last executing test programs: 35m22.903533042s ago: executing program 2 (id=161): r0 = userfaultfd(0x80001) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400, 0x3, 0x4, 0x9325, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) 35m21.864037773s ago: executing program 2 (id=164): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 35m20.944361229s ago: executing program 2 (id=169): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xfffffffa, 0x407, 0x8, 0x8010041, 0x80, "0baa301fa951e8a4603c811200", 0x81ed, 0xfffffff5}) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)="d0", 0x1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) r3 = dup(r2) read$FUSE(r3, &(0x7f0000003bc0)={0x2020}, 0x2020) 35m19.031847617s ago: executing program 2 (id=180): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 35m18.068138052s ago: executing program 2 (id=185): r0 = socket$inet_udp(0x2, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'geneve1\x00', {0x2}, 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000040)={0x0, 'team0\x00', {0x600}, 0x8001}) 35m17.631790557s ago: executing program 2 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x5ce) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 35m17.232789374s ago: executing program 32 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x5ce) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 17.407557685s ago: executing program 4 (id=6390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create(0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000080)={0x8}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x8c5d47e95537ac9b) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000001000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0xe, 0xff5, &(0x7f00000003c0)=""/4085}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 15.881549364s ago: executing program 1 (id=6391): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) r2 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r4, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, 0xffffffffffffffff}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000340)={0x0, 0x0, r4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, "b1eddb851ba62b00d8730000000000000000000800"}}) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x80, &(0x7f00000001c0)=ANY=[]) keyctl$instantiate(0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6e65772064656661756c7420757365728da8af3e20303030303030303030303030303030303430393300d2abeaff4b4087959818d03a1328ba3726b7666a8c45c20266014d2a45bfde9f097402709fdb601f613fc51000a9d95aac56247598cae355407257686ee7d1e314458e17aaa2a49e02b153100da748001b006be03f32de225fda7583161eaffd1023b0d8e9105f5ade158d24b9dbb4628f89dcd7a52270e83f569ea63e2f6d9c384d94be4caa073b8ca5ad0417a6b81c58f0691bba3cf26af3078b02f0d61904a64af025b594a88e1bc1bc8b0976c6b55c228d4721"], 0x2a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15.880587448s ago: executing program 0 (id=6401): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x2c000054) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) fsopen(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 15.880170848s ago: executing program 5 (id=6393): r0 = syz_open_dev$vbi(&(0x7f0000000700), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x180, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x5680000000, 0x18}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f00000004c0)={0x6, 0xfffffffd, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000140)=@fd={0x1, 0x4, 0x4, 0x40, 0xf1, {}, {0x7, 0x1, 0xf, 0x4, 0x6, 0x3, "b7e1c5ad"}, 0x3, 0x4, {}, 0x67}) syz_usb_connect(0x4, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="b75a609d20f41083e2c6e917b1dd2369ce9d4a85e1204e57b240c84d5765ccb44973e28b7b6f19c19283b661257f48b14d9bee45eb2c17066140c609eaf5a930d4acf88feb3e8cb0e98bb39e6b928228c645e12eaebefa445677a1e6bf18193eb6cd8f479665a53fd80998349a8522cc05a349077838b7365a664878177769901def7a4af33759e38bc0342f51061cf3b9dae8f78bc45ddef1e9ddd0eae94adad39124d1af53fd8ec5178d0b01595fa40e4de7adcdddc2a66afdfc1271aa5607f9c685e176d198c2bf693fca29b9a2639228e8245c30874de814d1616809019f73b7"], 0x0) 15.063645397s ago: executing program 4 (id=6394): syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073797a32000000050000000073080030000000007e83dd9e882eb66e5a61363c51f03daf86185a73421e34b2c27240338e84e850dad479004c1b86fe96837cfb413c66bcc034d8c7537e9aa56bc7b45acb93d6d42da6d0649a45a25d36376359ca6b3e4c0fb606d0c9b43be9892e9e7f1e138f"], 0x2c}}, 0x8004) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x180, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x5680000000, 0x18}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000004c0)={0x6, 0xfffffffd, 0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) syz_usb_connect(0x4, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="b75a609d20f41083e2c6e917b1dd2369ce9d4a85e1204e57b240c84d5765ccb44973e28b7b6f19c19283b661257f48b14d9bee45eb2c17066140c609eaf5a930d4acf88feb3e8cb0e98bb39e6b928228c645e12eaebefa445677a1e6bf18193eb6cd8f479665a53fd80998349a8522cc05a349077838b7365a664878177769901def7a4af33759e38bc0342f51061cf3b9dae8f78bc45ddef1e9ddd0eae94adad39124d1af53fd8ec5178d0b01595fa40e4de7adcdddc2a66afdfc1271aa5607f9c685e176d198c2bf693fca29b9a2639228e8245c30874de814d1616809019f73b7"], 0x0) 13.761514205s ago: executing program 0 (id=6395): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x404, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@addrtype={{0x2c}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x24}}, {{@uncond, 0x0, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x6}}]}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x460) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380), 0x0, r6) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13.243526804s ago: executing program 1 (id=6396): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1, @loopback, 0x1, "a376b019fb3bdbac0536b11235af5be622ab1f67e0d9e8a3cf75e286e6729439", 0x59c, 0x3, 0x8000, 0x3}, 0x3c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000140)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="04eead", 0x3}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0804124, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12.148232808s ago: executing program 5 (id=6398): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() socket(0x2b, 0x1, 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 11.266992068s ago: executing program 3 (id=6399): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x2082) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r3, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r6, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) getpeername$inet(r6, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.072690131s ago: executing program 0 (id=6400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="03008000"], 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff800}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0xc040}, 0x40800) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 10.763266664s ago: executing program 4 (id=6402): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x2c000054) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) fsopen(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 10.671333502s ago: executing program 1 (id=6403): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107b00000000000400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\n', 0x1, 0xffffffffffffffff) r6 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dde818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000440)={r5, r6, r5}, &(0x7f0000002380)=""/4102, 0x1060, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000440)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="b23b3b"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b0400000000000000000200fffe3c000480380001800b00010064796e7365740000280002800800034000000001080004400000001108000940000000000900010073797a31000000004900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x90}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x300]}}) setns(0xffffffffffffffff, 0x24020000) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x8, {0x1, 0xfffffffffffffffd, 0x2000, 0x1ffff, 0x6, 0x84, {0x4, 0x25, 0x7, 0x80000000, 0x4, 0xffff, 0x7d59, 0x5, 0x4, 0x8000, 0x7f, r2, r3, 0xcb, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.797454828s ago: executing program 3 (id=6404): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) io_uring_enter(0xffffffffffffffff, 0x7f6e, 0xa94f, 0xd, &(0x7f00000000c0)={[0x81, 0x81]}, 0x8) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.044970183s ago: executing program 5 (id=6405): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x4241, 0x87) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) setresuid(0x0, 0xee00, 0x0) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000002200000000000000160000008500000061000000850000005000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0xcd7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160010"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) io_uring_setup(0x7d30, &(0x7f00000020c0)={0x0, 0xffffffff, 0x1046}) 8.352144439s ago: executing program 5 (id=6406): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x2c000054) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) fsopen(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 8.073330148s ago: executing program 1 (id=6407): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x8040) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, 0x0, 0x4) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0xf) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0xfaf, &(0x7f0000000400)={0x0, 0x7aab, 0x10, 0x3, 0x10d7}, &(0x7f00000002c0), &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 7.974163302s ago: executing program 0 (id=6408): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0}, 0x94) unshare(0x400) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc800}, 0x2404d04d) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x400, 0x4, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) ioctl$HIDIOCGFLAG(r4, 0x8004480e, 0x0) 7.886328041s ago: executing program 4 (id=6409): r0 = syz_open_dev$vbi(&(0x7f0000000700), 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x180, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x5680000000, 0x18}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f00000004c0)={0x6, 0xfffffffd, 0x2}) ioctl$VIDIOC_QUERYBUF(r0, 0xc04c5609, &(0x7f0000000140)=@fd={0x1, 0x4, 0x4, 0x40, 0xf1, {}, {0x7, 0x1, 0xf, 0x4, 0x6, 0x3, "b7e1c5ad"}, 0x3, 0x4, {}, 0x67}) syz_usb_connect(0x4, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="b75a609d20f41083e2c6e917b1dd2369ce9d4a85e1204e57b240c84d5765ccb44973e28b7b6f19c19283b661257f48b14d9bee45eb2c17066140c609eaf5a930d4acf88feb3e8cb0e98bb39e6b928228c645e12eaebefa445677a1e6bf18193eb6cd8f479665a53fd80998349a8522cc05a349077838b7365a664878177769901def7a4af33759e38bc0342f51061cf3b9dae8f78bc45ddef1e9ddd0eae94adad39124d1af53fd8ec5178d0b01595fa40e4de7adcdddc2a66afdfc1271aa5607f9c685e176d198c2bf693fca29b9a2639228e8245c30874de814d1616809019f73b7"], 0x0) 6.55831901s ago: executing program 5 (id=6410): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x28900) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, &(0x7f0000000280)={0x0, 0x0}) syz_usb_connect(0x4, 0x5f, &(0x7f0000000300)=ANY=[@ANYBLOB="846d8da59d13ab5c681ae92ec0bba21f9519f427d09c59da57233b39a7c2c8d1e52b87c33d567ff38885cecc18e810d6171aa4d22fe7774a66141382282ae7f52a6fda08c5efa2641c9ed77184369c908c5fcb80386f8514beb4b9782ad55f1bdf01eb81822afd661d1951b4dfbe23f6a370e12a6c01cf8fc8e14726daf3f163f2c162", @ANYRES8, @ANYRES16, @ANYRES64=r1], 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000003c0)={'bond0\x00', &(0x7f0000000880)=@ethtool_rxfh={0x46, 0x4, 0x1000, 0x2, 0xfc, "91a401", 0x8, [0x3, 0xe, 0x10, 0x6, 0x1ff, 0x7fff, 0x9]}}) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, &(0x7f0000000400)={0x0, 0x1, 0x5, {0x5, 0x1, "3cc1e0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) r7 = socket$inet6(0x10, 0x2, 0x4) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000000)={'syzkaller1\x00', 0x5}) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 6.198787905s ago: executing program 1 (id=6411): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) socket(0x1d, 0x2, 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x10c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x8c, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x80000) ioctl$EVIOCGEFFECTS(r6, 0x80044584, &(0x7f0000000380)=""/196) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) io_uring_setup(0x598, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0) 5.872055146s ago: executing program 3 (id=6412): syz_open_dev$vbi(0x0, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000190a01040000000000000000020000000900020073797a32000000050000000073080030000000007e83dd9e882eb66e5a61363c51f03daf86185a73421e34b2c27240338e84e850dad479004c1b86fe96837cfb413c66bcc034d8c7537e9aa56bc7b45acb93d6d42da6d0649a45a25d36376359ca6b3e4c0fb606d0c9b43be9892e9e7f1e138f"], 0x2c}}, 0x8004) socket$inet_icmp_raw(0x2, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x180, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x5680000000, 0x18}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x180}}, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000004c0)={0x6, 0xfffffffd, 0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) syz_usb_connect(0x4, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="b75a609d20f41083e2c6e917b1dd2369ce9d4a85e1204e57b240c84d5765ccb44973e28b7b6f19c19283b661257f48b14d9bee45eb2c17066140c609eaf5a930d4acf88feb3e8cb0e98bb39e6b928228c645e12eaebefa445677a1e6bf18193eb6cd8f479665a53fd80998349a8522cc05a349077838b7365a664878177769901def7a4af33759e38bc0342f51061cf3b9dae8f78bc45ddef1e9ddd0eae94adad39124d1af53fd8ec5178d0b01595fa40e4de7adcdddc2a66afdfc1271aa5607f9c685e176d198c2bf693fca29b9a2639228e8245c30874de814d1616809019f73b7"], 0x0) 4.559793479s ago: executing program 0 (id=6413): r0 = socket(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x2, 0x8000, 0x0, 0xfffffffe}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xf2be}, {0x129, 0x80, 0x0, 0x1}, {0x4006, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r6, &(0x7f0000001000)=[{{&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}}, {{&(0x7f0000000940)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, &(0x7f0000000300)=[{&(0x7f00000009c0)="a43f63348eba634711bb95516ad4d155f447c994e61dac2d2e5ff32e285d9ed0dcb6a54ea3b55a5d71e2353d2c1df0a42e809213b3f875c1819482385a62913c2c6fad40211333c1207b6592a4f08542ed9885a2746c73433fc4fa23ddfe06372703cf743f983a5e0c4036007de1261ffe847103d7e0626b67694e0c8916520595480a28bb4c652141acbe4d93d895edccf6482b737435d48af3ec2ed7819b3adc5b6dcd79ea7ca609c70ae8", 0xac}, {&(0x7f0000000b40)}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x438}}], 0x2, 0x40840) sendmsg$rds(r5, &(0x7f0000001380)={&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{0x7ff80000, 0x101}, 0x0, 0x0, 0x89, 0x4, 0xeb, 0x10000000008a, 0x22, 0x77}}], 0x58}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f0000010000", @ANYRES32, @ANYBLOB="0100008000"/19, @ANYRES32=0x0, @ANYRES32], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r8, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$qrtr(r0, &(0x7f0000002400)={0x2d, 0xffffffffffffffff, 0x2}, 0xc) 3.616008183s ago: executing program 4 (id=6414): socket$nl_generic(0x10, 0x3, 0x10) keyctl$get_persistent(0x16, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) unshare(0x28040680) r2 = timerfd_create(0x0, 0x0) timerfd_gettime(r2, &(0x7f0000000200)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r4) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000003c0)={0x0, 0xa6, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.369336494s ago: executing program 1 (id=6415): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) getpid() socket(0x2b, 0x1, 0x1) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) 2.820125817s ago: executing program 3 (id=6416): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet6_sctp(0xa, 0x1, 0x84) fremovexattr(r0, &(0x7f0000000040)=@random={'os2.', '\x00'}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @dev={0xac, 0x14, 0x14, 0x24}}, 0x8) close(0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000880)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffffd, 0x0, 0x800000, 0x1, 0xffffffff}, 0x0, 0x0, 0xa, 0x4, 0x40101, 0x18, 0x0, 0x0, 0x0, 0x0, {0x1ff, 0x0, 0x0, 0x7f}}}}]}, 0x78}}, 0x80) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_RESETEP(r7, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) mremap(&(0x7f00003bb000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00007f1000/0x2000)=nil) 1.343982918s ago: executing program 3 (id=6417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') lseek(r3, 0x36, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2) ioctl$KVM_SET_NESTED_STATE(r3, 