last executing test programs: 36.689593728s ago: executing program 4 (id=8057): r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r3}) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1d, "eb6b1108de23112607474e7dcd00c3c3b426ced4470b1572c2cb10dd9a"}, {@device_b, @broadcast}, {@broadcast, @broadcast}, {@device_a, @device_b, 0xa2, "443bd46e284476c5a5ae1595e64735f60fd7356f4e9ee8ee0fdeb3b6f703ef884fd6969311a5dbc0998bcc62242d0d91e0e87e18198cf09277d0bcc200b7ddca1ae54e0c3f4c84bcecef4d1bece0fc135991343766242b7e9e0edee2d66df3deb4f83c6c3bb37811d316c10c9ae55c086d90221704c93c0c8dca8ac2772051ec91e1efc82b2eaf7c96f6643fe53b0177586c15b8d53004a8d6dc0146631299408c3b"}, {@broadcast, @device_a, 0x9b, "1388c0e2ef1d5f21328c8fc90173dfbb2454e8e9c28efa323511234dd185ac42b817f2adf00012b276f962f0edbc02df9c25086d7156a8a1b925fc7b2eabfbfa43277e767654d3c4d2651707092a73912c9ca16c94142622a16a651a85d2ba3ed5e8d767b9b81937869f053e215c3dc410707ee5e9a41c1a447307075cb29fe73e49a662a6de6c250ac57a36d8a6168ee44201738900c0248352f9"}, {@device_b, @device_a, 0x2c, "c31e2fb1c19dd0499a27042c516771f13083a5f92ca6beaa79857394e1cdfcf959404f9c62f5b37122700b42"}]}, 0x200) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 35.050225186s ago: executing program 4 (id=8067): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x8000, 0x3, 0x4, 0xfffbffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, 0x0) ptrace$cont(0x1f, 0x0, 0x100, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) unshare(0x2a060c00) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 33.104277089s ago: executing program 4 (id=8080): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = creat(0x0, 0xc2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r5, &(0x7f0000000200), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r3, 0x2, '\x00', 0x0, r4, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 29.81473526s ago: executing program 4 (id=8085): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000600)={0x2, 0x0, 0x47d1, 0x4}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r5, 0xffffffff}}, 0x48) 29.612477094s ago: executing program 32 (id=8085): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) socket(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000600)={0x2, 0x0, 0x47d1, 0x4}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x4e20, 0x7, @mcast2}, r5, 0xffffffff}}, 0x48) 11.336366885s ago: executing program 1 (id=8121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x13, 0x0}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r4 = syz_open_dev$dri(0x0, 0x7, 0x220042) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x400) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc5763cc2da2151eb0ac6a937560b54dd5dc11b4e65a4bdf04414605200a", 0xe9}, {&(0x7f0000000700)="2f34cd6d8761518fc37786de0792c4ccf8adc46f7498733cf2e70c1d23e3f03a0b70e587a6207c4293ecf03d5637e5059ca92df6b0f4627881ab21645a8237b01ac953a0810f5cd720a08bb356f7030db22777a29e201d", 0xff95}], 0x2, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r9, r8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000440)={0x5, r9, r8}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) 10.170194546s ago: executing program 2 (id=8124): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x862}) r2 = socket$inet6(0x2d, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x8080, &(0x7f0000000100)={0x2d, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x400) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000140)={0x1, 0x0, [{0xb55cbc099b415d1, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x8000}, {r1, 0x1029}, {r2}, {r3, 0x400}, {r4, 0x40}, {r5, 0x6}, {r6, 0x100}], 0x7, &(0x7f0000000140)={r7, r8+10000000}, &(0x7f0000000180)={[0x80000000, 0x10]}, 0x8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace(0x10, r9) ptrace$PTRACE_GETSIGMASK(0x420a, r9, 0x0, 0x0) r10 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r10, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 10.151574126s ago: executing program 0 (id=8125): pselect6(0x40, &(0x7f0000000000)={0x0, 0xffffffffffffffdc, 0x8000000000000000, 0x10001, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 184'], 0x2d, 0xfffffffffffffff9) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) syz_emit_ethernet(0x16, &(0x7f0000000940)={@broadcast, @empty, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\x00', "fd27a7", 0xf8}}}}}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000340)=ANY=[@ANYBLOB="03f3b00000000000"], 0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0}}, './file0\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @multicast2}, {0x4, 0xe26, @private=0xa010102}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x2d8, 0x0, 0x0, 0xfdffffffffffffff, 0xfffc, 0x0, 0x71cf0b8c, 0x200, 0x7}) r5 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc2c45512, &(0x7f00000003c0)={{0x9, 0x1, 0x4, 0x6, 'syz0\x00', 0x63}, 0x0, [0xfffffd5f, 0x2, 0x5, 0x687, 0x74859516, 0x6, 0x40000002, 0x4, 0x2, 0x2, 0x8000, 0xc59, 0x4a13, 0xa, 0x6, 0x8, 0xfffffff8, 0xfffffff8, 0x10, 0xc, 0x7ff, 0x9, 0x10, 0x7, 0x10000, 0xacb, 0x10000, 0x3, 0x81, 0xfffffffe, 0x3, 0x5, 0x15, 0x1, 0x10000, 0x2, 0x6, 0x4, 0x8, 0x7, 0xfffffff7, 0x401, 0x1, 0x1, 0x5, 0x1, 0x1, 0xffffff95, 0x1, 0x5354fdb3, 0x6, 0x9, 0xcd, 0xb, 0x2, 0xfff, 0x2, 0x6, 0x800, 0x3, 0x80000000, 0x8, 0xa, 0x7, 0x4, 0x5, 0xc, 0x6, 0x1ff, 0x3, 0x7, 0x101, 0x6, 0x2020000, 0x2, 0x1, 0x9, 0x3, 0x4, 0x800, 0x800004, 0x3ff, 0x0, 0x275, 0x2, 0x4, 0x9, 0x0, 0x2, 0x3ff, 0x81, 0x8, 0x8, 0x893a, 0x3, 0x800, 0xf38f, 0xd926, 0x2, 0x1, 0x80000002, 0x3, 0x9, 0x3, 0x3, 0x4, 0x6, 0x10000, 0x8, 0x32284b62, 0x5, 0x48f, 0xdd00, 0xb, 0xfffff801, 0x7bd6, 0x7, 0xfffffbff, 0x6, 0x2, 0x10000, 0x1, 0x1, 0x549ac63b, 0x1, 0x4, 0x8001, 0x2]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000006c0)='id_legacy\x00', &(0x7f0000000300)) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800) keyctl$dh_compute(0x17, &(0x7f0000000d40), 0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e00)={'sha3-224-ce\x00'}}) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000140)) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in=@multicast2, 0x4e22, 0x5, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x1, 0x0, r4}, {0x0, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x4, 0x6}, {0xfffffffffffffff2, 0x101, 0x98d}, 0x7, 0x6e6bb1, 0x0, 0x0, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4d5, 0x32}, 0xa, @in=@loopback, 0x0, 0x0, 0x2, 0x2, 0x21c, 0xb, 0x16beb72f}}, 0xe4) 9.855593837s ago: executing program 3 (id=8126): r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r4}) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1d, "eb6b1108de23112607474e7dcd00c3c3b426ced4470b1572c2cb10dd9a"}, {@device_b, @broadcast}, {@broadcast, @broadcast}, {@device_a, @device_b, 0xa2, "443bd46e284476c5a5ae1595e64735f60fd7356f4e9ee8ee0fdeb3b6f703ef884fd6969311a5dbc0998bcc62242d0d91e0e87e18198cf09277d0bcc200b7ddca1ae54e0c3f4c84bcecef4d1bece0fc135991343766242b7e9e0edee2d66df3deb4f83c6c3bb37811d316c10c9ae55c086d90221704c93c0c8dca8ac2772051ec91e1efc82b2eaf7c96f6643fe53b0177586c15b8d53004a8d6dc0146631299408c3b"}, {@broadcast, @device_a, 0x9b, "1388c0e2ef1d5f21328c8fc90173dfbb2454e8e9c28efa323511234dd185ac42b817f2adf00012b276f962f0edbc02df9c25086d7156a8a1b925fc7b2eabfbfa43277e767654d3c4d2651707092a73912c9ca16c94142622a16a651a85d2ba3ed5e8d767b9b81937869f053e215c3dc410707ee5e9a41c1a447307075cb29fe73e49a662a6de6c250ac57a36d8a6168ee44201738900c0248352f9"}, {@device_b, @device_a, 0x2c, "c31e2fb1c19dd0499a27042c516771f13083a5f92ca6beaa79857394e1cdfcf959404f9c62f5b37122700b42"}]}, 0x200) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 9.811050485s ago: executing program 1 (id=8127): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) tgkill(r2, r2, 0x2c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x0, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = syz_io_uring_setup(0x4338, &(0x7f0000000000)={0x0, 0x50bf, 0x2000, 0x0, 0x50}, &(0x7f0000000080), &(0x7f00000000c0)) r5 = io_uring_setup(0x4283, &(0x7f0000000180)={0x0, 0xc17b, 0x20, 0x6, 0x3a7, 0x0, r4}) close_range(r5, 0xffffffffffffffff, 0x0) unshare(0x22020600) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) unshare(0x60000800) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0x5) wait4(0x0, 0x0, 0x2, 0x0) 9.168218975s ago: executing program 0 (id=8128): socket$inet_udplite(0x2, 0x2, 0x88) r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r3}) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1d, "eb6b1108de23112607474e7dcd00c3c3b426ced4470b1572c2cb10dd9a"}, {@device_b, @broadcast}, {@broadcast, @broadcast}, {@device_a, @device_b, 0xa2, "443bd46e284476c5a5ae1595e64735f60fd7356f4e9ee8ee0fdeb3b6f703ef884fd6969311a5dbc0998bcc62242d0d91e0e87e18198cf09277d0bcc200b7ddca1ae54e0c3f4c84bcecef4d1bece0fc135991343766242b7e9e0edee2d66df3deb4f83c6c3bb37811d316c10c9ae55c086d90221704c93c0c8dca8ac2772051ec91e1efc82b2eaf7c96f6643fe53b0177586c15b8d53004a8d6dc0146631299408c3b"}, {@broadcast, @device_a, 0x9b, "1388c0e2ef1d5f21328c8fc90173dfbb2454e8e9c28efa323511234dd185ac42b817f2adf00012b276f962f0edbc02df9c25086d7156a8a1b925fc7b2eabfbfa43277e767654d3c4d2651707092a73912c9ca16c94142622a16a651a85d2ba3ed5e8d767b9b81937869f053e215c3dc410707ee5e9a41c1a447307075cb29fe73e49a662a6de6c250ac57a36d8a6168ee44201738900c0248352f9"}, {@device_b, @device_a, 0x2c, "c31e2fb1c19dd0499a27042c516771f13083a5f92ca6beaa79857394e1cdfcf959404f9c62f5b37122700b42"}]}, 0x200) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 8.238483915s ago: executing program 1 (id=8129): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x140, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x6}}]}, 0x140}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r7, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 7.980183456s ago: executing program 2 (id=8130): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x10}]}}}]}, 0x4c}}, 0x0) 7.699080888s ago: executing program 3 (id=8132): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x1, 0x800, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x3ffdcf, 0x7ff, 0x0, 0x1}, 0x48) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x0) 7.432253969s ago: executing program 0 (id=8133): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x2, 0x0}, 0x4c) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080), 0x8) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="de", 0x1, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x400c5870, &(0x7f0000000180)={0x764, 0x7fffffff}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'virt_wifi0\x00', {0x3}, 0x5}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x200, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) read$alg(0xffffffffffffffff, &(0x7f00000000c0)=""/174, 0xae) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f00000000c0)=0x8e, 0x180000504) 6.363838814s ago: executing program 5 (id=8134): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc01c586a, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x0, &(0x7f0000000680)={@align=0x9, {0xf8, 0x0, 0x1, 0xfffffffffffffffc}}, 0x2, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x7ff}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r3, &(0x7f0000000000)=ANY=[], 0x4000) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000017c0)={0x9, 0x3, 0x49, 0x1d, 0x4, 0x5, 0x7, 0x4, 0x1, 0x6, 0x7, 0x2, 0x7, 0x7f}, 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x24, r1, 0xe7816804f9787cab, 0x70b52a, 0x25dfdc03, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1f1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084) socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'}) socket$nl_route(0x10, 0x3, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x4, 0x0, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000080), 0xffffffc0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x12, 0x4) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0x2c}], 0x1}, 0x0) 5.485567562s ago: executing program 1 (id=8135): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000006c0)={0xb, 0x1, 0x2, 0x0, 0xf}) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x6, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1) 5.303721478s ago: executing program 5 (id=8136): r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r4}) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1d, "eb6b1108de23112607474e7dcd00c3c3b426ced4470b1572c2cb10dd9a"}, {@device_b, @broadcast}, {@broadcast, @broadcast}, {@device_a, @device_b, 0xa2, "443bd46e284476c5a5ae1595e64735f60fd7356f4e9ee8ee0fdeb3b6f703ef884fd6969311a5dbc0998bcc62242d0d91e0e87e18198cf09277d0bcc200b7ddca1ae54e0c3f4c84bcecef4d1bece0fc135991343766242b7e9e0edee2d66df3deb4f83c6c3bb37811d316c10c9ae55c086d90221704c93c0c8dca8ac2772051ec91e1efc82b2eaf7c96f6643fe53b0177586c15b8d53004a8d6dc0146631299408c3b"}, {@broadcast, @device_a, 