ? trace_irq_disable+0x3b/0x140 [ 1284.964810][T32029] ? clear_bhb_loop+0x40/0x90 [ 1284.964830][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.964848][T32029] RIP: 0033:0x7fb802a9d68e [ 1284.964865][T32029] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1284.964880][T32029] RSP: 002b:00007fb800d35b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1284.964901][T32029] RAX: ffffffffffffffda RBX: 00007fb800d366c0 RCX: 00007fb802a9d68e [ 1284.964915][T32029] RDX: 0000000000000400 RSI: 00007fb800d35c00 RDI: ffffffffffffff9c [ 1284.964928][T32029] RBP: 00007fb800d35c00 R08: 0000000000000000 R09: 0000000000000000 [ 1284.964941][T32029] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1284.964954][T32029] R13: 00007fb802d56038 R14: 00007fb802d55fa0 R15: 00007fff945adbf8 [ 1284.964975][T32029] [ 1284.965245][T32029] Kernel Offset: disabled