0x4048aecb, &(0x7f0000001440)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020a0003070000000000ffffffff000005001a00ff10a88376efec29c632e9ccdd5510e94c3128aae88c"], 0x38}}, 0x20008040) mremap(&(0x7f00001a6000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000208000/0x2000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 1.342885487s ago: executing program 5 (id=6418): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r4, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, r6}) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0xffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.120155612s ago: executing program 0 (id=6419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x2c000054) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) fsopen(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 135.765621ms ago: executing program 4 (id=6420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x2c000054) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) fsopen(0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 0s ago: executing program 3 (id=6421): socket(0x200000000000011, 0x2, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) r0 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x60000000, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) kernel console output (not intermixed with test programs): or this card. [ 1995.174261][T22680] em28xx 1-1:0.132: Closing input extension [ 1995.183724][T22680] em28xx 1-1:0.132: Freeing device [ 1995.599097][T28878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5842'. [ 1997.757691][T22687] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1998.319593][T22687] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 1998.357642][T22687] usb 1-1: config 0 has no interface number 0 [ 1998.377939][T22687] usb 1-1: config 0 interface 113 has no altsetting 0 [ 1998.527068][T22687] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1998.552508][T22687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.573410][T22687] usb 1-1: Product: syz [ 1998.587895][T22687] usb 1-1: Manufacturer: syz [ 1998.600951][T22687] usb 1-1: SerialNumber: syz [ 1998.620792][T22687] usb 1-1: config 0 descriptor?? [ 1998.670298][T22687] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1998.679959][T28912] hub 9-0:1.0: USB hub found [ 1998.758051][T28912] hub 9-0:1.0: 1 port detected [ 1999.228086][ T6794] net_ratelimit: 74 callbacks suppressed [ 1999.228112][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1999.248015][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 1999.367925][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1999.377932][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 1999.487739][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1999.497173][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 1999.538791][T28916] tipc: Enabling of bearer rejected, failed to enable media [ 1999.627556][ T139] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1999.641495][ T139] bond2: (slave macvlan2): failed to get link speed/duplex [ 1999.767961][ T6808] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1999.777892][ T6808] bond2: (slave macvlan2): failed to get link speed/duplex [ 1999.884998][T28922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.894631][T28922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1999.944374][T22687] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2000.146914][T22687] usb 6-1: Using ep0 maxpacket: 16 [ 2000.155183][T22687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2000.174348][T22687] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2000.196086][T22687] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2000.214863][T22687] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2000.244825][T22687] usb 6-1: config 0 descriptor?? [ 2000.667980][T28918] xt_TCPMSS: Only works on TCP SYN packets [ 2000.719228][T22680] usb 1-1: USB disconnect, device number 94 [ 2000.750855][T28918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2000.785176][T28918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.813739][T22687] zydacron 0003:13EC:0006.009B: unknown main item tag 0x7 [ 2000.830520][T22687] zydacron 0003:13EC:0006.009B: unknown main item tag 0x0 [ 2000.846507][T22687] zydacron 0003:13EC:0006.009B: item fetching failed at offset 4/5 [ 2000.886550][T22687] zydacron 0003:13EC:0006.009B: parse failed [ 2000.914590][T22687] zydacron 0003:13EC:0006.009B: probe with driver zydacron failed with error -22 [ 2001.040129][T22680] usb 6-1: USB disconnect, device number 16 [ 2004.339128][ T139] net_ratelimit: 80 callbacks suppressed [ 2004.339153][ T139] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2004.358525][ T139] bond2: (slave macvlan2): failed to get link speed/duplex [ 2004.468689][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2004.476319][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 2004.598558][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2004.609866][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 2004.738537][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2004.746073][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2004.867054][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2004.874878][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2005.807869][T28978] support for the xor transformation has been removed. [ 2006.557571][ T30] audit: type=1326 audit(1771025700.014:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.604118][T28983] tipc: Enabling of bearer rejected, failed to enable media [ 2006.617805][ T30] audit: type=1326 audit(1771025700.014:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.663354][ T30] audit: type=1326 audit(1771025700.044:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.712299][ T30] audit: type=1326 audit(1771025700.044:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.757628][ T30] audit: type=1326 audit(1771025700.044:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.788027][ T30] audit: type=1326 audit(1771025700.054:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.821363][ T30] audit: type=1326 audit(1771025700.054:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.876069][ T30] audit: type=1326 audit(1771025700.054:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.948632][ T30] audit: type=1326 audit(1771025700.054:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2006.991029][ T30] audit: type=1326 audit(1771025700.054:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28980 comm="syz.3.5863" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf717572b code=0x7ffc0000 [ 2007.207946][T22680] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2007.357964][T22680] usb 1-1: Using ep0 maxpacket: 16 [ 2007.365345][T22680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.386379][T22680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.412449][T22680] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2007.438636][T22680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.485643][T22680] usb 1-1: config 0 descriptor?? [ 2007.492424][T28997] netlink: 'syz.4.5866': attribute type 10 has an invalid length. [ 2007.557886][T23134] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2007.697934][T28725] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2007.711034][T23134] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.728036][T23134] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2007.772103][T23134] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2007.797678][T22687] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2007.828086][T23134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.848580][T28725] usb 2-1: Using ep0 maxpacket: 16 [ 2007.859781][T28725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2007.882820][T28725] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.908431][T23134] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2007.918488][T28725] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2007.946268][T28725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2007.976147][T28986] xt_TCPMSS: Only works on TCP SYN packets [ 2007.987403][T22687] usb 5-1: Using ep0 maxpacket: 16 [ 2008.008343][T28725] usb 2-1: config 0 descriptor?? [ 2008.020602][T22687] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2008.034817][T23134] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2008.073185][T28986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.083850][T28986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.086246][T22687] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2008.114917][T28814] udevd[28814]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2008.145498][T22687] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2008.180869][T22687] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2008.208053][T22687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.235525][T22687] usb 5-1: Product: syz [ 2008.245195][T22687] usb 5-1: Manufacturer: syz [ 2008.263453][T22687] usb 5-1: SerialNumber: syz [ 2008.326253][T22680] zydacron 0003:13EC:0006.009C: unknown main item tag 0x7 [ 2008.349038][T22680] zydacron 0003:13EC:0006.009C: unknown main item tag 0x0 [ 2008.362543][T22680] zydacron 0003:13EC:0006.009C: item fetching failed at offset 4/5 [ 2008.375762][T22680] zydacron 0003:13EC:0006.009C: parse failed [ 2008.391354][T22680] zydacron 0003:13EC:0006.009C: probe with driver zydacron failed with error -22 [ 2008.448180][T28996] xt_TCPMSS: Only works on TCP SYN packets [ 2008.498348][T28996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.574762][T28996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.627171][T22688] usb 1-1: USB disconnect, device number 95 [ 2008.705164][T28725] zydacron 0003:13EC:0006.009D: unknown main item tag 0x7 [ 2008.715968][T28725] zydacron 0003:13EC:0006.009D: unknown main item tag 0x0 [ 2008.729335][T28725] zydacron 0003:13EC:0006.009D: item fetching failed at offset 4/5 [ 2008.752857][T28725] zydacron 0003:13EC:0006.009D: parse failed [ 2008.763541][T28725] zydacron 0003:13EC:0006.009D: probe with driver zydacron failed with error -22 [ 2008.798941][T22687] usb 5-1: 0:2 : does not exist [ 2008.803912][T22687] usb 5-1: unit 0 not found! [ 2008.831945][T22687] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2008.854024][T22687] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2008.900798][T22687] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2008.928436][T22687] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2008.994169][T22687] usb 5-1: USB disconnect, device number 12 [ 2009.016163][T22688] usb 2-1: USB disconnect, device number 22 [ 2009.055092][T28814] udevd[28814]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2009.397831][ T36] net_ratelimit: 75 callbacks suppressed [ 2009.397849][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2009.417086][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2009.528750][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2009.550523][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 2009.678030][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2009.688665][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 2009.796870][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2009.811679][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 2009.878383][T29012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2009.942089][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2009.959735][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 2010.097362][T28725] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2010.295560][T28725] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2010.318043][T28725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.334751][T28725] usb 5-1: Product: syz [ 2010.343003][T28725] usb 5-1: Manufacturer: syz [ 2010.352155][T28725] usb 5-1: SerialNumber: syz [ 2010.373809][T28725] usb 5-1: config 0 descriptor?? [ 2010.385615][T28725] hub 5-1:0.0: bad descriptor, ignoring hub [ 2010.397750][T28725] hub 5-1:0.0: probe with driver hub failed with error -5 [ 2010.775383][T28725] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2010.801857][T28725] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2010.818728][T28725] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2010.851389][T28725] usb 5-1: media controller created [ 2010.878186][T22690] usb 6-1: USB disconnect, device number 17 [ 2010.923520][T28725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2010.956207][T28990] delete_channel: no stack [ 2011.106300][T28725] DVB: Unable to find symbol dib7000p_attach() [ 2011.123915][T28725] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2011.301448][T28725] rc_core: IR keymap rc-dib0700-rc5 not found [ 2011.325502][T28725] Registered IR keymap rc-empty [ 2011.355383][T28725] dvb-usb: could not initialize remote control. [ 2011.383514][T28725] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2011.641634][T29030] input: syz1 as /devices/virtual/input/input106 [ 2012.368062][T29041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.382588][T29041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2013.410277][T22690] usb 5-1: USB disconnect, device number 13 [ 2013.439077][T22690] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2013.971652][T29055] pimreg: entered allmulticast mode [ 2014.137241][T28725] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2014.287690][T28725] usb 5-1: Using ep0 maxpacket: 16 [ 2014.296425][T28725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2014.324404][T28725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.360321][T28725] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2014.385854][T28725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.424645][T28725] usb 5-1: config 0 descriptor?? [ 2014.492628][ T36] net_ratelimit: 78 callbacks suppressed [ 2014.492643][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2014.517900][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2014.646864][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2014.654581][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2014.766884][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2014.774404][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2014.869749][T29054] xt_TCPMSS: Only works on TCP SYN packets [ 2014.886897][T27898] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2014.894549][T27898] bond2: (slave macvlan2): failed to get link speed/duplex [ 2014.965504][T29054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2014.986188][T29054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.006976][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2015.014453][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2015.044593][T28725] zydacron 0003:13EC:0006.009E: unknown main item tag 0x7 [ 2015.052662][T28725] zydacron 0003:13EC:0006.009E: unknown main item tag 0x0 [ 2015.067771][T28725] zydacron 0003:13EC:0006.009E: item fetching failed at offset 4/5 [ 2015.077777][T28725] zydacron 0003:13EC:0006.009E: parse failed [ 2015.085864][T28725] zydacron 0003:13EC:0006.009E: probe with driver zydacron failed with error -22 [ 2015.237600][T28725] usb 5-1: USB disconnect, device number 14 [ 2015.444046][T29066] netlink: 'syz.1.5881': attribute type 10 has an invalid length. [ 2015.587537][T22688] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2015.706994][T22690] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2015.738600][T22688] usb 6-1: Using ep0 maxpacket: 16 [ 2015.755599][T22688] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2015.767729][T22688] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2015.774438][T22688] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2015.789051][T22688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2015.809797][T22688] usb 6-1: config 0 descriptor?? [ 2015.859690][T22690] usb 2-1: Using ep0 maxpacket: 16 [ 2015.873632][T22690] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2015.883035][T22690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2015.895157][T22690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2015.914095][T22690] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2015.924719][T22690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.941607][T22690] usb 2-1: Product: syz [ 2015.946036][T22690] usb 2-1: Manufacturer: syz [ 2015.958384][T22690] usb 2-1: SerialNumber: syz [ 2016.284082][T22688] nzxt-smart2 0003:1E71:2009.009F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 2016.347374][T22690] usb 2-1: 0:2 : does not exist [ 2016.359306][T22690] usb 2-1: unit 0 not found! [ 2016.380717][T22690] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2016.405781][T22690] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2016.463510][T22690] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2016.514748][T22690] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2016.579227][T22690] usb 2-1: USB disconnect, device number 23 [ 2016.621575][T28814] udevd[28814]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2017.987837][T28725] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 