0x9b, "1388c0e2ef1d5f21328c8fc90173dfbb2454e8e9c28efa323511234dd185ac42b817f2adf00012b276f962f0edbc02df9c25086d7156a8a1b925fc7b2eabfbfa43277e767654d3c4d2651707092a73912c9ca16c94142622a16a651a85d2ba3ed5e8d767b9b81937869f053e215c3dc410707ee5e9a41c1a447307075cb29fe73e49a662a6de6c250ac57a36d8a6168ee44201738900c0248352f9"}, {@device_b, @device_a, 0x2c, "c31e2fb1c19dd0499a27042c516771f13083a5f92ca6beaa79857394e1cdfcf959404f9c62f5b37122700b42"}]}, 0x200) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 5.170489559s ago: executing program 2 (id=8137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000640)=ANY=[@ANYBLOB="ff02040100000000000000000000d36eb15aa6bafea407396c94e77f568b7658bc00652be29980969e2beec9dd462cce7d9d4513884e5c3121e45f8bf422a51ec95d811fa24b96099d1f2d763dc6196f79b97d133494fbef9610b5d76f883c67ed515b035adbb28988b4c3580cc53bc1a48c583378c94246ee00000000000000000000fef7436c34ccf9657df07b8af5d62ce07b5ae5d0fe218e99724e13de41da25ae2248b89efd4fc0f07fe17104c81dedb433cc6b42b351c44cfb9037f97517111f0c08821504da0df28a8c9a42047bdc2b4094c3dc9bb9b0284de3688d94e244b2a4ab8eca3af7ba438cf508e308e994d0f4d6c9e17663f3b5b5d73a1016f5dd5085af0eb0a977e99ab02e0179f92bede8b1a69b8da49017b9fe76bcc3533dd03cabefa6b85adf425d2a54a1cc646e56d798246768712c4c5656"], 0x18) connect$inet(r3, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xa1a) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="050076cb08ecffff7effffff0101"]) pipe(&(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310329bd7000ffffffff090000000800", @ANYRES32=r7, @ANYBLOB="080006000209"], 0x24}}, 0x4000) fanotify_init(0x200, 0x0) unshare(0x68040200) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0xe, 0x3, 0x5, 0x0, 0xd79, 0x9, 0x6, 0x7}, &(0x7f0000000100)={0xd7c, 0xf, 0x7fff, 0x2, 0x4, 0x1, 0x1000, 0x1ff}, 0x0, &(0x7f00000002c0)={r8, r9+10000000}, 0x0) 5.081847997s ago: executing program 3 (id=8138): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@loopback, @multicast2, 0x1, "0596232642d17c7dc02cd9f90c8dd705b8dd6dadcd9a1c8ddffa4da80fbf040d", 0x7c, 0x8, 0x100, 0x3}, 0x3c) r1 = syz_open_dev$midi(0x0, 0x7, 0x1800) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = epoll_create(0x84ec) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = syz_open_procfs(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0684113, &(0x7f0000000180)={0x0, 0x6, 0x3, 0x1, 0x4, 0x4, 0x324, 0x4, 0x3f010bea, 0x0, 0x2, 0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080), 0x10) 4.937980712s ago: executing program 1 (id=8139): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0xc2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x5, 0x5, 0x1, 0x208, r3, 0x2, '\x00', 0x0, r4, 0x5, 0x5, 0x0, 0xc}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="251925bd8000fcdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x3) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 3.938314044s ago: executing program 0 (id=8140): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r6, 0x4010ae68, &(0x7f0000000000)={0x2000, 0x1000, 0xfffffffc}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$USBDEVFS_BULK(r6, 0xc0105502, &(0x7f0000000740)={{{0x7}}, 0x62, 0x9, &(0x7f0000002c00)="1e6fdcbdcc77e201d9a8c5e816ff80f62adcbc9650c4c951157fee38c73d672e6d11b057b732e0ebd4697c7ea5cc01614940cb8b98619a459bd009d4cdb1bdbd06fa9a20714e2c6b9f8d5b8ce36edfe313fc52dcc1cce0bfab358ed65b84347addb6"}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r6) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, r8, 0x20, 0x48, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$UFFDIO_API(r6, 0xc018aa3f, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04) 3.451120393s ago: executing program 2 (id=8141): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x800, 0x4000000000000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfdff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = fsopen(&(0x7f0000000000)='ubifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040)={0x2, 0x11}, 0x2) r3 = openat$cgroup(r0, &(0x7f0000001180)='syz0\x00', 0x200002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200000, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r7, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000001c0)=0x1) close_range(r4, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(r3, &(0x7f00000011c0)='blkio.bfq.io_wait_time\x00', 0x5000000, 0x0) r9 = openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000001100)='rdma.current\x00', 0x0, 0x0) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 3.181748876s ago: executing program 2 (id=8142): r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r4}) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1d, "eb6b1108de23112607474e7dcd00c3c3b426ced4470b1572c2cb10dd9a"}, {@device_b, @broadcast}, {@broadcast, @broadcast}, {@device_a, @device_b, 0xa2, "443bd46e284476c5a5ae1595e64735f60fd7356f4e9ee8ee0fdeb3b6f703ef884fd6969311a5dbc0998bcc62242d0d91e0e87e18198cf09277d0bcc200b7ddca1ae54e0c3f4c84bcecef4d1bece0fc135991343766242b7e9e0edee2d66df3deb4f83c6c3bb37811d316c10c9ae55c086d90221704c93c0c8dca8ac2772051ec91e1efc82b2eaf7c96f6643fe53b0177586c15b8d53004a8d6dc0146631299408c3b"}, {@broadcast, @device_a, 0x9b, "1388c0e2ef1d5f21328c8fc90173dfbb2454e8e9c28efa323511234dd185ac42b817f2adf00012b276f962f0edbc02df9c25086d7156a8a1b925fc7b2eabfbfa43277e767654d3c4d2651707092a73912c9ca16c94142622a16a651a85d2ba3ed5e8d767b9b81937869f053e215c3dc410707ee5e9a41c1a447307075cb29fe73e49a662a6de6c250ac57a36d8a6168ee44201738900c0248352f9"}, {@device_b, @device_a, 0x2c, "c31e2fb1c19dd0499a27042c516771f13083a5f92ca6beaa79857394e1cdfcf959404f9c62f5b37122700b42"}]}, 0x200) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3.152928442s ago: executing program 5 (id=8143): socket$inet_udplite(0x2, 0x2, 0x88) r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0, 0x0, r3}) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x1d, "eb6b1108de23112607474e7dcd00c3c3b426ced4470b1572c2cb10dd9a"}, {@device_b, @broadcast}, {@broadcast, @broadcast}, {@device_a, @device_b, 0xa2, "443bd46e284476c5a5ae1595e64735f60fd7356f4e9ee8ee0fdeb3b6f703ef884fd6969311a5dbc0998bcc62242d0d91e0e87e18198cf09277d0bcc200b7ddca1ae54e0c3f4c84bcecef4d1bece0fc135991343766242b7e9e0edee2d66df3deb4f83c6c3bb37811d316c10c9ae55c086d90221704c93c0c8dca8ac2772051ec91e1efc82b2eaf7c96f6643fe53b0177586c15b8d53004a8d6dc0146631299408c3b"}, {@broadcast, @device_a, 0x9b, "1388c0e2ef1d5f21328c8fc90173dfbb2454e8e9c28efa323511234dd185ac42b817f2adf00012b276f962f0edbc02df9c25086d7156a8a1b925fc7b2eabfbfa43277e767654d3c4d2651707092a73912c9ca16c94142622a16a651a85d2ba3ed5e8d767b9b81937869f053e215c3dc410707ee5e9a41c1a447307075cb29fe73e49a662a6de6c250ac57a36d8a6168ee44201738900c0248352f9"}, {@device_b, @device_a, 0x2c, "c31e2fb1c19dd0499a27042c516771f13083a5f92ca6beaa79857394e1cdfcf959404f9c62f5b37122700b42"}]}, 0x200) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x27) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 2.471744961s ago: executing program 3 (id=8144): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x9, [@multicast2, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @broadcast, @empty, @rand_addr=0x64010102, @multicast1, @local]}, 0x34) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) shutdown(r2, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffd, {0x0, 0x200000000, 0xffffffffffffffff, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r5, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) dup(0xffffffffffffffff) select(0xb670293f642facc, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x90, 0x0, 0x8, {0x3, 0x0, 0x9, 0x8b, 0xf5, 0x1ff, {0x3, 0xffffffffffffffff, 0x6, 0x9, 0x5, 0x8, 0x5, 0x641d4d1, 0x6, 0x2000, 0x89731bb3, r5, r7, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) shutdown(r0, 0x1) 2.244717029s ago: executing program 0 (id=8145): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.159415096s ago: executing program 1 (id=8146): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000183b9220b113420016519a02030109021b00010000000009040000012e459e000905c4"], 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0xf, 0x84101) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') fcntl$setstatus(r2, 0x4, 0x40800) r3 = syz_io_uring_setup(0x4167, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x792, &(0x7f0000000140)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1}) io_uring_enter(r3, 0x567, 0x1000a387, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r7, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x3c}}, 0x20040894) r8 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f0000000680)={0x0, [[0x7fff], [0x5, 0x100000], [0x100091]], '\x00', [{0x0, 0x102}, {}, {}, {}, {0x7fff}, {}, {}, {}, {0x0, 0xfffffffd}], '\x00', 0x300}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 2.093093537s ago: executing program 3 (id=8147): openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/32, 0x20}], 0x1) write(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xcc, 0x8, 0x2d, @local, @mcast1, 0x8, 0x40, 0xfffff1e5, 0x231b}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r5, 0x0}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(r7) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0x24000004) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @multicast1}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000400)="6abfef77398e7bf46f5da1de7ae2d5d2581355e324ac48bc28be27b907cdd449ed4b76a0ca869d7b055308a8bbba71f2b1bd7d2cdb1edb2a10ab5bff03317fbb8a1df6", 0x43}, {&(0x7f0000000080)="40c8e336be3e4fa6c8eabcfd96b45727c0f18c02e5483ceb1d623b2b5dbbddc3669cf822826981dadb7e9ee6609d4e", 0x2f}], 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0), 0x0) 1.584549314s ago: executing program 5 (id=8148): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000000180)="282fa8c2", 0x4, 0x5}]) sendfile(r4, r5, 0x0, 0x20000023896) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x10}]}}}]}, 0x4c}}, 0x0) 1.583024127s ago: executing program 2 (id=8158): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$dri(0x0, 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="9ce1", 0x2}) r4 = io_uring_setup(0x3535, &(0x7f00000003c0)={0x0, 0xde87, 0x2000, 0x2, 0xdd}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f00000001c0)={r0}, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000680)="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", 0x195}) close(r3) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1d0c25", @ANYRES32, @ANYBLOB="0c005080fd004200"], 0x34}, 0x1, 0x0, 0x0, 0x48810}, 0x20008001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000000)={0x1, "98dac412b14c8541a22d321154bbc61dad8ed5953c251d88e59140a71e987547", 0x1, 0x1}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2a5ab9fefff63ca5}, 0x24000010) 1.564227109s ago: executing program 0 (id=8149): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x20, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x4e24, 0x2, @remote, 0x3}}}, 0x104) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r4, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xfffff) 680.759752ms ago: executing program 3 (id=8150): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x2, 0x0}, 0x4c) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080), 0x8) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000240)="de", 0x1, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x400c5870, &(0x7f0000000180)={0x764, 0x7fffffff}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) accept4(r2, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000040)={0x3, 'virt_wifi0\x00', {0x3}, 0x5}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x200, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) read$alg(0xffffffffffffffff, &(0x7f00000000c0)=""/174, 0xae) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f00000000c0)=0x8e, 0x180000504) 221.334529ms ago: executing program 5 (id=8151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)=0x4f) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x5, 0x800}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) sendmmsg$inet(r5, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}], 0x2}}], 0x1, 0x4000000) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) splice(r3, 0x0, r1, 0x0, 0x1100000000f336, 0x8) openat$cgroup_root(0xffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x24, 0x5, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000080) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="001dd1749473e3807625100000000c00990068f400003a000000"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) 0s ago: executing program 5 (id=8152): poll(0x0, 0x0, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0xfffffffc}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x21}}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r1, 0x73bc9ede, 0x9, &(0x7f0000000180)=""/36, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r9, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TIOCMSET(r7, 