2018.157953][T28725] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 2018.177516][T28725] usb 1-1: config 0 has no interface number 0 [ 2018.213637][T28725] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2018.242716][T28725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.281266][T28725] usb 1-1: Product: syz [ 2018.292898][T28725] usb 1-1: Manufacturer: syz [ 2018.322705][T28725] usb 1-1: SerialNumber: syz [ 2018.346415][T28725] usb 1-1: config 0 descriptor?? [ 2019.101206][T22680] usb 6-1: USB disconnect, device number 18 [ 2019.521170][ T13] net_ratelimit: 78 callbacks suppressed [ 2019.521189][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2019.565236][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2019.708905][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2019.717760][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2019.836853][ T139] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2019.855839][ T139] bond2: (slave macvlan2): failed to get link speed/duplex [ 2019.976923][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2019.986253][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2020.136981][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2020.149383][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2020.164980][T29119] fuse: Bad value for 'fd' [ 2020.636881][T22690] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2020.852426][T22690] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2020.867496][T22690] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.875635][T22690] usb 6-1: Product: syz [ 2020.896732][T22690] usb 6-1: Manufacturer: syz [ 2020.908986][T22690] usb 6-1: SerialNumber: syz [ 2020.924520][T22690] usb 6-1: config 0 descriptor?? [ 2020.967397][T29124] input: syz1 as /devices/virtual/input/input107 [ 2020.975395][T22690] hub 6-1:0.0: bad descriptor, ignoring hub [ 2020.999434][T22690] hub 6-1:0.0: probe with driver hub failed with error -5 [ 2021.258609][T28725] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 2021.292405][T22690] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2021.314342][T22690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2021.328605][T22690] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2021.341572][T22690] usb 6-1: media controller created [ 2021.353050][T28725] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 2021.364632][T28725] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 2021.391342][T28725] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 2021.415762][T22690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2021.450051][T28725] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2021.556173][T22690] DVB: Unable to find symbol dib7000p_attach() [ 2021.569332][T22690] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2021.591298][T28725] usb 1-1: USB disconnect, device number 96 [ 2021.683560][T28725] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2021.748825][T28725] keyspan 1-1:0.133: device disconnected [ 2021.751892][T22690] rc_core: IR keymap rc-dib0700-rc5 not found [ 2021.853293][T22690] Registered IR keymap rc-empty [ 2021.925441][T22690] dvb-usb: could not initialize remote control. [ 2021.932051][T22688] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2021.963399][T22690] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2022.151653][T22688] usb 2-1: Using ep0 maxpacket: 16 [ 2022.174331][T22688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2022.215884][T22688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2022.236163][T22688] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2022.266376][T22688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.285898][T22688] usb 2-1: config 0 descriptor?? [ 2022.730925][T29129] xt_TCPMSS: Only works on TCP SYN packets [ 2022.799371][T29137] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5896'. [ 2022.832981][T29139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.954728][T29139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2023.005840][T22688] zydacron 0003:13EC:0006.00A0: unknown main item tag 0x7 [ 2023.025157][T22688] zydacron 0003:13EC:0006.00A0: unknown main item tag 0x0 [ 2023.037583][T22688] zydacron 0003:13EC:0006.00A0: item fetching failed at offset 4/5 [ 2023.053633][T22688] zydacron 0003:13EC:0006.00A0: parse failed [ 2023.072943][T22688] zydacron 0003:13EC:0006.00A0: probe with driver zydacron failed with error -22 [ 2023.113892][T29142] x_tables: duplicate underflow at hook 3 [ 2023.252874][T22688] usb 2-1: USB disconnect, device number 24 [ 2024.003784][T29147] netlink: 'syz.3.5897': attribute type 10 has an invalid length. [ 2024.022848][T29147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.038283][T29147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.297331][T22680] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2024.457671][T22680] usb 2-1: Using ep0 maxpacket: 16 [ 2024.465899][T22680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2024.483512][T22680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.494770][T22680] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2024.505980][T22680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.531060][T22680] usb 2-1: config 0 descriptor?? [ 2024.548054][ T6808] net_ratelimit: 74 callbacks suppressed [ 2024.548082][ T6808] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2024.563364][ T6808] bond2: (slave macvlan2): failed to get link speed/duplex [ 2024.681700][T22690] usb 6-1: USB disconnect, device number 19 [ 2024.688626][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2024.699300][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2024.791495][T22690] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2024.846776][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2024.867720][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2024.997955][T29148] xt_TCPMSS: Only works on TCP SYN packets [ 2025.004746][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2025.017373][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2025.069384][T29148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.138202][T29148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.146973][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2025.166850][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2025.235481][T22680] zydacron 0003:13EC:0006.00A1: unknown main item tag 0x7 [ 2025.256391][T22680] zydacron 0003:13EC:0006.00A1: unknown main item tag 0x0 [ 2025.274023][T22680] zydacron 0003:13EC:0006.00A1: item fetching failed at offset 4/5 [ 2025.301551][T22680] zydacron 0003:13EC:0006.00A1: parse failed [ 2025.317272][T22680] zydacron 0003:13EC:0006.00A1: probe with driver zydacron failed with error -22 [ 2025.470553][T28725] usb 2-1: USB disconnect, device number 25 [ 2026.476484][T29174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5902'. [ 2026.498961][T29174] netlink: 'syz.4.5902': attribute type 12 has an invalid length. [ 2026.517823][T29174] netlink: 'syz.4.5902': attribute type 13 has an invalid length. [ 2026.921089][T29174] vxlan0: entered promiscuous mode [ 2026.975046][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2027.019149][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2027.034677][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2027.044539][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2027.414059][T29189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2027.420633][T29189] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2027.463393][T29189] vhci_hcd vhci_hcd.0: Device attached [ 2027.482565][T29189] netdevsim netdevsim3: Direct firmware load for nel/address_bits failed with error -2 [ 2027.493719][T29189] netdevsim netdevsim3: Falling back to sysfs fallback for: nel/address_bits [ 2027.737643][T28725] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 2028.137720][T22680] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 2028.379278][T22680] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2028.397997][T22680] usb 6-1: config 0 has no interface number 0 [ 2028.409414][T22680] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 2028.429758][T22680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.439808][T22680] usb 6-1: Product: syz [ 2028.443992][T22680] usb 6-1: Manufacturer: syz [ 2028.449606][T22680] usb 6-1: SerialNumber: syz [ 2028.456414][T22680] usb 6-1: config 0 descriptor?? [ 2029.016994][T29203] input: syz1 as /devices/virtual/input/input110 [ 2029.378412][T29208] binder: BINDER_SET_CONTEXT_MGR already set [ 2029.401791][T29208] binder: 29207:29208 ioctl 4018620d 80000100 returned -16 [ 2029.414530][T29208] binder: BINDER_SET_CONTEXT_MGR already set [ 2029.422215][T29208] binder: 29207:29208 ioctl 4018620d 800002c0 returned -16 [ 2029.577309][ T13] net_ratelimit: 66 callbacks suppressed [ 2029.577408][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2029.609604][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2029.746966][ T6794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2029.756118][ T6794] bond2: (slave macvlan2): failed to get link speed/duplex [ 2029.868183][ T6808] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2029.877732][ T6808] bond2: (slave macvlan2): failed to get link speed/duplex [ 2029.987997][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2030.001239][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2030.127179][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2030.137650][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2030.410369][T29215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.450553][T29215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.608947][T29211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.622670][T29211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.671099][T29217] macsec1: entered promiscuous mode [ 2030.676464][T29217] macvlan0: entered promiscuous mode [ 2030.717871][T29217] macvlan0: left promiscuous mode [ 2030.900384][T22680] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 2030.909992][T22680] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 2030.921882][T22680] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 2030.941146][T22680] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 2030.961343][T22680] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 2030.993634][T22680] usb 6-1: USB disconnect, device number 20 [ 2031.018291][T22680] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 2031.040562][T22680] keyspan 6-1:0.133: device disconnected [ 2031.211857][T29221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.231139][T29221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.310831][T29224] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 2031.319296][T29224] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2031.337838][T29224] vhci_hcd vhci_hcd.0: Device attached [ 2031.375347][T29227] vhci_hcd vhci_hcd.0: port 0 already used [ 2031.388160][T29225] vhci_hcd: connection closed [ 2031.390003][ T6808] vhci_hcd vhci_hcd.3: stop threads [ 2031.405812][ T6808] vhci_hcd vhci_hcd.3: release socket [ 2031.415945][ T6808] vhci_hcd vhci_hcd.3: disconnect device [ 2031.439263][T29223] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2032.351805][T29232] input: syz0 as /devices/virtual/input/input111 [ 2032.478600][T22680] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2032.511031][T29242] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5915'. [ 2032.637719][T22680] usb 1-1: Using ep0 maxpacket: 16 [ 2032.650310][T22680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2032.666036][T22680] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.679665][T22680] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2032.695030][T22680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.715819][T22680] usb 1-1: config 0 descriptor?? [ 2033.155827][T29238] xt_TCPMSS: Only works on TCP SYN packets [ 2033.195532][T29238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.274123][T29238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.344661][T22680] zydacron 0003:13EC:0006.00A2: unknown main item tag 0x7 [ 2033.353854][T22680] zydacron 0003:13EC:0006.00A2: unknown main item tag 0x0 [ 2033.382966][T22680] zydacron 0003:13EC:0006.00A2: item fetching failed at offset 4/5 [ 2033.393390][T22680] zydacron 0003:13EC:0006.00A2: parse failed [ 2033.400485][T22680] zydacron 0003:13EC:0006.00A2: probe with driver zydacron failed with error -22 [ 2033.629901][T22680] usb 1-1: USB disconnect, device number 97 [ 2034.667594][ T36] net_ratelimit: 72 callbacks suppressed [ 2034.667614][ T36] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2034.683700][ T36] bond2: (slave macvlan2): failed to get link speed/duplex [ 2034.797893][ T6808] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2034.805464][ T6808] bond2: (slave macvlan2): failed to get link speed/duplex [ 2034.927913][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2034.935747][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2035.047145][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2035.057613][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2035.224034][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2035.224055][ T30] audit: type=1326 audit(1771025728.684:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.264374][ T30] audit: type=1326 audit(1771025728.684:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.307340][ T30] audit: type=1326 audit(1771025728.684:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.347924][ T30] audit: type=1326 audit(1771025728.684:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.375013][ T13] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 2035.387893][ T13] bond2: (slave macvlan2): failed to get link speed/duplex [ 2035.400512][ T30] audit: type=1326 audit(1771025728.684:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.425942][ T30] audit: type=1326 audit(1771025728.684:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717572b code=0x7ffc0000 [ 2035.461998][ T30] audit: type=1326 audit(1771025728.684:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.485406][ T30] audit: type=1326 audit(1771025728.684:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.517882][ T30] audit: type=1326 audit(1771025728.684:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.546391][ T30] audit: type=1326 audit(1771025728.684:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29262 comm="syz.3.5921" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2035.898543][T29272] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2035.905232][T29272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2035.921342][T29272] vhci_hcd vhci_hcd.0: Device attached [ 2035.995755][T29272] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 2036.061081][T29272] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 2036.187733][T23134] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 2036.539867][T29285] input: syz1 as /devices/virtual/input/input112 [ 2037.129491][T29273] vhci_hcd: connection reset by peer [ 2037.142655][ T36] vhci_hcd vhci_hcd.0: stop threads [ 2037.154404][ T36] vhci_hcd vhci_hcd.0: release socket [ 2037.188221][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 2037.373525][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.382872][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.748070][T29292] usb usb8: usbfs: process 29292 (syz.3.5924) did not claim interface 0 before use [ 2039.205983][T29309] hub 9-0:1.0: USB hub found [ 2039.211951][T29309] hub 9-0:1.0: 1 port detected [ 2039.269399][T29316] tipc: Resetting bearer [ 2039.571861][T29316] tipc: Resetting bearer [ 2039.744860][T29316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2039.828353][T29316] veth1_vlan: left allmulticast mode [ 2040.981250][T29321] net_ratelimit: 68 callbacks suppressed [ 2040.981316][T29321] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2041.078571][ T6808] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2041.088546][ T6808] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2041.127831][ T6808] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2041.166376][ T6808] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2041.277872][T23134] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 2041.378958][T29335] x_tables: duplicate underflow at hook 3 [ 2043.883274][T29362] IPVS: Error connecting to the multicast addr [ 2044.157113][T22688] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2044.327273][T22688] usb 2-1: Using ep0 maxpacket: 8 [ 2044.337723][T22688] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2044.361648][T22688] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2044.387806][T22688] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2044.411689][T22688] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2044.445284][T22688] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2044.478274][T22688] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2044.505040][T22688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.758301][T29379] fuse: Bad value for 'fd' [ 2045.359086][T29386] usbtmc 2-1:16.0: simple usb_control_msg returned 0 [ 2045.370343][T29387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5941'. [ 2045.385036][T29387] lo: Caught tx_queue_len zero misconfig [ 2045.396716][T29387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5941'. [ 2046.383232][T22688] usb 2-1: USB disconnect, device number 26 [ 2046.633493][T29402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5943'. [ 2046.707862][T29406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5945'. [ 2046.858610][T29411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5945'. [ 2048.036448][T29424] x_tables: duplicate underflow at hook 3 [ 2048.670651][T29429] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5949'. [ 2049.125163][T29438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5952'. [ 2049.136717][T29438] netlink: 'syz.3.5952': attribute type 12 has an invalid length. [ 2049.148811][T29438] netlink: 'syz.3.5952': attribute type 13 has an invalid length. [ 2049.184215][T29438] vxlan0: entered promiscuous mode [ 2049.241790][T27898] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2049.256591][T27898] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2049.277773][T27898] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2049.302290][T27898] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2050.606405][T29453] input: syz1 as /devices/virtual/input/input113 [ 2051.860630][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 2051.860649][ T30] audit: type=1400 audit(1771025745.324:1414): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=29458 comm="syz.4.5957" [ 2051.964912][T29464] usb usb8: usbfs: process 29464 (syz.4.5957) did not claim interface 0 before use [ 2052.287857][T23134] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2052.447813][T23134] usb 6-1: Using ep0 maxpacket: 16 [ 2052.460547][T23134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2052.479653][T23134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2052.495907][T23134] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2052.512492][T23134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.547913][T23134] usb 6-1: config 0 descriptor?? [ 2053.085330][T29463] xt_TCPMSS: Only works on TCP SYN packets [ 2053.145222][T29465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.246611][T29465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.364583][T23134] zydacron 0003:13EC:0006.00A3: unknown main item tag 0x7 [ 2053.376542][T23134] zydacron 0003:13EC:0006.00A3: unknown main item tag 0x0 [ 2053.385718][T23134] zydacron 0003:13EC:0006.00A3: item fetching failed at offset 4/5 [ 2053.404386][T23134] zydacron 0003:13EC:0006.00A3: parse failed [ 2053.439424][T23134] zydacron 0003:13EC:0006.00A3: probe with driver zydacron failed with error -22 [ 2053.637053][T22690] usb 6-1: USB disconnect, device number 21 [ 2053.684370][T29481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5961'. [ 2053.979654][T29481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5961'. [ 2054.411821][T29496] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2056.626133][T29510] input: syz1 as /devices/virtual/input/input114 [ 2057.412170][T29521] fuse: Bad value for 'fd' [ 2058.245801][T29539] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5972'. [ 2058.335482][T29536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5972'. [ 2058.603611][T29541] hub 9-0:1.0: USB hub found [ 2058.619014][T29541] hub 9-0:1.0: 1 port detected [ 2059.277086][T22688] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2059.526874][T22688] usb 2-1: Using ep0 maxpacket: 8 [ 2059.597420][T22688] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2059.608833][T22688] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2059.620276][T22688] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2059.654684][T22688] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2059.665782][T22688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.697648][T22688] usb 2-1: Product: syz [ 2059.715187][T22688] usb 2-1: Manufacturer: syz [ 2059.779484][T22688] usb 2-1: SerialNumber: syz [ 2059.871028][T29551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2060.023058][T22688] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2060.038874][T22688] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 2060.056551][T22688] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 2060.157401][T23134] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2060.317646][T23134] usb 6-1: Using ep0 maxpacket: 16 [ 2060.325286][T23134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2060.355682][T23134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2060.381529][T23134] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2060.404577][T23134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2060.429799][T23134] usb 6-1: config 0 descriptor?? [ 2060.502684][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5979'. [ 2060.575341][T29573] netlink: 'syz.0.5979': attribute type 12 has an invalid length. [ 2060.614225][T29573] netlink: 'syz.0.5979': attribute type 13 has an invalid length. [ 2060.864133][T29558] xt_TCPMSS: Only works on TCP SYN packets [ 2060.968028][T29576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.058704][T29575] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2061.072641][T29576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2061.381978][T23134] zydacron 0003:13EC:0006.00A4: unknown main item tag 0x7 [ 2061.402759][T23134] zydacron 0003:13EC:0006.00A4: unknown main item tag 0x0 [ 2061.413535][T23134] zydacron 0003:13EC:0006.00A4: item fetching failed at offset 4/5 [ 2061.423046][T23134] zydacron 0003:13EC:0006.00A4: parse failed [ 2061.430493][T23134] zydacron 0003:13EC:0006.00A4: probe with driver zydacron failed with error -22 [ 2061.465416][T29580] input: syz1 as /devices/virtual/input/input115 [ 2061.568381][T22688] usb 6-1: USB disconnect, device number 22 [ 2062.248270][T22688] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2062.438165][T22688] usb 1-1: config 0 has no interfaces? [ 2062.455780][T22688] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2062.465678][T22688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.477498][T22688] usb 1-1: Product: syz [ 2062.482681][T22688] usb 1-1: Manufacturer: syz [ 2062.504708][T22688] usb 1-1: SerialNumber: syz [ 2062.555593][T22688] usb 1-1: config 0 descriptor?? [ 2062.586615][T23134] usb 2-1: USB disconnect, device number 27 [ 2062.642609][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2062.678768][T29597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2062.693698][T29597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2062.767956][T28998] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2063.001445][T28998] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.015799][T28998] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2063.049531][T28998] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2063.067851][T28998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.138725][T28998] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2063.235287][T28998] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2063.283800][T22688] usb 1-1: USB disconnect, device number 98 [ 2065.275126][T28998] usb 5-1: USB disconnect, device number 15 [ 2065.304395][T29587] delete_channel: no stack [ 2066.195131][T29643] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5988'. [ 2066.234390][T29644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5991'. [ 2066.295128][T29636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5988'. [ 2066.309288][T29644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5991'. [ 2066.849353][T29651] misc userio: Invalid payload size [ 2067.446945][T22690] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2067.559781][T29658] input: syz1 as /devices/virtual/input/input116 [ 2067.696989][T22690] usb 1-1: Using ep0 maxpacket: 16 [ 2067.709295][T22690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.771966][T22690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2067.817877][T22690] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2067.837704][T22690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.908828][T22690] usb 1-1: config 0 descriptor?? [ 2068.353225][T29654] xt_TCPMSS: Only works on TCP SYN packets [ 2068.417377][T29654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.474547][T29654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2069.031275][T22690] usbhid 1-1:0.0: can't add hid device: -71 [ 2069.038063][T22690] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2069.060024][T22690] usb 1-1: USB disconnect, device number 99 [ 2069.249981][T29672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5998'. [ 2069.687017][T22690] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2069.864725][T22690] usb 5-1: Using ep0 maxpacket: 8 [ 2069.876270][T22688] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2069.901651][T22690] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2069.916031][T22690] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2069.936219][T22690] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2069.959664][T22690] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2069.976128][T22690] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2069.999301][T22690] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2070.027696][T22690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.061205][T22688] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.101030][T22688] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2070.122584][T22688] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2070.143078][T22688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.196917][T22688] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2070.374559][T22688] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2070.479797][T22690] usb 5-1: GET_CAPABILITIES returned 0 [ 2070.488654][T22690] usbtmc 5-1:16.0: can't read capabilities [ 2071.635677][T29692] tipc: Enabled bearer , priority 10 [ 2071.778555][T29694] netlink: 'syz.0.6003': attribute type 3 has an invalid length. [ 2071.856103][T29694] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6003'. [ 2071.890714][T29694] netlink: 988 bytes leftover after parsing attributes in process `syz.0.6003'. [ 2072.654240][T22690] usb 5-1: USB disconnect, device number 16 [ 2072.873657][T28998] usb 2-1: USB disconnect, device number 28 [ 2072.919703][T29679] delete_channel: no stack [ 2073.100397][T29712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6005'. [ 2073.302306][T29714] input: syz1 as /devices/virtual/input/input117 [ 2073.326205][T29716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6005'. [ 2073.596412][T29722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 2073.613484][T29717] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6008'. [ 2073.897713][T28998] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2074.017615][T23134] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2074.070585][T28998] usb 6-1: Using ep0 maxpacket: 32 [ 2074.078740][T28998] usb 6-1: config 0 has an invalid interface number: 19 but max is 0 [ 2074.087924][T28998] usb 6-1: config 0 has no interface number 0 [ 2074.094063][T28998] usb 6-1: config 0 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2074.108177][T28998] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 2074.123862][T28998] usb 6-1: config 0 interface 19 altsetting 0 has an endpoint descriptor with address 0x91, changing to 0x81 [ 2074.149838][T28998] usb 6-1: config 0 interface 19 altsetting 0 endpoint 0x81 has invalid maxpacket 34106, setting to 1024 [ 2074.165535][T28998] usb 6-1: config 0 interface 19 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 2074.188701][T28998] usb 6-1: config 0 interface 19 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2074.208540][T28998] usb 6-1: New USB device found, idVendor=04a4, idProduct=0014, bcdDevice=c9.57 [ 2074.218998][T28998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.234036][T28998] usb 6-1: Product: syz [ 2074.241599][T28998] usb 6-1: Manufacturer: syz [ 2074.248943][T28998] usb 6-1: SerialNumber: syz [ 2074.267939][T28998] usb 6-1: config 0 descriptor?? [ 2074.274321][T29717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2074.288679][T23134] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2074.304327][T23134] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2074.324855][T23134] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2074.335008][T23134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2074.349241][T23134] usb 1-1: SerialNumber: syz [ 2074.402927][T29717] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2074.429545][T28998] ipaq 6-1:0.19: PocketPC PDA converter detected [ 2074.436189][T28998] usb 6-1: active config #0 != 1 ?? [ 2074.747882][T29725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2074.788532][T29725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2074.801491][T29725] xt_TCPMSS: Only works on TCP SYN packets [ 2074.838826][T29725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2074.847851][T29725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.030059][T22688] usb 6-1: USB disconnect, device number 23 [ 2076.428615][T29743] usb usb8: usbfs: process 29743 (syz.5.6013) did not claim interface 0 before use [ 2076.688304][T23134] usb 1-1: 0:2 : does not exist [ 2076.693325][T23134] usb 1-1: unit 5: unexpected type 0x0e [ 2076.849297][T23134] usb 1-1: USB disconnect, device number 100 [ 2078.916995][T22688] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2079.079088][T22688] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2079.089937][T22688] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2079.106010][T22688] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2079.120326][T22688] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.142765][T29781] Invalid logical block size (7) [ 2079.203259][T22688] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2079.291646][T22688] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2080.098127][T29789] input: syz1 as /devices/virtual/input/input118 [ 2081.619596][T22688] usb 1-1: USB disconnect, device number 101 [ 2081.631232][T29772] delete_channel: no stack [ 2081.673596][T29807] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 2081.680261][T29807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2081.754392][T29813] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 2081.761055][T29813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2081.785246][T29820] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 2081.792168][T29820] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2081.814982][T29820] vhci_hcd vhci_hcd.0: Device attached [ 2081.826821][T29807] vhci_hcd vhci_hcd.0: Device attached [ 2081.880106][T29813] vhci_hcd vhci_hcd.0: Device attached [ 2081.894207][T29825] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 2081.901195][T29825] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2081.912681][T29807] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 2081.919315][T29807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2081.931367][T29807] vhci_hcd vhci_hcd.0: Device attached [ 2081.963851][T29813] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 2081.970507][T29813] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2081.983371][T29825] vhci_hcd vhci_hcd.0: Device attached [ 2082.007041][T29813] vhci_hcd vhci_hcd.0: Device attached [ 2082.036757][T22690] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 2082.050242][T29807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2082.070109][T29807] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2082.102304][T29807] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(26) [ 2082.108964][T29807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2082.141239][T29807] vhci_hcd vhci_hcd.0: Device attached [ 2082.148492][T29813] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2082.190786][T29841] vhci_hcd: connection closed [ 2082.192822][ T36] vhci_hcd vhci_hcd.1: stop threads [ 2082.203361][ T36] vhci_hcd vhci_hcd.1: release socket [ 2082.209075][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 2082.215541][T29834] vhci_hcd: connection closed [ 2082.215992][T29829] vhci_hcd: connection closed [ 2082.217525][ T36] vhci_hcd vhci_hcd.1: stop threads [ 2082.233012][T29826] vhci_hcd: connection closed [ 2082.233370][T29821] vhci_hcd: connection closed [ 2082.235132][ T36] vhci_hcd vhci_hcd.1: release socket [ 2082.240661][T29810] vhci_hcd: connection reset by peer [ 2082.246301][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 2082.260747][ T36] vhci_hcd vhci_hcd.1: stop threads [ 2082.266094][ T36] vhci_hcd vhci_hcd.1: release socket [ 2082.273394][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 2082.273877][T29815] vhci_hcd: connection closed [ 2082.279986][ T36] vhci_hcd vhci_hcd.1: stop threads [ 2082.294539][ T36] vhci_hcd vhci_hcd.1: release socket [ 2082.301559][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 2082.310879][ T36] vhci_hcd vhci_hcd.1: stop threads [ 2082.318939][ T36] vhci_hcd vhci_hcd.1: release socket [ 2082.324554][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 2082.334582][ T36] vhci_hcd vhci_hcd.1: stop threads [ 2082.340278][ T36] vhci_hcd vhci_hcd.1: release socket [ 2082.347977][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 2082.354119][ T36] vhci_hcd vhci_hcd.1: stop threads [ 2082.361752][ T36] vhci_hcd vhci_hcd.1: release socket [ 2082.368334][ T36] vhci_hcd vhci_hcd.1: disconnect device [ 2082.503525][T29848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6029'. [ 2082.757809][T28998] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2082.949430][T28998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2082.968910][T28998] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2082.988063][T28998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.009694][T28998] usb 1-1: config 0 descriptor?? [ 2083.387711][T22688] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2083.426534][T28998] usbhid 1-1:0.0: can't add hid device: -71 [ 2083.440719][T28998] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2083.553503][T28998] usb 1-1: USB disconnect, device number 102 [ 2083.566940][T22688] usb 2-1: Using ep0 maxpacket: 8 [ 2083.570394][T22688] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 2083.570450][T22688] usb 2-1: config 0 has no interface number 0 [ 2083.570503][T22688] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34 [ 2083.570522][T22688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.597547][T22688] usb 2-1: config 0 descriptor?? [ 2084.657557][T22688] snd-usb-audio 2-1:0.255: probe with driver snd-usb-audio failed with error -110 [ 2085.107734][T29887] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6038'. [ 2085.471302][T22688] usb 2-1: USB disconnect, device number 29 [ 2086.554187][T29903] misc userio: Invalid payload size [ 2087.116990][T22690] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2088.392322][T23134] usb usb36-port1: attempt power cycle [ 2088.584726][ T30] audit: type=1326 audit(1771025782.024:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29930 comm="syz.3.6048" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x0 [ 2088.970062][T23134] usb usb36-port1: unable to enumerate USB device [ 2090.260058][T29946] tap0: tun_chr_ioctl cmd 1074025677 [ 2090.270973][T29946] tap0: linktype set to 825 [ 2091.831336][T29963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2091.847213][T29963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2091.878005][T29963] xt_TCPMSS: Only works on TCP SYN packets [ 2091.887361][T29963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2091.899167][T29963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.501600][T29973] netlink: 'syz.1.6056': attribute type 21 has an invalid length. [ 2092.530361][T29973] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6056'. [ 2092.573101][T29973] netlink: 'syz.1.6056': attribute type 4 has an invalid length. [ 2092.597844][T29973] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6056'. [ 2093.119957][T22680] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2093.644343][T22680] usb 6-1: Using ep0 maxpacket: 8 [ 2093.763053][T22680] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2093.785548][T22680] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2093.819431][T22680] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2093.887957][T22680] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 2093.904830][T22680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.915891][T22680] usb 6-1: Product: syz [ 2093.921748][T22680] usb 6-1: Manufacturer: syz [ 2093.928151][T22680] usb 6-1: SerialNumber: syz [ 2094.065004][T29987] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2094.112940][T22680] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 2094.128882][T22680] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 2094.135242][T22680] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 2094.649696][T30000] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2096.194183][T22680] usb 6-1: USB disconnect, device number 24 [ 2096.292121][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6066'. [ 2096.352061][T30021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6065'. [ 2096.897199][T22687] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2097.066929][T22687] usb 2-1: Using ep0 maxpacket: 16 [ 2097.086597][T22687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.105204][T22687] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2097.123926][T22687] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2097.141201][T22687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.158068][T30034] input: syz1 as /devices/virtual/input/input121 [ 2097.167989][T22687] usb 2-1: config 0 descriptor?? [ 2097.682658][T30026] xt_TCPMSS: Only works on TCP SYN packets [ 2097.790466][T30026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2097.878093][T30026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2097.922236][T22687] zydacron 0003:13EC:0006.00A5: unknown main item tag 0x7 [ 2097.948994][T22687] zydacron 0003:13EC:0006.00A5: unknown main item tag 0x0 [ 2097.959931][T22687] zydacron 0003:13EC:0006.00A5: item fetching failed at offset 4/5 [ 2097.981090][T22687] zydacron 0003:13EC:0006.00A5: parse failed [ 2097.987903][T22687] zydacron 0003:13EC:0006.00A5: probe with driver zydacron failed with error -22 [ 2098.198186][T22687] usb 2-1: USB disconnect, device number 30 [ 2098.521116][T30042] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 2098.812251][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.819393][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.667459][T30060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6075'. [ 2099.771992][T30060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2099.783997][T30060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.663644][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6080'. [ 2103.301271][T30098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6084'. [ 2103.647139][T22680] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2103.805754][T22680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2103.828126][T22680] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 2103.858933][T22680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2103.923931][T22680] usb 6-1: config 0 descriptor?? [ 2104.271272][T30113] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6085'. [ 2104.370635][T30110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6085'. [ 2104.540582][T22680] usbhid 6-1:0.0: can't add hid device: -71 [ 2104.549472][T22680] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2104.611957][T22680] usb 6-1: USB disconnect, device number 25 [ 2104.717643][T23134] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2104.907855][T23134] usb 5-1: Using ep0 maxpacket: 8 [ 2104.999204][T23134] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 2105.018421][T23134] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2105.048316][T23134] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2105.069281][T23134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2105.079427][T23134] usb 5-1: Product: syz [ 2105.084714][T23134] usb 5-1: Manufacturer: syz [ 2105.095302][T23134] usb 5-1: SerialNumber: syz [ 2105.103763][T23134] usb 5-1: config 0 descriptor?? [ 2105.140063][T23134] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 2105.353709][T23134] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 2105.385742][T23134] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 2105.421855][T23134] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2107.774618][T30155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6095'. [ 2107.929280][T23134] usb 5-1: USB disconnect, device number 17 [ 2108.197525][T22680] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2108.218233][T30159] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2108.224809][T30159] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2108.258713][T30159] vhci_hcd vhci_hcd.0: Device attached [ 2108.423741][T22680] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2108.446287][T22680] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2108.490983][T22680] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2108.525818][T22680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2108.551605][T22680] usb 6-1: SerialNumber: syz [ 2108.709396][T30163] vhci_hcd: connection closed [ 2108.710359][ T6794] vhci_hcd vhci_hcd.3: stop threads [ 2108.733891][ T6794] vhci_hcd vhci_hcd.3: release socket [ 2108.746130][ T6794] vhci_hcd vhci_hcd.3: disconnect device [ 2110.457541][T30176] netlink: 71 bytes leftover after parsing attributes in process `syz.0.6098'. [ 2110.893839][T30184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6099'. [ 2111.208091][T22680] usb 6-1: 0:2 : does not exist [ 2111.213174][T22680] usb 6-1: unit 5: unexpected type 0x0e [ 2111.292892][T22680] usb 6-1: USB disconnect, device number 26 [ 2111.370560][T30100] udevd[30100]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2114.906450][T30230] dlm: non-version read from control device 8224 [ 2116.422620][T30249] futex_wake_op: syz.1.6111 tries to shift op by -1; fix this program [ 2119.362316][T30275] input: syz1 as /devices/virtual/input/input125 [ 2119.565399][T30287] tipc: Enabling of bearer rejected, failed to enable media [ 2120.868047][T30289] usb usb8: usbfs: process 30289 (syz.3.6118) did not claim interface 0 before use [ 2120.881367][T30289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6118'. [ 2120.949572][T30291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2120.988463][T30291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2121.002086][T30293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6119'. [ 2121.048665][T30289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6118'. [ 2121.184867][T30293] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6119'. [ 2121.269571][T30289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6118'. [ 2122.976925][T30322] vivid-007: disconnect [ 2123.209031][T30320] vivid-007: reconnect [ 2123.288974][T30329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6127'. [ 2124.778702][T30356] input: syz1 as /devices/virtual/input/input126 [ 2126.692991][T30374] F2FS-fs: Conflicting test_dummy_encryption options [ 2127.509515][T23134] hid-generic 0000:0000:0000.00A6: unknown main item tag 0x0 [ 2127.531958][T23134] hid-generic 0000:0000:0000.00A6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2128.423126][T30400] input: syz1 as /devices/virtual/input/input127 [ 2130.950233][T30426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6144'. [ 2131.097658][T30433] netlink: 'syz.1.6144': attribute type 10 has an invalid length. [ 2131.376950][T22687] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2131.442905][T30440] vivid-004: disconnect [ 2131.547180][T22687] usb 6-1: Using ep0 maxpacket: 16 [ 2131.569680][T22687] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 2131.581119][T22687] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2131.596267][T22687] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2131.644839][T22687] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2131.676460][T22687] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2131.696310][T22687] usb 6-1: config 0 has no interface number 0 [ 2131.703935][T22687] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2131.741476][T22687] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2131.787584][T22687] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2131.800991][T22687] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2131.814539][T22687] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2131.822188][T22687] usb 6-1: config 0 interface 125 has no altsetting 2 [ 2131.866393][T22687] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2131.883006][T22687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2131.917491][T22687] usb 6-1: Product: syz [ 2131.934124][T22687] usb 6-1: Manufacturer: syz [ 2131.941534][T22687] usb 6-1: SerialNumber: syz [ 2131.973895][T22687] usb 6-1: config 0 descriptor?? [ 2131.992938][T22687] usb 6-1: selecting invalid altsetting 2 [ 2132.433478][T30435] vivid-004: reconnect [ 2133.753485][T22687] usb 6-1: USB disconnect, device number 27 [ 2133.968002][T30460] netlink: 'syz.3.6152': attribute type 33 has an invalid length. [ 2133.975927][T30460] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6152'. [ 2134.135319][T30466] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2134.385564][T30478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6153'. [ 2134.458646][T30478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6153'. [ 2134.672148][T30484] netlink: 'syz.3.6154': attribute type 10 has an invalid length. [ 2134.697631][T30484] bond0: (slave netdevsim0): Releasing backup interface [ 2134.735664][T30484] team0: Port device netdevsim0 added [ 2134.750930][T30479] netlink: 'syz.3.6154': attribute type 10 has an invalid length. [ 2134.860282][T30479] team0: Port device netdevsim0 removed [ 2134.946950][T30479] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2135.619942][T30491] input: syz1 as /devices/virtual/input/input128 [ 2136.443383][T30497] input: syz1 as /devices/virtual/input/input129 [ 2138.282195][T30516] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2138.289318][T30516] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2138.304379][T30516] vhci_hcd vhci_hcd.0: Device attached [ 2138.537817][T23134] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 2138.831025][T30517] vhci_hcd: connection reset by peer [ 2138.838668][ T6808] vhci_hcd vhci_hcd.1: stop threads [ 2138.843933][ T6808] vhci_hcd vhci_hcd.1: release socket [ 2138.850810][ T6808] vhci_hcd vhci_hcd.1: disconnect device [ 2139.128311][T30542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6165'. [ 2139.213669][T30542] netlink: 'syz.3.6165': attribute type 10 has an invalid length. [ 2139.398934][T30542] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2140.403089][T22687] hid-generic 0000:0000:0000.00A7: unknown main item tag 0x0 [ 2140.464501][T22687] hid-generic 0000:0000:0000.00A7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2140.506935][T22690] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2140.683782][T22690] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.705516][T22690] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2140.758499][T22690] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2140.777776][T22690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2140.796427][T22690] usb 2-1: SerialNumber: syz [ 2141.478881][T30576] fuse: Bad value for 'fd' [ 2141.636431][ C0] hrtimer: interrupt took 48134 ns [ 2141.723357][T22690] usb 2-1: 0:2 : does not exist [ 2141.730018][T22690] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 2141.852379][T22690] usb 2-1: USB disconnect, device number 31 [ 2142.271708][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6173'. [ 2143.068180][T30600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6176'. [ 2143.100347][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6176'. [ 2143.768573][T23134] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 2144.146931][T13104] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2144.296892][T13104] usb 1-1: Using ep0 maxpacket: 16 [ 2144.314936][T13104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2144.327422][T13104] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2144.357985][T13104] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2144.371627][T13104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.425755][T13104] usb 1-1: config 0 descriptor?? [ 2144.587260][T22680] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2144.747970][T22680] usb 2-1: Using ep0 maxpacket: 16 [ 2144.755961][T22680] usb 2-1: config 0 has no interfaces? [ 2144.773463][T22680] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2144.792318][T22680] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2144.823196][T22680] usb 2-1: Manufacturer: syz [ 2144.854264][T22680] usb 2-1: config 0 descriptor?? [ 2144.946807][T30606] xt_TCPMSS: Only works on TCP SYN packets [ 2145.046750][T30623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2145.141764][T30623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2145.210475][T13104] zydacron 0003:13EC:0006.00A8: unknown main item tag 0x7 [ 2145.226519][T13104] zydacron 0003:13EC:0006.00A8: unknown main item tag 0x0 [ 2145.236349][T13104] zydacron 0003:13EC:0006.00A8: item fetching failed at offset 4/5 [ 2145.245529][T13104] zydacron 0003:13EC:0006.00A8: parse failed [ 2145.253033][T13104] zydacron 0003:13EC:0006.00A8: probe with driver zydacron failed with error -22 [ 2145.402693][T13104] usb 1-1: USB disconnect, device number 103 [ 2146.454718][T30637] ALSA: mixer_oss: invalid OSS volume '' [ 2146.467857][T22680] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2146.627846][T22680] usb 6-1: Using ep0 maxpacket: 16 [ 2146.636168][T22680] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.649175][T22680] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2146.682716][T22680] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2146.709892][T22680] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 2146.724868][T22680] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 2146.758854][T22680] usb 6-1: New USB device found, idVendor=0505, idProduct=a4a1, bcdDevice= 0.40 [ 2146.772695][T22680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2146.811729][T22680] usb 6-1: SerialNumber: syz [ 2146.834694][T30632] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2146.868167][T22680] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 2146.881181][T22680] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 2147.137266][T13104] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2147.146419][ C0] raw-gadget.3 gadget.0: ignoring, device is not running [ 2147.276907][T13104] usb 1-1: device descriptor read/64, error -32 [ 2147.346278][T22680] usb 2-1: USB disconnect, device number 32 [ 2147.539831][T13104] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2147.933991][T13104] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2147.955743][T13104] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2147.983680][T13104] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2148.029913][T13104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.097459][T30638] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 2148.210364][T13104] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2149.195728][T13104] usb 6-1: USB disconnect, device number 28 [ 2149.610334][T30662] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6190'. [ 2149.663634][T13104] usb 1-1: USB disconnect, device number 105 [ 2150.435519][T30676] input: syz1 as /devices/virtual/input/input130 [ 2151.063127][T30683] input: syz1 as /devices/virtual/input/input131 [ 2152.264114][T30700] input: syz1 as /devices/virtual/input/input132 [ 2152.667549][T22680] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2152.833270][T22680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.854373][T22680] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2152.874155][T13104] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2152.893611][T22680] usb 1-1: New USB device found, idVendor=0cf3, idProduct=0475, bcdDevice=1a.00 [ 2152.935543][T22680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.964521][T22680] usb 1-1: config 0 descriptor?? [ 2153.057094][T13104] usb 2-1: Using ep0 maxpacket: 16 [ 2153.066801][T13104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2153.078828][T13104] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.096922][T13104] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2153.107563][T13104] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.129003][T13104] usb 2-1: config 0 descriptor?? [ 2153.201408][T30695] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3394018074 (6788036148 ns) > initial count (6222627426 ns). Using initial count to start timer. [ 2153.403922][T22690] usb 1-1: USB disconnect, device number 106 [ 2153.542597][T30706] xt_TCPMSS: Only works on TCP SYN packets [ 2153.614436][T30715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2153.703473][T30715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2153.811985][T13104] zydacron 0003:13EC:0006.00A9: unknown main item tag 0x7 [ 2153.826842][T13104] zydacron 0003:13EC:0006.00A9: unknown main item tag 0x0 [ 2153.889358][T13104] zydacron 0003:13EC:0006.00A9: item fetching failed at offset 4/5 [ 2153.919648][T13104] zydacron 0003:13EC:0006.00A9: parse failed [ 2153.925762][T13104] zydacron 0003:13EC:0006.00A9: probe with driver zydacron failed with error -22 [ 2154.065176][T13104] usb 2-1: USB disconnect, device number 33 [ 2155.599885][T30741] netlink: 'syz.4.6205': attribute type 10 has an invalid length. [ 2155.692059][T30742] netlink: 'syz.4.6205': attribute type 10 has an invalid length. [ 2156.034669][T30746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6207'. [ 2156.072929][T30746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6207'. [ 2156.137744][T22680] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2156.209483][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6202'. [ 2156.359828][T22680] usb 6-1: Using ep0 maxpacket: 16 [ 2156.382544][T22680] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2156.395687][T22680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2156.411291][T22680] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2156.438386][T22680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.446509][T22680] usb 6-1: Product: syz [ 2156.451743][T22680] usb 6-1: Manufacturer: syz [ 2156.456370][T22680] usb 6-1: SerialNumber: syz [ 2156.471010][T22680] usb 6-1: config 0 descriptor?? [ 2156.493681][T22680] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2156.509668][T22680] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 2156.812148][T30757] input: syz1 as /devices/virtual/input/input133 [ 2157.142583][T22680] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2157.163001][T22680] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 2157.321145][T22680] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 2157.335086][T22680] em28xx 6-1:0.0: No AC97 audio processor [ 2157.388940][T22680] usb 6-1: USB disconnect, device number 29 [ 2157.402247][T22680] em28xx 6-1:0.0: Disconnecting em28xx [ 2157.436047][T22680] em28xx 6-1:0.0: Freeing device [ 2157.807696][T30769] input: syz1 as /devices/virtual/input/input134 [ 2158.278450][T30778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6213'. [ 2160.251754][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.259994][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.616972][T13104] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 2160.762269][T30799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.806330][T13104] usb 2-1: not running at top speed; connect to a high speed hub [ 2160.816264][T13104] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2160.848220][T30799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.856267][T13104] usb 2-1: config 1 has no interface number 1 [ 2160.880718][T13104] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2161.021157][T13104] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2161.035890][T13104] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.054271][T13104] usb 2-1: Product: syz [ 2161.058734][T13104] usb 2-1: Manufacturer: syz [ 2161.068686][T13104] usb 2-1: SerialNumber: syz [ 2161.488851][T13104] usb 2-1: failed to enable PITCH for EP 0x82 [ 2161.607825][T13104] usb 2-1: USB disconnect, device number 34 [ 2162.821826][T30820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6220'. [ 2162.849140][T30819] input: syz1 as /devices/virtual/input/input135 [ 2162.909640][T30821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6220'. [ 2163.165854][T30830] input: syz1 as /devices/virtual/input/input136 [ 2164.799606][T30847] kvm: user requested TSC rate below hardware speed [ 2164.827744][T30847] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2166.017905][T30857] input: syz1 as /devices/virtual/input/input137 [ 2166.415083][T30870] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2167.582087][T30892] input: syz1 as /devices/virtual/input/input138 [ 2167.912201][T30898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6233'. [ 2168.315891][T30895] vlan4: entered promiscuous mode [ 2168.494540][T30898] bridge_slave_1: left allmulticast mode [ 2168.510742][T30898] bridge_slave_1: left promiscuous mode [ 2168.528832][T30898] bridge0: port 2(bridge_slave_1) entered disabled state [ 2168.587909][T30898] bridge_slave_0: left allmulticast mode [ 2168.596450][T30898] bridge_slave_0: left promiscuous mode [ 2168.668079][T30898] bridge0: port 1(bridge_slave_0) entered disabled state [ 2168.862002][T30904] create_pit_timer: 3 callbacks suppressed [ 2168.862023][T30904] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2168.988706][ T30] audit: type=1326 audit(1771025862.454:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30901 comm="syz.3.6236" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703ef6c code=0x0 [ 2169.378909][T30898] vlan2 (unregistering): left promiscuous mode [ 2169.385529][T30898] bridge1: port 1(vlan2) entered disabled state [ 2170.227736][T30915] libceph: resolve '0..' (ret=-3): failed [ 2171.785716][T30943] input: syz1 as /devices/virtual/input/input139 [ 2172.724030][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6244'. [ 2173.417817][T22680] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2173.577816][T22680] usb 6-1: Using ep0 maxpacket: 16 [ 2173.585841][T22680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.599502][T22680] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2173.618185][T22680] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2173.638865][T22680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.661301][T22680] usb 6-1: config 0 descriptor?? [ 2174.084603][T30967] xt_TCPMSS: Only works on TCP SYN packets [ 2174.100490][T30967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.111390][T30967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.141609][T22680] zydacron 0003:13EC:0006.00AA: unknown main item tag 0x7 [ 2174.160176][T22680] zydacron 0003:13EC:0006.00AA: unknown main item tag 0x0 [ 2174.185444][T22680] zydacron 0003:13EC:0006.00AA: item fetching failed at offset 4/5 [ 2174.215573][T22680] zydacron 0003:13EC:0006.00AA: parse failed [ 2174.227827][T22680] zydacron 0003:13EC:0006.00AA: probe with driver zydacron failed with error -22 [ 2174.351471][T30644] usb 6-1: USB disconnect, device number 30 [ 2174.450796][T30982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6250'. [ 2174.515281][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6250'. [ 2175.141227][T30989] binder: 30984:30989 ioctl 4018620d 0 returned -22 [ 2175.247155][T30989] binder: BINDER_SET_CONTEXT_MGR already set [ 2175.255780][T30989] binder: 30984:30989 ioctl 4018620d 80000040 returned -16 [ 2175.297596][T30990] binder: 30984:30990 ioctl c0306201 0 returned -14 [ 2175.690214][T30995] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2176.444380][ T30] audit: type=1326 audit(1771025869.894:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.475391][ T30] audit: type=1326 audit(1771025869.904:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.511278][ T30] audit: type=1326 audit(1771025869.904:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.549162][ T30] audit: type=1326 audit(1771025869.904:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.583762][ T30] audit: type=1326 audit(1771025869.904:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.623344][T31014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.632886][ T30] audit: type=1326 audit(1771025869.904:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.659293][T31014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.707992][ T30] audit: type=1326 audit(1771025869.904:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.708047][ T30] audit: type=1326 audit(1771025869.904:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.708102][ T30] audit: type=1326 audit(1771025869.904:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.708135][ T30] audit: type=1326 audit(1771025869.904:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31005 comm="syz.3.6255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2176.969099][T31019] input: syz1 as /devices/virtual/input/input140 [ 2179.384386][T31048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.402469][T31048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2179.423255][T31048] xt_TCPMSS: Only works on TCP SYN packets [ 2179.439097][T31048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.460718][T31048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2180.923102][T31062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6275'. [ 2182.711867][T31087] input: syz1 as /devices/virtual/input/input141 [ 2183.652590][T31095] netlink: 5040 bytes leftover after parsing attributes in process `syz.3.6271'. [ 2183.742267][T31099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6272'. [ 2183.828057][T31099] netlink: 'syz.4.6272': attribute type 10 has an invalid length. [ 2184.225040][T31107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2184.239188][T31107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2184.250025][T31107] xt_TCPMSS: Only works on TCP SYN packets [ 2184.264562][T31107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2184.277442][T31107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2187.366831][T22690] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2187.499094][T30644] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2187.562417][T22690] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 2187.575030][T22690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.592288][T22690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.604157][T22690] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2187.618715][T22690] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2187.629136][T22690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.649174][T22690] usb 2-1: config 0 descriptor?? [ 2187.676948][T30644] usb 6-1: Using ep0 maxpacket: 16 [ 2187.688766][T30644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.700843][T30644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.714307][T30644] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2187.728505][T30644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.755101][T30644] usb 6-1: config 0 descriptor?? [ 2188.157761][T22690] plantronics 0003:047F:FFFF.00AB: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2188.186158][T31147] xt_TCPMSS: Only works on TCP SYN packets [ 2188.218493][T31147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2188.266749][T31147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2188.384158][T30644] zydacron 0003:13EC:0006.00AC: unknown main item tag 0x7 [ 2188.393212][T30644] zydacron 0003:13EC:0006.00AC: unknown main item tag 0x0 [ 2188.413343][T30644] zydacron 0003:13EC:0006.00AC: item fetching failed at offset 4/5 [ 2188.429730][T30644] zydacron 0003:13EC:0006.00AC: parse failed [ 2188.436077][T30644] zydacron 0003:13EC:0006.00AC: probe with driver zydacron failed with error -22 [ 2188.592363][T30644] usb 6-1: USB disconnect, device number 31 [ 2189.369533][T31172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6288'. [ 2189.568111][ C1] plantronics 0003:047F:FFFF.00AB: usb_submit_urb(ctrl) failed: -1 [ 2189.716864][T30644] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2189.757280][T23134] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2189.896799][T30644] usb 1-1: Using ep0 maxpacket: 16 [ 2189.904802][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2189.917572][T23134] usb 6-1: Using ep0 maxpacket: 16 [ 2189.930506][T23134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2189.945648][T23134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2189.945668][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2189.945744][T30644] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2190.014548][T23134] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2190.028480][T23134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.028498][T30644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.061043][T23134] usb 6-1: config 0 descriptor?? [ 2190.116194][T30644] usb 1-1: config 0 descriptor?? [ 2190.358132][T22690] usb 2-1: USB disconnect, device number 35 [ 2190.500363][T31178] xt_TCPMSS: Only works on TCP SYN packets [ 2190.520506][T31178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.651350][T31178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.667171][T31176] xt_TCPMSS: Only works on TCP SYN packets [ 2190.713281][T31179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.754768][T23134] zydacron 0003:13EC:0006.00AD: unknown main item tag 0x7 [ 2190.768134][T23134] zydacron 0003:13EC:0006.00AD: unknown main item tag 0x0 [ 2190.775469][T23134] zydacron 0003:13EC:0006.00AD: item fetching failed at offset 4/5 [ 2190.794894][T31179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.807727][T23134] zydacron 0003:13EC:0006.00AD: parse failed [ 2190.814320][T23134] zydacron 0003:13EC:0006.00AD: probe with driver zydacron failed with error -22 [ 2190.888284][T30644] zydacron 0003:13EC:0006.00AE: unknown main item tag 0x7 [ 2190.895505][T30644] zydacron 0003:13EC:0006.00AE: unknown main item tag 0x0 [ 2190.908536][T30644] zydacron 0003:13EC:0006.00AE: item fetching failed at offset 4/5 [ 2190.918263][T30644] zydacron 0003:13EC:0006.00AE: parse failed [ 2190.924367][T30644] zydacron 0003:13EC:0006.00AE: probe with driver zydacron failed