0x5418, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x20040, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) kernel console output (not intermixed with test programs): 18.876920][T31117] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2518.884845][T31117] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2518.892848][T31117] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2518.900548][T31117] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2518.969218][T31117] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2518.981244][T31117] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2518.993201][T31117] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 2519.006555][T31117] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2519.099764][ T3962] fido_id[3962]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2519.293354][ T3971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2519.366190][ T3971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2519.382020][ T3971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2520.279408][ T3994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2520.463733][ T3994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2520.644198][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2520.805585][ T10] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2520.865173][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2520.897550][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2520.923529][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2520.959377][ T3996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2520.974441][ T3996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2521.577002][ T4022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2521.589684][ T4022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2522.160482][ T10] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -71 [ 2522.179835][ T10] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2522.208857][ T10] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 2522.243562][ T10] usb 4-1: USB disconnect, device number 6 [ 2522.965033][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 2523.227120][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2523.244869][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 2523.271496][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 4 [ 2523.324875][ T10] usb 3-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice= 0.40 [ 2523.334712][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2523.342722][ T10] usb 3-1: Product: syz [ 2523.350299][ T10] usb 3-1: Manufacturer: syz [ 2523.369886][ T4075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2523.444589][ T4075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2523.452618][ T10] usb 3-1: SerialNumber: syz [ 2523.720464][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2523.729996][ T10] usb 3-1: unit 1 not found! [ 2523.829822][ T10] usb 3-1: USB disconnect, device number 8 [ 2524.897501][ T4104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2524.927512][ T4104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2524.966155][ T4108] program syz.2.7201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2525.074380][ T4110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2525.146735][ T4110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2525.163483][ T4110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2525.180405][ T4112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7203'. [ 2525.205082][ T4112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7203'. [ 2525.658284][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7204'. [ 2525.813940][ T4120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7206'. [ 2525.881683][ T4119] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2526.879802][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7212'. [ 2527.178268][ T4144] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2528.682584][ T4160] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2528.920947][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2528.927482][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.475479][T31117] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2529.534356][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2529.546775][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2529.652558][T31117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2529.664157][T31117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2529.675729][T31117] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 2529.685883][T31117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2529.702976][T31117] usb 3-1: config 0 descriptor?? [ 2530.149781][T31117] hid_parser_main: 73 callbacks suppressed [ 2530.149804][T31117] hkems 0003:2006:0118.0025: unknown main item tag 0x0 [ 2530.174538][T31117] hkems 0003:2006:0118.0025: unknown main item tag 0x0 [ 2530.182068][T31117] hkems 0003:2006:0118.0025: reserved main item tag 0xe [ 2530.201306][T31117] hkems 0003:2006:0118.0025: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 2530.202550][ T4183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7229'. [ 2530.241312][T31117] hkems 0003:2006:0118.0025: no inputs found [ 2530.255879][T31117] hkems 0003:2006:0118.0025: force feedback init failed [ 2530.340499][T31117] usb 3-1: USB disconnect, device number 9 [ 2530.814431][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 2530.968926][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2530.987328][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2531.030047][ T10] usb 4-1: config 1 has no interface number 0 [ 2531.047343][ T10] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2531.076560][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2531.085809][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2531.127308][ T10] usb 4-1: Product: syz [ 2531.185495][ T10] usb 4-1: Manufacturer: syz [ 2531.210908][ T10] usb 4-1: SerialNumber: syz [ 2531.243040][ T10] usb 4-1: selecting invalid altsetting 1 [ 2531.662145][ T10] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 2531.672062][ T10] cdc_ncm 4-1:1.1: bind() failure [ 2531.824659][ T4223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2531.866784][ T10] usb 4-1: USB disconnect, device number 7 [ 2531.915386][ T4225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2531.934327][ T4223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2531.997794][ T4224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2532.265844][ T4224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2532.330101][ T4224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2533.467626][ T4253] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2534.090866][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2534.100300][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2536.355391][T31117] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 2536.528063][T31117] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 2536.537370][T31117] usb 4-1: config 0 has no interface number 0 [ 2536.544235][T31117] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2536.562682][T31117] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 2536.572566][T31117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2536.584341][T31117] usb 4-1: Product: syz [ 2536.588769][T31117] usb 4-1: Manufacturer: syz [ 2536.597023][T31117] usb 4-1: SerialNumber: syz [ 2536.608231][T31117] usb 4-1: config 0 descriptor?? [ 2536.620642][ T4281] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 2536.653721][T31117] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fa:6a:d8:f2:66:30 [ 2537.561143][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2537.645085][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2537.975437][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7277'. [ 2537.984544][ T4320] veth7: left allmulticast mode [ 2537.989431][ T4320] veth7: left promiscuous mode [ 2537.995030][ T4320] bridge0: port 3(veth7) entered disabled state [ 2538.095864][ T4320] veth0_to_bond: left allmulticast mode [ 2538.102049][ T4320] veth0_to_bond: left promiscuous mode [ 2538.115747][ T4320] bridge0: port 2(veth0_to_bond) entered disabled state [ 2538.230387][ T4320] veth1: left allmulticast mode [ 2538.236279][ T4320] veth1: left promiscuous mode [ 2538.241822][ T4320] bridge0: port 1(veth1) entered disabled state [ 2538.313216][ T4322] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2538.768316][ T10] usb 4-1: USB disconnect, device number 8 [ 2538.842472][ T4333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2538.890351][ T10] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 2538.906968][ T4334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2538.928705][ T4335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2538.942818][ T4333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2540.504199][ T3905] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2540.826561][ T3905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2540.839901][ T3905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2540.888511][ T3905] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 2541.033897][ T3905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2541.778437][ T3905] hid-led 0003:27B8:01ED.0026: probe with driver hid-led failed with error -71 [ 2541.803120][ T3905] usb 4-1: USB disconnect, device number 9 [ 2541.926554][ T4388] kernel profiling enabled (shift: 3) [ 2542.450841][ T4403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2542.713552][ T4409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2542.727828][ T4403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2542.924211][T31117] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 2543.097781][T31117] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2543.111211][T31117] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2543.120846][T31117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2543.129036][T31117] usb 3-1: Product: syz [ 2543.133500][T31117] usb 3-1: Manufacturer: syz [ 2543.139220][T31117] usb 3-1: SerialNumber: syz [ 2543.150289][T31117] usb 3-1: config 0 descriptor?? [ 2543.191317][T31117] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2543.771281][T31117] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 2543.801639][T31117] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 2543.824547][T31117] usb 3-1: USB disconnect, device number 10 [ 2544.553830][ T4445] netlink: 'syz.0.7312': attribute type 4 has an invalid length. [ 2544.581620][ T4445] netlink: 'syz.0.7312': attribute type 2 has an invalid length. [ 2544.975901][ T3905] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 2545.137285][ T4473] netlink: 'syz.3.7324': attribute type 1 has an invalid length. [ 2545.154883][ T3905] usb 3-1: Using ep0 maxpacket: 8 [ 2545.161508][ T3905] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2545.169760][ T3905] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2545.219675][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2545.250049][ T3905] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2545.274662][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2545.297217][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2545.318014][ T3905] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2545.383904][ T3905] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2545.405078][ T3905] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2545.412517][ T3905] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2545.432805][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2545.453912][ T3905] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2545.474021][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2545.599858][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2545.611511][ T3905] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2545.679638][ T3905] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2545.701884][ T3905] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2545.710558][ T3905] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2545.723022][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2545.735105][ T3905] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2545.762823][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2545.898486][ T3905] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2545.908399][ T30] audit: type=1400 audit(1774147613.713:20460): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A2F2F0906 pid=4486 comm="syz.1.7330" [ 2546.002996][ T3905] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2546.082249][ T3905] usb 3-1: config 168 interface 0 has no altsetting 0 [ 2546.107847][ T4493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2546.133455][ T4493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2546.143160][ T3905] usb 3-1: string descriptor 0 read error: -22 [ 2546.153143][ T3905] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2546.162500][ T3905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2546.205328][ T3905] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2546.488432][ T3905] usb 3-1: USB disconnect, device number 11 [ 2548.271139][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7342'. [ 2548.598381][ T30] audit: type=1326 audit(1774147616.413:20461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.646247][ T30] audit: type=1326 audit(1774147616.433:20462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.673274][ T30] audit: type=1326 audit(1774147616.433:20463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.711340][ T30] audit: type=1326 audit(1774147616.433:20464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.733962][ T30] audit: type=1326 audit(1774147616.433:20465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.757485][ T30] audit: type=1326 audit(1774147616.433:20466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.801004][ T30] audit: type=1326 audit(1774147616.433:20467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.824955][ T30] audit: type=1326 audit(1774147616.433:20468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2548.910397][ T30] audit: type=1326 audit(1774147616.443:20469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4538 comm="syz.0.7350" exe="/root/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf7ff7f6c code=0x7ffc0000 [ 2549.262256][ T4564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7357'. [ 2549.703178][ T4569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7358'. [ 2549.742749][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7358'. [ 2549.956603][ T4569] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2551.310026][ T4592] tipc: Enabled bearer , priority 10 [ 2551.492186][ T4598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7368'. [ 2552.532653][ T4616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2552.597108][ T4616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2552.626967][ T4616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2552.637420][ T4615] lo: Caught tx_queue_len zero misconfig [ 2552.643055][ T4615] netem: change failed [ 2553.277925][ T4622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2553.302235][ T4622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2553.757823][ T4628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2553.823862][ T4628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2553.846686][ T4628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2554.286421][ T4637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2554.489743][ T4644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2554.556052][ T4644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2554.569886][ T4644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2555.085684][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7388'. [ 2555.133134][ T4651] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7388'. [ 2555.194281][ T4651] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7388'. [ 2556.137295][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7397'. [ 2557.211559][ T4689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2557.275939][ T4689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2557.292429][ T4689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2558.091834][ T4700] sit0: Caught tx_queue_len zero misconfig [ 2558.388362][ T4708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2558.637240][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7410'. [ 2558.718381][ T4716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2560.205479][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2560.270782][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2560.522173][ T4741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7421'. [ 2561.402874][ T4756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7424'. [ 2562.066105][ T4763] dummy0: entered allmulticast mode [ 2562.078808][ T4762] dummy0: left allmulticast mode [ 2562.819313][ T4777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2562.895885][ T4777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2563.147842][ T4779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2564.311210][ T4793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7438'. [ 2564.321672][ T4793] veth1_macvtap: left promiscuous mode [ 2564.436000][ T4799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2564.491475][ T4799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2564.520698][ T4802] usb usb7: usbfs: process 4802 (syz.0.7442) did not claim interface 0 before use [ 2564.637754][ T4810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7445'. [ 2564.660080][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7441'. [ 2564.792651][ T4813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2564.856950][ T4813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2564.870549][ T4813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2565.384607][ T4822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2565.417616][ T4822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2566.005325][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7450'. [ 2566.365754][ T4834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2566.405232][ T4834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.491764][ T4842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2567.503439][ T4842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2567.598364][ T4844] usb usb7: usbfs: process 4844 (syz.4.7454) did not claim interface 0 before use [ 2568.084272][ T4859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2568.156343][ T4859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2568.177710][ T4859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2568.772023][ T4872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2568.838807][ T4872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2568.873560][ T4872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2569.425348][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7467'. [ 2569.999303][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7472'. [ 2570.092761][ T4898] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2571.665536][ T4911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7477'. [ 2572.277508][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.289658][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.302636][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.315222][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.330092][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.346653][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.359847][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.375503][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.390054][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.404691][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: unknown main item tag 0x0 [ 2572.426942][ T3905] hid-generic 0003:0004:FFFFFFFE.0027: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 2572.550501][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7480'. [ 2572.747908][ T4919] fido_id[4919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2572.932838][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2573.079050][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2573.127686][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2575.178025][ T4977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2575.544190][T32133] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2575.704529][T32133] usb 3-1: Using ep0 maxpacket: 32 [ 2575.711248][T32133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2575.722710][T32133] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2575.731839][T32133] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2575.741183][T32133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.758863][T32133] usb 3-1: config 0 descriptor?? [ 2576.491844][T32133] usb 3-1: USB disconnect, device number 12 [ 2576.897976][ T5012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2576.960063][ T5012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2576.976726][ T5012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2577.269875][ T5016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2577.469409][ T5020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2577.926144][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2577.977142][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2579.004648][T32133] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 2579.063077][ T5060] sctp: [Deprecated]: syz.3.7535 (pid 5060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2579.063077][ T5060] Use struct sctp_sack_info instead [ 2579.169321][T32133] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 2579.180513][T32133] usb 3-1: config 150 has no interface number 0 [ 2579.190285][T32133] usb 3-1: config 150 interface 204 has no altsetting 0 [ 2579.204618][T32133] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2579.227680][T32133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2579.255213][T32133] usb 3-1: Product: syz [ 2579.262760][T32133] usb 3-1: Manufacturer: syz [ 2579.280713][T32133] usb 3-1: SerialNumber: syz [ 2579.565766][T32133] xr_serial 3-1:150.204: xr_serial converter detected [ 2580.122972][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2580.136482][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2580.321802][ T5090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2580.387261][ T5090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2580.411713][ T5090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2580.423851][T32133] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 2580.470429][T32133] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 2580.492988][T32133] usb 3-1: USB disconnect, device number 13 [ 2580.508829][T32133] xr_serial 3-1:150.204: device disconnected [ 2580.774551][T31117] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 2580.944148][T31117] usb 4-1: Using ep0 maxpacket: 8 [ 2580.950821][T31117] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2580.961365][T31117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2580.985794][T31117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2580.996835][T31117] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2581.030031][T31117] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2581.080171][T31117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.381635][T31117] usb 4-1: GET_CAPABILITIES returned 0 [ 2581.549562][T31117] usbtmc 4-1:16.0: can't read capabilities [ 2581.699682][T31117] usb 4-1: USB disconnect, device number 10 [ 2582.872682][T31117] hid_parser_main: 1 callbacks suppressed [ 2582.872698][T31117] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 2582.890746][T31117] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2583.103219][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2583.120836][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2583.349907][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2583.358841][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2583.926130][ T5138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2583.935143][ T5138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2584.004333][T31117] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 2584.137291][ T5146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7567'. [ 2584.184218][T31117] usb 4-1: Using ep0 maxpacket: 8 [ 2584.193608][T31117] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2584.205434][T31117] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2584.216005][T31117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2584.226069][T31117] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2584.236229][T31117] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2584.249831][T31117] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2584.259417][T31117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.501311][T31117] usb 4-1: usb_control_msg returned -32 [ 2584.513538][T31117] usbtmc 4-1:16.0: can't read capabilities [ 2584.575022][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2584.746420][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2584.755709][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2584.769774][ T10] usb 3-1: config 0 descriptor?? [ 2584.779605][ T10] cp210x 3-1:0.0: cp210x converter detected [ 2584.871515][ T5177] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 2584.945864][ T3905] usb 4-1: USB disconnect, device number 11 [ 2585.187438][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2585.348655][ T5192] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2585.433610][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2585.634394][ T10] usb 3-1: USB disconnect, device number 14 [ 2585.643348][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2585.699315][ T10] cp210x 3-1:0.0: device disconnected [ 2585.875521][ T5201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2585.938346][ T5201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2586.052895][ T5201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2586.531031][ T5211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2586.616966][ T5211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2586.635234][ T5211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2586.884765][ T5221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2588.042751][ T5241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2588.119631][ T5241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2588.133646][ T5241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2588.360170][T31117] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2588.646414][T31117] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2588.672849][T31117] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2588.713468][T31117] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2588.935091][ T5248] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2589.027044][T31117] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2589.038783][T31117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.200027][T31117] usb 4-1: Product: syz [ 2589.244755][T31117] usb 4-1: Manufacturer: syz [ 2589.252623][T31117] usb 4-1: SerialNumber: syz [ 2589.295227][T31117] hub 4-1:1.0: bad descriptor, ignoring hub [ 2589.408587][T31117] hub 4-1:1.0: probe with driver hub failed with error -5 [ 2589.507900][T31117] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2589.991524][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.051351][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.305587][ T5270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2590.381398][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.387790][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.404502][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2590.617417][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 2590.657982][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2590.674259][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.702316][ T10] usb 3-1: config 0 descriptor?? [ 2590.924774][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2590.944697][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2590.958137][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2590.965786][ T10] usb 3-1: media controller created [ 2590.989036][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2591.109901][ T10] DVB: Unable to find symbol dib7000p_attach() [ 2591.117924][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2591.174326][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 2591.183966][ T10] Registered IR keymap rc-empty [ 2591.194975][ T10] dvb-usb: could not initialize remote control. [ 2591.203590][ T10] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2591.437824][T32133] usb 3-1: USB disconnect, device number 15 [ 2591.464971][T32133] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2592.214190][ T5293] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2593.246879][ T5306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2593.310959][ T5306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2593.325118][ T5306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2593.590744][ T5885] usb 4-1: USB disconnect, device number 12 [ 2593.651744][ T5885] usblp0: removed [ 2594.074887][ T5885] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2594.226507][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2594.244340][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2594.267563][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2594.294740][ T5885] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2594.315712][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2594.336326][ T5885] usb 4-1: config 0 descriptor?? [ 2594.759105][ T5885] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x4 [ 2594.803683][ T5885] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2595.047280][T32133] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2595.214232][T32133] usb 3-1: Using ep0 maxpacket: 32 [ 2595.223316][T32133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2595.254181][T32133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2595.294607][T32133] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 2595.303719][T32133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.414717][ T5337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2595.445326][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7626'. [ 2595.459868][T32133] usb 3-1: config 0 descriptor?? [ 2595.761746][ T5342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2595.835332][ T5342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2595.848117][ T5342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2595.916483][T32133] savu 0003:1E7D:2D5A.002A: hiddev1,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 2596.200570][ T5885] usb 3-1: USB disconnect, device number 16 [ 2596.477568][ T5345] fido_id[5345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2596.775552][T31117] usb 4-1: USB disconnect, device number 13 [ 2597.841106][ T5370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2597.904954][ T5370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2597.923730][ T5370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.244698][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2598.255826][ T5385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.494049][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 2598.543074][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 2598.584587][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2598.633934][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2598.673389][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 2598.700293][ T5384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.727708][ T5384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2598.744955][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 2598.754125][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2598.775638][ T10] usb 4-1: config 0 descriptor?? [ 2598.866284][ T5390] netlink: 'syz.0.7641': attribute type 3 has an invalid length. [ 2599.215318][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.002B/input/input118 [ 2599.347813][ T5399] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.7644'. [ 2599.366728][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.002B/input/input119 [ 2599.423479][ T10] kye 0003:0458:5013.002B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 2599.528711][ T10] usb 4-1: USB disconnect, device number 14 [ 2599.705479][ T5401] fido_id[5401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 2599.765091][ T5406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2599.831580][ T5406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2599.901567][ T5406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2600.261900][ T5412] "syz.4.7651" (5412) uses obsolete ecb(arc4) skcipher [ 2600.424755][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2600.579032][ T10] usb 4-1: config 0 has no interfaces? [ 2600.585737][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2600.604918][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2600.628287][ T10] usb 4-1: Manufacturer: syz [ 2600.643744][ T10] usb 4-1: config 0 descriptor?? [ 2600.680931][T31117] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2600.866417][T31117] usb 3-1: Using ep0 maxpacket: 16 [ 2600.874922][T31117] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2600.886081][T31117] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2600.926037][ T5885] usb 4-1: USB disconnect, device number 15 [ 2600.934676][T31117] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2600.947525][T31117] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 2600.992674][T31117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2601.020109][T31117] usb 3-1: config 0 descriptor?? [ 2601.089193][ T5440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2601.151412][ T5440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2601.163116][ T5440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2601.548343][T31117] nzxt-smart2 0003:1E71:2009.002C: unknown main item tag 0x0 [ 2601.569743][T31117] nzxt-smart2 0003:1E71:2009.002C: unknown main item tag 0x0 [ 2601.594847][T31117] nzxt-smart2 0003:1E71:2009.002C: unknown main item tag 0x0 [ 2601.608427][T31117] nzxt-smart2 0003:1E71:2009.002C: unknown main item tag 0x0 [ 2601.620982][T31117] nzxt-smart2 0003:1E71:2009.002C: unknown main item tag 0x0 [ 2601.642034][T31117] nzxt-smart2 0003:1E71:2009.002C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 2602.069180][ T10] usb 3-1: USB disconnect, device number 17 [ 2602.154400][ T5448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2602.172914][ T5450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2602.188201][ T5449] fido_id[5449]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 2602.217111][ T5450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2602.229011][ T5448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2602.241666][ T5448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2602.292844][ T5450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2603.130684][ T5469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2603.163850][ T5469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2603.762415][ T5493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2603.830739][ T5493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2603.845022][ T5493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2604.145453][ T5499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2604.238756][ T5499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2604.410993][ T5499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2604.931896][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2604.994645][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2605.024409][ T5518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2605.077118][ T5518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2605.581084][ T5524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2605.596168][ T5524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2605.965346][ T5535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2606.034444][ T5885] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2606.050170][ T5536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2606.063813][ T5535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2606.286157][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2606.307575][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2606.309011][ T5540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2606.363711][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2606.374544][ T5540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2606.380608][ T5885] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2606.509698][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2606.544266][ T5885] usb 4-1: config 0 descriptor?? [ 2606.764592][ T5548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2606.984258][ T5548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2606.987766][ T5885] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2607.378242][ T5558] netlink: 'syz.2.7699': attribute type 5 has an invalid length. [ 2607.601978][ T5565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2607.666955][ T5565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2607.693468][ T5565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2607.989468][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2607.999173][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2608.224371][ C1] plantronics 0003:047F:FFFF.002D: usb_submit_urb(ctrl) failed: -1 [ 2609.024869][T24797] usb 4-1: USB disconnect, device number 16 [ 2609.610499][ T5595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2609.636592][ T5595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2610.227235][ T5603] netlink: 'syz.4.7712': attribute type 1 has an invalid length. [ 2610.280410][ T5603] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2610.288258][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7712'. [ 2610.391885][ T5608] bond9: (slave geneve3): making interface the new active one [ 2610.435406][ T5608] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 