with error -22 [ 2190.969040][T23134] usb 6-1: USB disconnect, device number 32 [ 2191.093877][T30644] usb 1-1: USB disconnect, device number 107 [ 2191.557076][T30642] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2191.752315][T30642] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2191.767635][T30642] usb 5-1: config 0 has no interface number 0 [ 2191.788005][T30642] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2191.804805][T30642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.822164][T30642] usb 5-1: Product: syz [ 2191.836651][T30642] usb 5-1: Manufacturer: syz [ 2191.843973][T30642] usb 5-1: SerialNumber: syz [ 2191.860123][T30642] usb 5-1: config 0 descriptor?? [ 2191.994466][T31205] binder: 31193:31205 ioctl 4018620d 0 returned -22 [ 2192.099764][T31192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2192.207910][T31192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2192.339963][T30642] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 2192.351867][T30642] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2192.376328][T30642] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 2192.399805][T30642] usb 5-1: media controller created [ 2192.441074][T30642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2192.583838][T30642] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 2193.078365][T31213] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 2193.414517][T31202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 2193.456280][T31202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 2193.499847][T31202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6294'. [ 2194.162512][T31226] pimreg3: entered allmulticast mode [ 2194.272525][T31232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6300'. [ 2194.295715][T30642] usb 5-1: USB disconnect, device number 18 [ 2194.625247][T31234] kvm: user requested TSC rate below hardware speed [ 2194.658121][T31234] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2194.715859][T31239] libceph: resolve '0..' (ret=-3): failed [ 2196.150149][T31248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6305'. [ 2196.171450][T31248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6305'. [ 2196.184265][T31248] netlink: 'syz.4.6305': attribute type 14 has an invalid length. [ 2196.237364][T31248] netlink: 'syz.4.6305': attribute type 13 has an invalid length. [ 2196.342902][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 2196.342916][ T30] audit: type=1326 audit(1771025889.804:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31247 comm="syz.4.6305" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706ef6c code=0x0 [ 2196.444071][T31253] delete_channel: no stack [ 2196.570046][T31255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.582211][T31255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.608031][T31255] xt_TCPMSS: Only works on TCP SYN packets [ 2196.630516][T31255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.644490][T31255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.880405][T31272] binder: 31266:31272 ioctl 4018620d 0 returned -22 [ 2198.566336][T31283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2198.587158][T31283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2200.122295][T31306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6317'. [ 2200.288472][T31292] pim6reg: entered allmulticast mode [ 2200.319397][T31292] pim6reg: left allmulticast mode [ 2201.777234][T30644] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2201.953891][T30644] usb 6-1: Using ep0 maxpacket: 16 [ 2201.961846][T30644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2201.976766][T30644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2201.998045][T30644] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2202.011632][T30644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2202.036455][T30644] usb 6-1: config 0 descriptor?? [ 2202.285261][T31322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6321'. [ 2202.467203][T31332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.483679][T31332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2202.512130][T31332] dvmrp1: left allmulticast mode [ 2202.581589][T31332] pimreg: left allmulticast mode [ 2202.629566][T31314] xt_TCPMSS: Only works on TCP SYN packets [ 2202.644014][T31314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2202.672237][T31314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.104790][T31333] loop8: detected capacity change from 0 to 7 [ 2203.148128][T31333] Dev loop8: unable to read RDB block 7 [ 2203.163024][T31333] loop8: AHDI p1 p2 p3 [ 2203.176713][T31333] loop8: partition table partially beyond EOD, truncated [ 2203.196920][T31333] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2203.321192][T31333] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2203.681898][T30811] Dev loop8: unable to read RDB block 7 [ 2203.694402][T30811] loop8: AHDI p1 p2 p3 [ 2203.704940][T30811] loop8: partition table partially beyond EOD, truncated [ 2203.744002][T30811] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2203.758713][T30811] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2203.853022][T30644] usbhid 6-1:0.0: can't add hid device: -71 [ 2203.884914][T30644] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2203.936910][T31338] Dev loop8: unable to read RDB block 7 [ 2203.966958][T30644] usb 6-1: USB disconnect, device number 33 [ 2203.973039][T31338] loop8: AHDI p1 p2 p3 [ 2203.989868][T31338] loop8: partition table partially beyond EOD, truncated [ 2204.072924][T31338] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2204.090475][T31338] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2204.716710][T30644] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2204.866838][T30644] usb 6-1: Using ep0 maxpacket: 16 [ 2204.874708][T30644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.886810][T30644] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.899949][T30644] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2204.913200][T30644] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.935668][T30644] usb 6-1: config 0 descriptor?? [ 2205.366744][T31340] xt_TCPMSS: Only works on TCP SYN packets [ 2205.391195][T31340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2205.413329][T31340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2205.435781][T30644] zydacron 0003:13EC:0006.00AF: unknown main item tag 0x7 [ 2205.450662][T30644] zydacron 0003:13EC:0006.00AF: unknown main item tag 0x0 [ 2205.459869][T30644] zydacron 0003:13EC:0006.00AF: item fetching failed at offset 4/5 [ 2205.470133][T30644] zydacron 0003:13EC:0006.00AF: parse failed [ 2205.478351][T30644] zydacron 0003:13EC:0006.00AF: probe with driver zydacron failed with error -22 [ 2205.706501][T30644] usb 6-1: USB disconnect, device number 34 [ 2206.136524][T31367] input: syz1 as /devices/virtual/input/input142 [ 2206.456856][T30642] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2206.607280][T30642] usb 5-1: Using ep0 maxpacket: 16 [ 2206.630846][T30642] usb 5-1: config 0 has no interfaces? [ 2206.647161][T30642] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2206.678985][T30642] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2206.698875][T30642] usb 5-1: Manufacturer: syz [ 2206.763214][T30642] usb 5-1: config 0 descriptor?? [ 2207.946229][T31385] netlink: 'syz.3.6333': attribute type 10 has an invalid length. [ 2208.108060][T31387] netlink: 'syz.3.6333': attribute type 10 has an invalid length. [ 2208.385548][T31385] bond0: (slave netdevsim0): Releasing backup interface [ 2208.486784][T30642] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2208.636849][T30642] usb 1-1: Using ep0 maxpacket: 16 [ 2208.646144][T30642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2208.667609][T30642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2208.698539][T30642] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2208.728420][T30642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.771474][T30642] usb 1-1: config 0 descriptor?? [ 2209.216262][T31389] xt_TCPMSS: Only works on TCP SYN packets [ 2209.274701][T31390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2209.313358][T31390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2209.427959][T30642] zydacron 0003:13EC:0006.00B0: unknown main item tag 0x7 [ 2209.435357][T30642] zydacron 0003:13EC:0006.00B0: unknown main item tag 0x0 [ 2209.443068][T30642] zydacron 0003:13EC:0006.00B0: item fetching failed at offset 4/5 [ 2209.457466][T30642] zydacron 0003:13EC:0006.00B0: parse failed [ 2209.464184][T30642] zydacron 0003:13EC:0006.00B0: probe with driver zydacron failed with error -22 [ 2209.881873][T30642] usb 5-1: USB disconnect, device number 19 [ 2210.148897][T31385] team0: Port device netdevsim0 added [ 2210.174731][T31387] team0: Port device netdevsim0 removed [ 2210.221931][T31387] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2210.263458][T30644] usb 1-1: USB disconnect, device number 108 [ 2210.427228][T30642] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2210.592018][T30642] usb 5-1: Using ep0 maxpacket: 8 [ 2210.606255][T30642] usb 5-1: config 5 has an invalid interface number: 141 but max is 0 [ 2210.615101][T30642] usb 5-1: config 5 has no interface number 0 [ 2210.621617][T30642] usb 5-1: config 5 interface 141 has no altsetting 0 [ 2210.633619][T30642] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=10.e1 [ 2210.643758][T30642] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.652578][T30642] usb 5-1: Product: syz [ 2210.658292][T30642] usb 5-1: Manufacturer: syz [ 2210.663131][T30642] usb 5-1: SerialNumber: syz [ 2210.789606][T31404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6338'. [ 2210.899673][T31392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6336'. [ 2210.924581][T31392] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2210.960249][T30642] as10x_usb: device has been detected [ 2210.978505][T30642] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 2211.016976][T30642] usb 5-1: DVB: registering adapter 2 frontend 0 (Abilis Systems DVB-Titan)... [ 2211.059197][T30642] as10x_usb: error during firmware upload part1 [ 2211.067252][T30642] Registered device Abilis Systems DVB-Titan [ 2211.071446][T30642] usb 5-1: USB disconnect, device number 20 [ 2211.155340][T30642] Unregistered device Abilis Systems DVB-Titan [ 2211.157517][T30642] as10x_usb: device has been disconnected [ 2212.513538][T31418] input: syz1 as /devices/virtual/input/input143 [ 2212.748307][T31424] netlink: 'syz.1.6342': attribute type 4 has an invalid length. [ 2212.756166][T31424] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6342'. [ 2213.504885][T31424] delete_channel: no stack [ 2214.000869][T31447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6347'. [ 2214.051663][T31447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6347'. [ 2214.278993][T30642] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2214.457889][T30642] usb 1-1: Using ep0 maxpacket: 32 [ 2214.467002][T30642] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 2214.476763][T30642] usb 1-1: config 0 has no interface number 0 [ 2214.490111][T30642] usb 1-1: config 0 interface 12 has no altsetting 0 [ 2214.511763][T30642] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2214.521753][T30642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.534615][T30642] usb 1-1: Product: syz [ 2214.551886][T30642] usb 1-1: Manufacturer: syz [ 2214.564259][T30642] usb 1-1: SerialNumber: syz [ 2214.583348][T30642] usb 1-1: config 0 descriptor?? [ 2215.433129][T30642] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2215.442180][T30642] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 2215.463434][T30642] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2215.474298][T30642] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 2215.493570][T30642] usb 1-1: USB disconnect, device number 109 [ 2215.717521][T23134] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2215.867277][T23134] usb 5-1: Using ep0 maxpacket: 16 [ 2215.875587][T23134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2215.888789][T23134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2215.900804][T23134] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2215.913439][T23134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2215.942854][T23134] usb 5-1: config 0 descriptor?? [ 2216.385315][T31449] xt_TCPMSS: Only works on TCP SYN packets [ 2216.413301][T31449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2216.443016][T31449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2216.461041][T30644] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2216.486133][T23134] zydacron 0003:13EC:0006.00B1: unknown main item tag 0x7 [ 2216.500060][T23134] zydacron 0003:13EC:0006.00B1: unknown main item tag 0x0 [ 2216.512127][T23134] zydacron 0003:13EC:0006.00B1: item fetching failed at offset 4/5 [ 2216.525950][T23134] zydacron 0003:13EC:0006.00B1: parse failed [ 2216.535948][T23134] zydacron 0003:13EC:0006.00B1: probe with driver zydacron failed with error -22 [ 2216.627537][T30644] usb 1-1: Using ep0 maxpacket: 16 [ 2216.639217][T30644] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2216.653622][T30644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.664048][T30644] usb 1-1: Product: syz [ 2216.674797][T30644] usb 1-1: Manufacturer: syz [ 2216.683320][T30644] usb 1-1: SerialNumber: syz [ 2216.691535][T30644] usb 1-1: config 0 descriptor?? [ 2216.741383][T23134] usb 5-1: USB disconnect, device number 21 [ 2217.145050][T30644] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2217.164591][T30644] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2217.179829][T30644] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2217.191064][T30644] usb 1-1: media controller created [ 2217.218545][T30644] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2217.354436][T31461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6352'. [ 2217.383110][T30644] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2217.391667][T30644] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2218.188325][T31479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.202177][T31479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2218.223664][T31479] xt_TCPMSS: Only works on TCP SYN packets [ 2218.231933][T31479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.254425][T31479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.415206][T23134] usb 1-1: USB disconnect, device number 110 [ 2219.435179][T23134] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2220.174573][T31509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6363'. [ 2220.232406][T31509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6363'. [ 2220.541112][T23134] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2220.939006][T23134] usb 2-1: config 0 has no interfaces? [ 2220.995867][T23134] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2221.015501][T23134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.026402][T23134] usb 2-1: Product: syz [ 2221.049904][T23134] usb 2-1: Manufacturer: syz [ 2221.055177][T23134] usb 2-1: SerialNumber: syz [ 2221.122537][T23134] usb 2-1: config 0 descriptor?? [ 2221.676499][T31510] pimreg: left allmulticast mode [ 2221.751856][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.758258][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.027582][T31505] loop8: detected capacity change from 0 to 7 [ 2222.051926][T31505] Dev loop8: unable to read RDB block 7 [ 2222.063710][T31505] loop8: AHDI p1 p2 p3 [ 2222.068740][T31505] loop8: partition table partially beyond EOD, truncated [ 2222.076372][T31505] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2222.095276][T31505] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2222.182737][T30812] Dev loop8: unable to read RDB block 7 [ 2222.197902][T30812] loop8: AHDI p1 p2 p3 [ 2222.202579][T30812] loop8: partition table partially beyond EOD, truncated [ 2222.210867][T30812] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2222.219258][T30812] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2222.231716][T31512] Dev loop8: unable to read RDB block 7 [ 2222.239604][T31512] loop8: AHDI p1 p2 p3 [ 2222.281177][T31512] loop8: partition table partially beyond EOD, truncated [ 2222.308937][T31512] loop8: p1 start 1601398130 is beyond EOD, truncated [ 2222.316543][T31512] loop8: p2 start 1702059890 is beyond EOD, truncated [ 2222.827217][T30644] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2222.986943][T30644] usb 1-1: Using ep0 maxpacket: 16 [ 2222.994329][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2223.006448][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2223.017851][T30644] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2223.029628][T30644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.069290][T30644] usb 1-1: config 0 descriptor?? [ 2223.498154][T31515] xt_TCPMSS: Only works on TCP SYN packets [ 2223.515823][T31515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2223.534402][T31515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2223.549836][T30644] zydacron 0003:13EC:0006.00B2: unknown main item tag 0x7 [ 2223.561811][T30644] zydacron 0003:13EC:0006.00B2: unknown main item tag 0x0 [ 2223.570306][T30644] zydacron 0003:13EC:0006.00B2: item fetching failed at offset 4/5 [ 2223.581094][T30644] zydacron 0003:13EC:0006.00B2: parse failed [ 2223.590756][T30644] zydacron 0003:13EC:0006.00B2: probe with driver zydacron failed with error -22 [ 2223.877913][T30644] usb 1-1: USB disconnect, device number 111 [ 2224.170403][T31520] pim6reg: entered allmulticast mode [ 2224.199719][T31520] pim6reg: left allmulticast mode [ 2225.560561][T30642] usb 2-1: USB disconnect, device number 36 [ 2225.616744][T30644] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2225.787265][T30644] usb 1-1: Using ep0 maxpacket: 16 [ 2225.798122][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2225.814790][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2225.827963][T30644] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2225.844689][T30644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2225.868928][T30644] usb 1-1: config 0 descriptor?? [ 2226.310008][T31533] xt_TCPMSS: Only works on TCP SYN packets [ 2226.381679][T31533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.485646][T31533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.639065][T30644] zydacron 0003:13EC:0006.00B3: unknown main item tag 0x7 [ 2226.658652][T30644] zydacron 0003:13EC:0006.00B3: unknown main item tag 0x0 [ 2226.686780][T30644] zydacron 0003:13EC:0006.00B3: item fetching failed at offset 4/5 [ 2226.727028][T30644] zydacron 0003:13EC:0006.00B3: parse failed [ 2226.734760][T30644] zydacron 0003:13EC:0006.00B3: probe with driver zydacron failed with error -22 [ 2226.838838][T23134] usb 1-1: USB disconnect, device number 112 [ 2227.306755][T31555] delete_channel: no stack [ 2227.399397][T31558] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2227.605230][ T30] audit: type=1326 audit(1771025921.064:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31548 comm="syz.5.6371" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705ef6c code=0x0 [ 2229.467886][T31574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6375'. [ 2229.684209][T31583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6377'. [ 2229.719599][T31583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6377'. [ 2231.747096][T30644] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2231.897964][T30644] usb 1-1: Using ep0 maxpacket: 16 [ 2231.905052][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2231.916756][T30644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2231.927794][T30644] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2231.937599][T30644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2231.953007][T30644] usb 1-1: config 0 descriptor?? [ 2231.984932][T31602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6381'. [ 2232.406081][T31593] xt_TCPMSS: Only works on TCP SYN packets [ 2232.448799][T31593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.482293][T31593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.527901][T30644] zydacron 0003:13EC:0006.00B4: unknown main item tag 0x7 [ 2232.536167][T30644] zydacron 0003:13EC:0006.00B4: unknown main item tag 0x0 [ 2232.555652][T30644] zydacron 0003:13EC:0006.00B4: item fetching failed at offset 4/5 [ 2232.614434][T30644] zydacron 0003:13EC:0006.00B4: parse failed [ 2232.633774][T30644] zydacron 0003:13EC:0006.00B4: probe with driver zydacron failed with error -22 [ 2232.732282][T23134] usb 1-1: USB disconnect, device number 113 [ 2234.823454][T31637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6387'. [ 2234.885168][T31636] input: syz1 as /devices/virtual/input/input144 [ 2235.120263][T31634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6388'. [ 2235.508501][T31646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6390'. [ 2235.598895][T31646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6390'. [ 2236.809061][T31661] input: syz1 as /devices/virtual/input/input145 [ 2236.892852][T31663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6393'. [ 2236.961268][T31667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2236.973088][T31667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2237.940005][T31675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6394'. [ 2238.067195][T31675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6394'. [ 2239.296342][T31680] sit3: entered allmulticast mode [ 2239.594634][T31685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6396'. [ 2241.531128][T31702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6399'. [ 2241.994550][T31709] netlink: 'syz.0.6400': attribute type 2 has an invalid length. [ 2242.108435][T31717] netlink: 'syz.0.6400': attribute type 2 has an invalid length. [ 2242.159546][T31709] !: entered promiscuous mode [ 2242.239617][T31717] !: left promiscuous mode [ 2242.382484][T31720] input: syz1 as /devices/virtual/input/input146 [ 2242.537495][T22690] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2242.700720][T22690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2242.714428][T22690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2242.735239][T22690] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2242.751670][T22690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.776459][T22690] usb 2-1: config 0 descriptor?? [ 2243.233459][T22690] steelseries 0003:1038:12B6.00B5: unknown main item tag 0x0 [ 2243.255423][T22690] steelseries 0003:1038:12B6.00B5: unknown main item tag 0x0 [ 2243.289441][T22690] steelseries 0003:1038:12B6.00B5: unknown main item tag 0x6 [ 2243.307014][T22690] steelseries 0003:1038:12B6.00B5: item fetching failed at offset 4/7 [ 2243.331795][T22690] steelseries 0003:1038:12B6.00B5: probe with driver steelseries failed with error -22 [ 2243.578431][T31719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6403'. [ 2243.713888][T23134] usb 2-1: USB disconnect, device number 37 [ 2244.490559][T31733] input: syz1 as /devices/virtual/input/input147 [ 2244.980003][T31750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6409'. [ 2246.417865][T23134] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 2246.643095][T23134] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2246.659721][T23134] usb 6-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 2246.743954][T23134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2246.760900][T23134] usb 6-1: config 0 descriptor?? [ 2246.878773][T31765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6412'. [ 2246.894267][T31765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6412'. [ 2247.482306][T31766] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 2250.478422][T31789] ip6tnl0: Caught tx_queue_len zero misconfig [ 2250.681786][T23134] usbhid 6-1:0.0: can't add hid device: -71 [ 2250.691480][T23134] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2250.731379][T23134] usb 6-1: USB disconnect, device number 35 [ 2251.629638][T31798] netlink: 'syz.5.6418': attribute type 4 has an invalid length. [ 2251.756823][T31801] delete_channel: no stack [ 2251.782813][T31798] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6418'. [ 2251.844241][T31796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6417'. [ 2251.859306][T31796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6417'. [ 2251.875001][T31796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6417'. [ 2252.127668][T31803] input: syz1 as /devices/virtual/input/input148 [ 2252.420299][ T31] INFO: task kworker/0:10:22688 blocked for more than 143 seconds. [ 2252.431414][ T31] Tainted: G L syzkaller #0 [ 2252.476178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2252.498405][ T31] task:kworker/0:10 state:D stack:19776 pid:22688 tgid:22688 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2252.531963][ T31] Workqueue: usb_hub_wq hub_event [ 2252.538651][ T31] Call Trace: [ 2252.554383][ T31] [ 2252.562458][ T31] __schedule+0x157c/0x52b0 [ 2252.573054][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 2252.582230][ T31] ? __pfx___schedule+0x10/0x10 [ 2252.595827][ T31] ? schedule+0x90/0x360 [ 2252.601145][ T31] schedule+0x164/0x360 [ 2252.610982][ T31] schedule_preempt_disabled+0x13/0x30 [ 2252.620485][ T31] __mutex_lock+0x7fe/0x1300 [ 2252.627553][ T31] ? __mutex_lock+0x5ac/0x1300 [ 2252.635672][ T31] ? hub_event+0x21a2/0x4f30 [ 2252.650462][ T30] audit: type=1326 audit(1771025946.114:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2252.650476][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2252.706427][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2252.713726][ T30] audit: type=1326 audit(1771025946.144:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2252.737986][ T30] audit: type=1326 audit(1771025946.144:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2252.766347][ T31] hub_event+0x21a2/0x4f30 [ 2252.772099][ T31] ? __pfx_hub_event+0x10/0x10 [ 2252.784076][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2252.793885][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2252.806713][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 2252.816265][ T31] process_scheduled_works+0xaec/0x17a0 [ 2252.826770][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2252.835391][ T31] ? assign_work+0x3d5/0x5e0 [ 2252.842540][ T31] worker_thread+0xa50/0xfc0 [ 2252.853408][ T31] kthread+0x388/0x470 [ 2252.862341][T31813] input: syz1 as /devices/virtual/input/input149 [ 2252.876185][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2252.886699][ T31] ? __pfx_kthread+0x10/0x10 [ 2252.894904][ T31] ret_from_fork+0x51e/0xb90 [ 2252.906498][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2252.919236][ T30] audit: type=1326 audit(1771025946.144:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2252.943110][ T31] ? __switch_to+0xc7d/0x1400 [ 2252.948732][ T31] ? __pfx_kthread+0x10/0x10 [ 2252.953538][ T31] ret_from_fork_asm+0x1a/0x30 [ 2252.969425][ T31] [ 2252.980147][ T31] [ 2252.980147][ T31] Showing all locks held in the system: [ 2252.998009][ T30] audit: type=1326 audit(1771025946.144:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2253.031823][ T31] 2 locks held by ksoftirqd/1/23: [ 2253.039550][ T31] 1 lock held by khungtaskd/31: [ 2253.055959][ T31] #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2253.072120][ T31] 1 lock held by khugepaged/38: [ 2253.085521][ T31] 1 lock held by acpid/5174: [ 2253.105006][ T31] #0: ffffffff8e764678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 2253.133075][ T31] 2 locks held by getty/5578: [ 2253.133076][ T30] audit: type=1326 audit(1771025946.144:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2253.133176][ T30] audit: type=1326 audit(1771025946.144:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2253.145524][ T31] #0: [ 2253.223611][ T30] audit: type=1326 audit(1771025946.144:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2253.259844][ T30] audit: type=1326 audit(1771025946.144:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2253.304975][ T31] ffff888034f9b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2253.320058][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 2253.342568][ T30] audit: type=1326 audit(1771025946.144:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31807 comm="syz.3.6421" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 2253.365146][ T31] 5 locks held by kworker/0:10/22688: [ 2253.365168][ T31] #0: ffff888021a82148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2253.365239][ T31] #1: ffffc90003a1fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2253.365299][ T31] #2: ffff88802ad54198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2253.365363][ T31] #3: ffff88802ad21518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2253.365453][ T31] #4: ffff888029688c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2253.365520][ T31] 5 locks held by kworker/1:0/28725: [ 2253.365533][ T31] #0: ffff888021a82148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 2253.365591][ T31] #1: ffffc9000ba5fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 2253.365682][ T31] #2: ffff88802ad3a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 2253.365744][ T31] #3: ffff88802acf7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 2253.365806][ T31] #4: ffff888029688c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 2253.365872][ T31] 1 lock held by syz.5.6418/31797: [ 2253.365887][ T31] 2 locks held by syz.0.6419/31803: [ 2253.365900][ T31] 2 locks held by syz.3.6421/31817: [ 2253.365913][ T31] 2 locks held by syz.4.6420/31813: [ 2253.365927][ T31] #0: ffff88807c5c0870 (&newdev->mutex){+.+.}-{4:4}, at: uinput_ioctl_handler+0xf2/0x14a0 [ 2253.571708][ T31] #1: ffffffff8f635688 (input_mutex){+.+.}-{4:4}, at: input_register_device+0xa76/0x1160 [ 2253.587447][ T31] [ 2253.590569][ T31] ============================================= [ 2253.590569][ T31] [ 2253.600686][ T31] NMI backtrace for cpu 0 [ 2253.600711][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2253.600739][ T31] Tainted: [L]=SOFTLOCKUP [ 2253.600747][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2253.600760][ T31] Call Trace: [ 2253.600769][ T31] [ 2253.600778][ T31] dump_stack_lvl+0xe8/0x150 [ 2253.600814][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 2253.600932][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2253.600959][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2253.600993][ T31] sys_info+0x135/0x170 [ 2253.601048][ T31] watchdog+0xf90/0xfe0 [ 2253.601082][ T31] ? watchdog+0x209/0xfe0 [ 2253.601116][ T31] kthread+0x388/0x470 [ 2253.601146][ T31] ? __pfx_watchdog+0x10/0x10 [ 2253.601170][ T31] ? __pfx_kthread+0x10/0x10 [ 2253.601201][ T31] ret_from_fork+0x51e/0xb90 [ 2253.601229][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2253.601252][ T31] ? __switch_to+0xc7d/0x1400 [ 2253.601282][ T31] ? __pfx_kthread+0x10/0x10 [ 2253.601312][ T31] ret_from_fork_asm+0x1a/0x30 [ 2253.601358][ T31] [ 2253.601408][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2253.719758][ C1] NMI backtrace for cpu 1 [ 2253.719779][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2253.719803][ C1] Tainted: [L]=SOFTLOCKUP [ 2253.719809][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2253.719821][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2253.719855][ C1] Code: 34 7a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 88 29 00 fb f4 bc e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 2253.719870][ C1] RSP: 0000:ffffc90000197e20 EFLAGS: 00000242 [ 2253.719886][ C1] RAX: 0000000003008b97 RBX: ffffffff819970ed RCX: 0000000080000001 [ 2253.719899][ C1] RDX: 0000000000000001 RSI: ffffffff8deecd91 RDI: ffffffff8c279900 [ 2253.719912][ C1] RBP: ffffc90000197f10 R08: ffff8880b873375b R09: 1ffff110170e66eb [ 2253.719925][ C1] R10: dffffc0000000000 R11: ffffed10170e66ec R12: ffffffff9010fb70 [ 2253.719938][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 0000000000000001 [ 2253.719950][ C1] FS: 0000000000000000(0000) GS:ffff8881255a0000(0000) knlGS:0000000000000000 [ 2253.719964][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2253.719976][ C1] CR2: 0000000080096018 CR3: 0000000073244000 CR4: 00000000003526f0 [ 2253.719991][ C1] Call Trace: [ 2253.720000][ C1] [ 2253.720006][ C1] default_idle+0x9/0x20 [ 2253.720029][ C1] default_idle_call+0x72/0xb0 [ 2253.720053][ C1] do_idle+0x1bd/0x500 [ 2253.720075][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 2253.720097][ C1] ? __pfx_do_idle+0x10/0x10 [ 2253.720121][ C1] cpu_startup_entry+0x43/0x60 [ 2253.720141][ C1] start_secondary+0x101/0x110 [ 2253.720160][ C1] common_startup_64+0x13e/0x147 [ 2253.720193][ C1] [ 2253.899037][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2253.905954][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2253.916979][ T31] Tainted: [L]=SOFTLOCKUP [ 2253.921331][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2253.931444][ T31] Call Trace: [ 2253.934755][ T31] [ 2253.937722][ T31] vpanic+0x56c/0xa60 [ 2253.941754][ T31] ? __pfx___schedule+0x10/0x10 [ 2253.946656][ T31] ? __pfx_vpanic+0x10/0x10 [ 2253.951196][ T31] ? __pfx_console_unlock+0x10/0x10 [ 2253.956439][ T31] panic+0xc5/0xd0 [ 2253.960207][ T31] ? __pfx_panic+0x10/0x10 [ 2253.964650][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2253.970039][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 2253.976232][ T31] watchdog+0xfda/0xfe0 [ 2253.980412][ T31] ? watchdog+0x209/0xfe0 [ 2253.984763][ T31] kthread+0x388/0x470 [ 2253.988872][ T31] ? __pfx_watchdog+0x10/0x10 [ 2253.993581][ T31] ? __pfx_kthread+0x10/0x10 [ 2253.998208][ T31] ret_from_fork+0x51e/0xb90 [ 2254.002952][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2254.008169][ T31] ? __switch_to+0xc7d/0x1400 [ 2254.012906][ T31] ? __pfx_kthread+0x10/0x10 [ 2254.017537][ T31] ret_from_fork_asm+0x1a/0x30 [ 2254.022533][ T31] [ 2254.026159][ T31] Kernel Offset: disabled [ 2254.030770][ T31] Rebooting in 86400 seconds..