2610.444111][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.453198][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.475468][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.493130][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2610.622476][ T5616] team0: Port device team_slave_0 removed [ 2610.711099][ T5622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2610.740412][ T5616] team0: Port device team_slave_1 removed [ 2610.749348][ T5616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2610.815787][ T5623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2610.829022][ T5622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2610.866494][ T5616] bond2: (slave gretap1): Releasing active interface [ 2610.894269][ T5616] veth3: left allmulticast mode [ 2610.899161][ T5616] veth3: left promiscuous mode [ 2610.956892][ T5616] bridge2: port 1(veth3) entered disabled state [ 2611.040399][ T5616] veth5: left allmulticast mode [ 2611.158702][ T5616] veth5: left promiscuous mode [ 2611.174524][ T5616] bridge2: port 3(veth5) entered disabled state [ 2611.213862][ T5616] bond9: (slave geneve3): Releasing active interface [ 2611.251950][ T7960] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.461258][ T7960] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.527599][ T7960] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2611.547457][ T7960] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2612.704207][T24797] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 2612.924534][T24797] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2612.931987][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2612.953116][T24797] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2613.021892][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2613.049779][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2613.085086][T24797] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2613.092525][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2613.213122][T24797] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2613.300024][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2613.312192][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2613.329660][ T5669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2613.343629][T24797] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2613.351175][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2613.369958][ T5669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2613.378189][T24797] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2613.403590][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2613.425145][T24797] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2613.441523][T24797] usb 3-1: string descriptor 0 read error: -22 [ 2613.457467][T24797] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2613.507752][ T5671] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7732'. [ 2613.627930][T24797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.652033][T24797] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2614.046770][ T5691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2614.065175][ T5691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2614.184163][T24797] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2614.329739][ T5695] syzkaller0: entered promiscuous mode [ 2614.335460][ T5695] syzkaller0: entered allmulticast mode [ 2614.374336][T24797] usb 4-1: Using ep0 maxpacket: 32 [ 2614.381234][T24797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2614.412603][T24797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2614.422590][T24797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2614.435944][T24797] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 2614.453394][T24797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2614.464291][T24797] usb 4-1: config 0 descriptor?? [ 2614.566436][ T5697] loop5: detected capacity change from 0 to 7 [ 2614.574951][ C1] blk_print_req_error: 25 callbacks suppressed [ 2614.574971][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.590813][ C1] buffer_io_error: 11 callbacks suppressed [ 2614.590824][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.614397][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.624017][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.632444][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.642051][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.650332][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.659958][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.668267][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.677912][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.689288][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.698909][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.711197][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.720824][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.730200][T32446] ldm_validate_partition_table(): Disk read failed. [ 2614.737854][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.747503][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.755694][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.765314][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.773541][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 2614.783151][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 2614.791638][T32446] Dev loop5: unable to read RDB block 0 [ 2614.798960][T32446] loop5: unable to read partition table [ 2614.805017][T32446] loop5: partition table beyond EOD, truncated [ 2614.818083][ T5697] ldm_validate_partition_table(): Disk read failed. [ 2614.854953][ T5697] Dev loop5: unable to read RDB block 0 [ 2614.861119][ T5697] loop5: unable to read partition table [ 2614.884408][ T5697] loop5: partition table beyond EOD, truncated [ 2614.890615][ T5697] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 2614.965071][T24797] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002E/input/input120 [ 2615.089549][T24797] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002E/input/input121 [ 2615.145338][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.154726][T24797] kye 0003:0458:5011.002E: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 2615.214689][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2615.517785][ T5709] could not allocate digest TFM handle sha3-224-ce [ 2615.594048][ T5715] "syz.4.7748" (5715) uses obsolete ecb(arc4) skcipher [ 2615.738166][ T5720] netlink: 7 bytes leftover after parsing attributes in process `syz.4.7750'. [ 2615.913300][ T5729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2615.922296][ T5729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2616.195191][T31117] usb 3-1: USB disconnect, device number 18 [ 2616.250848][ T5733] team0: Port device team_slave_0 removed [ 2616.259548][ T5733] team0: Port device team_slave_1 removed [ 2616.266249][ T5733] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2616.665154][ T5885] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2616.794798][ T5749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2616.805636][ T5749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2616.826704][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 2616.847191][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2616.863687][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2616.864303][ T5752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2616.882818][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2616.887206][ T5752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2616.896051][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2616.917291][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2616.921496][T24797] usb 4-1: USB disconnect, device number 17 [ 2616.926776][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2617.168835][ T5885] usb 3-1: GET_CAPABILITIES returned 0 [ 2617.174577][ T5885] usbtmc 3-1:16.0: can't read capabilities [ 2617.384314][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.393646][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.402712][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.412343][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.421438][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.430524][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.439583][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.480370][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.489489][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.498567][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.508759][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.517866][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.526956][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.536037][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.546205][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2617.555312][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 2617.569863][T24797] usb 3-1: USB disconnect, device number 19 [ 2617.870343][ T5773] netlink: 'syz.4.7773': attribute type 12 has an invalid length. [ 2617.999284][ T5779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2618.015757][ T5779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2618.581600][ T5805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2618.644954][ T5805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2618.657949][ T5805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2618.978157][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7788'. [ 2620.548409][ T1231] syz_tun (unregistering): left allmulticast mode [ 2620.603124][ T5880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2620.619565][ T5880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2621.210901][ T36] veth7: left allmulticast mode [ 2621.226214][ T36] veth7: left promiscuous mode [ 2621.245121][ T36] bridge2: port 2(veth7) entered disabled state [ 2621.254202][T24797] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2621.274746][ T36] veth5: left allmulticast mode [ 2621.279772][ T36] veth5: left promiscuous mode [ 2621.286203][ T36] bridge2: port 1(veth5) entered disabled state [ 2621.287240][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2621.306613][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2621.329019][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2621.337354][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2621.347138][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2621.365250][T16652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2621.383577][T16652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2621.393408][T16652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2621.408372][T16652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2621.417792][T16652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2621.446271][T24797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2621.457425][T24797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2621.467274][T24797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2621.481178][T24797] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2621.489916][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2621.500181][T24797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2621.574602][T24797] usb 4-1: config 0 descriptor?? [ 2621.580481][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2621.594489][ T5909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2621.738264][ T36] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 2621.768831][ T36] bond2 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - d6:eb:49:51:2c:c2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2621.942255][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2621.971349][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2622.041675][T24797] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 2622.041715][T24797] plantronics 0003:047F:FFFF.002F: unknown main item tag 0x0 [ 2622.097245][T24797] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2622.306879][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7807'. [ 2622.351271][ T36] tipc: Disabling bearer [ 2622.589217][ T36] bond3 (unregistering): (slave bridge3): Removing an active aggregator [ 2622.611726][ T36] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 2622.752709][ T36] bond1 (unregistering): Released all slaves [ 2622.789879][ T36] bond2 (unregistering): (slave veth3): Releasing active interface [ 2622.808665][ T36] bond2 (unregistering): Released all slaves [ 2622.838419][ T36] bond3 (unregistering): Released all slaves [ 2622.858898][ T36] bond0 (unregistering): Released all slaves [ 2622.883156][ T36] bond4 (unregistering): Released all slaves [ 2622.905584][ T5923] batadv_slave_1: entered promiscuous mode [ 2622.916500][ T5928] batadv_slave_1 (unregistering): left promiscuous mode [ 2623.029659][ T5937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2623.057236][ T5937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2623.118711][ T36] : left promiscuous mode [ 2623.215938][ T36] tipc: Disabling bearer [ 2623.221521][ T36] tipc: Disabling bearer [ 2623.252294][ T36] tipc: Left network mode [ 2623.474273][T16652] Bluetooth: hci2: command tx timeout [ 2623.861341][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 2624.145016][T31117] usb 4-1: USB disconnect, device number 18 [ 2624.580539][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 2624.601977][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 2624.630680][ T5910] bridge_slave_0: entered allmulticast mode [ 2624.651049][ T5910] bridge_slave_0: entered promiscuous mode [ 2624.729120][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 2624.749756][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 2624.783146][ T5910] bridge_slave_1: entered allmulticast mode [ 2624.806749][ T5910] bridge_slave_1: entered promiscuous mode [ 2624.932631][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2624.986255][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7817'. [ 2625.002437][ T36] hsr_slave_0: left promiscuous mode [ 2625.011763][ T5980] netlink: 'syz.4.7817': attribute type 4 has an invalid length. [ 2625.554191][T16652] Bluetooth: hci2: command tx timeout [ 2625.583792][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2625.610017][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2625.676634][ T6002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2625.703720][ T6001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2625.717374][ T5910] team0: Port device team_slave_0 added [ 2625.725861][ T5910] team0: Port device team_slave_1 added [ 2625.847434][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2625.854822][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2625.882243][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2625.917038][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2625.935741][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2625.942858][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2625.970412][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2626.059571][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2626.103328][ T6008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2626.335089][ T5910] hsr_slave_0: entered promiscuous mode [ 2626.341823][ T5910] hsr_slave_1: entered promiscuous mode [ 2626.348654][ T5910] debugfs: 'hsr0' already exists in 'hsr' [ 2626.357171][ T5910] Cannot create hsr debugfs directory [ 2626.482401][ T36] IPVS: stop unused estimator thread 0... [ 2627.010000][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7833'. [ 2627.267540][ T5910] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2627.292098][ T6045] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2627.307082][ T5910] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2627.320649][ T5910] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2627.338756][ T5910] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2627.483980][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2627.509598][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 2627.522922][T20675] bridge0: port 1(bridge_slave_0) entered blocking state [ 2627.530120][T20675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2627.560018][T20675] bridge0: port 2(bridge_slave_1) entered blocking state [ 2627.567187][T20675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2627.635382][T16652] Bluetooth: hci2: command tx timeout [ 2627.699281][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2627.738426][ T6065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2627.777885][ T5910] veth0_vlan: entered promiscuous mode [ 2627.793049][ T5910] veth1_vlan: entered promiscuous mode [ 2627.811239][ T6065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2627.838846][ T6065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2627.877721][ T5910] veth0_macvtap: entered promiscuous mode [ 2627.891305][ T5910] veth1_macvtap: entered promiscuous mode [ 2627.914502][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2627.938553][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2627.978811][T30224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2628.008910][T30224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2628.030939][T30224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2628.060248][T30224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2628.227750][ T7960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2628.256584][ T7960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2628.317820][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2628.332816][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2628.486572][ T6046] raw-gadget.1 gadget.0: failed to queue suspend event [ 2628.582567][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2628.612852][ T6078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2628.783725][T30224] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2628.796987][T30224] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2628.818576][T30224] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2629.005242][ T6103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2629.029142][ T6103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2629.139454][ T6110] loop6: detected capacity change from 0 to 2640 [ 2629.155096][T32446] buffer_io_error: 25 callbacks suppressed [ 2629.155114][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.192612][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.192822][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2629.226313][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.247333][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.263008][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.286571][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.305868][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.322574][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.335164][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2629.347458][ T6111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2629.369730][T32446] ldm_validate_partition_table(): Disk read failed. [ 2629.385816][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.402503][T32446] Buffer I/O error on dev loop6, logical block 0, async page read [ 2629.419687][T32446] Dev loop6: unable to read RDB block 0 [ 2629.434175][T32446] loop6: unable to read partition table [ 2629.462429][ T6110] ldm_validate_partition_table(): Disk read failed. [ 2629.469829][ T6110] Dev loop6: unable to read RDB block 0 [ 2629.493981][ T6110] loop6: unable to read partition table [ 2629.505492][ T6110] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2629.648998][ T6124] netlink: 'syz.1.7847': attribute type 1 has an invalid length. [ 2629.676044][ T6124] netlink: 64399 bytes leftover after parsing attributes in process `syz.1.7847'. [ 2629.714418][T16652] Bluetooth: hci2: command tx timeout [ 2630.109791][ T6137] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2631.082702][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2631.106800][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2631.933492][ T6193] netlink: 116 bytes leftover after parsing attributes in process `syz.0.7862'. [ 2631.954750][T31117] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2632.085255][T32133] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2632.118603][T31117] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 2632.129639][T31117] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2632.141967][T31117] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 2632.151699][T31117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2632.160022][T31117] usb 3-1: Product: syz [ 2632.164937][T31117] usb 3-1: Manufacturer: syz [ 2632.169577][T31117] usb 3-1: SerialNumber: syz [ 2632.172064][ T6206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2632.177251][T31117] usb 3-1: config 0 descriptor?? [ 2632.189215][ T6184] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2632.191482][ T6206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2632.197731][ T6184] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2632.247437][T32133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2632.258505][T32133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2632.268280][T32133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2632.281632][T32133] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2632.290835][T32133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2632.301497][T32133] usb 4-1: config 0 descriptor?? [ 2632.440879][ T6184] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2632.448469][ T6184] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 2632.715157][T32133] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd [ 2632.743386][T32133] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2632.861349][T31117] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 2633.189185][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2633.202525][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2633.214434][T32133] usb 4-1: USB disconnect, device number 19 [ 2633.303145][ T6218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2633.312235][ T6218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2633.471344][T31117] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 2633.486802][T31117] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 56:9a:56:15:9e:f6 [ 2633.502496][T31117] usb 3-1: USB disconnect, device number 20 [ 2633.511580][T31117] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 2633.762452][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7873'. [ 2633.771852][ T6220] netlink: 'syz.0.7873': attribute type 4 has an invalid length. [ 2633.944049][ T6222] picdev_read: 77 callbacks suppressed [ 2633.950778][ T6222] kvm: pic: non byte read [ 2633.955526][ T6222] kvm: pic: non byte read [ 2633.959999][ T6222] kvm: pic: non byte read [ 2633.964843][ T6222] kvm: pic: non byte read [ 2633.969299][ T6222] kvm: pic: non byte read [ 2633.973663][ T6222] kvm: pic: non byte read [ 2633.978712][ T6222] kvm: pic: non byte read [ 2633.983071][ T6222] kvm: pic: non byte read [ 2633.987511][ T6222] kvm: pic: non byte read [ 2633.992073][ T6222] kvm: pic: non byte read [ 2634.095660][ T6232] vlan3: entered allmulticast mode [ 2634.100799][ T6232] veth0_to_bond: entered allmulticast mode [ 2634.154625][ T5885] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2634.304598][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 2634.311230][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2634.324684][ T5885] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 2634.333766][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2634.354963][ T6241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2634.366700][ T5885] usb 4-1: config 0 descriptor?? [ 2634.380845][ T5885] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2634.417048][ T6241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2634.429321][ T6241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2634.586578][ T5885] usb 4-1: USB disconnect, device number 20 [ 2635.139835][T31117] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 2635.161963][T31117] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2635.419578][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2635.429425][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2635.647298][ T6255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2635.672086][ T6255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2635.904183][T31117] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2636.055299][T31117] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2636.065316][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.074287][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.085862][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.099047][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.110044][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.121342][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.132452][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.142447][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.153950][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.169876][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.179864][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.192190][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.202144][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.211593][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.228839][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.239513][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.272454][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.354623][ T6277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2636.376069][ T6277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2636.385030][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.394746][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.405255][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.417644][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.426917][T31117] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2636.438731][T31117] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2636.450147][T31117] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2636.469399][T31117] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2636.479288][T31117] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2636.487991][T31117] usb 4-1: Product: syz [ 2636.492381][T31117] usb 4-1: Manufacturer: syz [ 2636.498722][T31117] usb 4-1: SerialNumber: syz [ 2636.519506][T31117] usb 4-1: config 0 descriptor?? [ 2636.555818][T31117] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 2636.806232][ T6073] usb 4-1: USB disconnect, device number 21 [ 2636.813747][ T6073] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 2637.086680][ T6286] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7898'. [ 2637.103332][ T6286] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7898'. [ 2637.179846][ T6291] netlink: 'syz.4.7900': attribute type 1 has an invalid length. [ 2637.734188][ T6073] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 2637.909192][ T6073] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2637.918380][ T6073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2637.927136][ T6073] usb 4-1: Product: syz [ 2637.931786][ T6073] usb 4-1: Manufacturer: syz [ 2637.943657][ T6073] usb 4-1: SerialNumber: syz [ 2637.958773][ T6073] usb 4-1: config 0 descriptor?? [ 2637.977826][ T6073] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2638.354750][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2638.365233][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2638.617596][ T6317] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2639.148840][ T6327] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2640.016367][ T6073] gspca_stk1135: reg_w 0x203 err -71 [ 2640.022902][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.032031][ T6073] gspca_stk1135: Sensor write failed [ 2640.048694][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.069020][ T6073] gspca_stk1135: Sensor write failed [ 2640.091332][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.105999][ T6073] gspca_stk1135: Sensor read failed [ 2640.111367][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.117820][ T6073] gspca_stk1135: Sensor read failed [ 2640.123144][ T6073] gspca_stk1135: Detected sensor type unknown (0x0) [ 2640.130491][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.152114][ T6073] gspca_stk1135: Sensor read failed [ 2640.162312][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.177304][ T6073] gspca_stk1135: Sensor read failed [ 2640.192704][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.202954][ T6073] gspca_stk1135: Sensor write failed [ 2640.213132][ T6073] gspca_stk1135: serial bus timeout: status=0x00 [ 2640.230486][ T6073] gspca_stk1135: Sensor write failed [ 2640.243738][ T6073] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 2640.276799][ T6073] usb 4-1: USB disconnect, device number 22 [ 2640.419053][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.429009][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.452771][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.461978][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2640.485083][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7922'. [ 2640.677044][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2640.689732][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2641.272817][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2641.291879][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2641.933915][ T6073] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2642.104458][ T6073] usb 4-1: Using ep0 maxpacket: 32 [ 2642.117487][ T6073] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2642.126124][ T6073] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2642.147438][ T6073] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2642.168784][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2642.187881][ T6073] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2642.221842][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2642.253956][ T6073] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2642.288427][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2642.353953][ T6073] usb 4-1: config 0 descriptor?? [ 2642.460103][ T6371] loop6: detected capacity change from 0 to 7 [ 2642.468878][ T6371] Dev loop6: unable to read RDB block 7 [ 2642.475034][ T6371] loop6: unable to read partition table [ 2642.480884][ T6371] loop6: partition table beyond EOD, truncated [ 2642.489922][ T6371] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2642.592487][ T6073] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2642.645946][ T6073] usb 4-1: USB disconnect, device number 23 [ 2642.671741][ T6073] usblp0: removed [ 2642.673745][ T6376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2642.695390][ T6376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2642.852152][ T6382] vivid-000: disconnect [ 2643.144528][ T6073] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2643.196026][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7938'. [ 2643.304432][ T6073] usb 4-1: Using ep0 maxpacket: 32 [ 2643.320631][ T6073] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2643.364049][ T6073] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2643.384339][ T6073] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2643.395244][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2643.405415][ T6073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2643.417105][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2643.425278][ T6073] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2643.436128][ T6073] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2643.449769][ T6073] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2643.460619][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2643.490608][ T6073] usb 4-1: config 0 descriptor?? [ 2643.709947][ T6073] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2644.167997][ T6409] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2644.266699][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2644.425121][T32133] usb 4-1: USB disconnect, device number 24 [ 2644.435878][T32133] usblp0: removed [ 2644.443609][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2646.113654][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7949'. [ 2646.712299][ T6436] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2647.094497][T16908] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2647.335140][T32133] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2647.358460][T16908] usb 4-1: Using ep0 maxpacket: 32 [ 2647.368039][T16908] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2647.377376][T16908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2647.389384][T16908] usb 4-1: config 0 descriptor?? [ 2647.438198][T16908] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2647.526088][T32133] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2647.539868][T32133] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2647.562366][T32133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2647.602999][T32133] usb 3-1: config 0 descriptor?? [ 2647.648688][T32133] pwc: Askey VC010 type 2 USB webcam detected. [ 2647.769617][ T6454] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2648.013958][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2648.013976][ T30] audit: type=1326 audit(1774147715.823:20475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.0.7958" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7f6c code=0x0 [ 2648.060843][T32133] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2648.068744][T32133] pwc: recv_control_msg error -32 req 02 val 2700 [ 2648.085089][T32133] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2648.102782][T32133] pwc: recv_control_msg error -32 req 04 val 1000 [ 2648.112731][T32133] pwc: recv_control_msg error -32 req 04 val 1300 [ 2648.120975][T32133] pwc: recv_control_msg error -32 req 04 val 1400 [ 2648.128184][T32133] pwc: recv_control_msg error -32 req 02 val 2000 [ 2648.175705][ T6460] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 2648.347334][T32133] pwc: recv_control_msg error -71 req 04 val 1500 [ 2648.354623][T32133] pwc: recv_control_msg error -71 req 02 val 2500 [ 2648.361606][T32133] pwc: recv_control_msg error -71 req 02 val 2400 [ 2648.368539][T32133] pwc: recv_control_msg error -71 req 02 val 2600 [ 2648.376365][T32133] pwc: recv_control_msg error -71 req 02 val 2900 [ 2648.383225][T32133] pwc: recv_control_msg error -71 req 02 val 2800 [ 2648.390812][T32133] pwc: recv_control_msg error -71 req 04 val 1100 [ 2648.397740][T32133] pwc: recv_control_msg error -71 req 04 val 1200 [ 2648.405897][T32133] pwc: Registered as video103. [ 2648.413539][T32133] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input123 [ 2648.429724][T32133] usb 3-1: USB disconnect, device number 21 [ 2649.155860][ T6473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2649.264365][ T6473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2649.276708][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.286551][ T6473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2649.486788][T16908] gspca_vc032x: reg_w err -71 [ 2649.496405][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.506265][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.514446][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.605761][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.612868][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.629465][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.635592][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.703809][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.712351][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.720632][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.730755][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.866209][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.875977][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.883544][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.892255][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.901540][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.912187][T16908] gspca_vc032x: I2c Bus Busy Wait 00 [ 2649.917808][T16908] gspca_vc032x: Unknown sensor... [ 2649.927471][T16908] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 2649.954701][T16908] usb 4-1: USB disconnect, device number 25 [ 2650.718037][ T6491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2650.734273][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2650.828269][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2650.861373][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2651.797790][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.804559][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.421890][T32133] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2652.486304][ T6514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.520856][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.577968][T32133] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2652.589316][ T6519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.589640][T32133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.641088][ T6517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.745071][T32133] usb 3-1: Product: syz [ 2652.746802][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.749437][T32133] usb 3-1: Manufacturer: syz [ 2652.835274][ T6514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2652.857072][T32133] usb 3-1: SerialNumber: syz [ 2653.230683][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2653.280031][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 2653.285337][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2653.304394][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2653.899573][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2653.963222][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2654.026390][ T6537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2654.060380][ T6539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2654.070306][ T6073] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2654.080581][ T6539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2654.235792][ T6073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2654.246536][ T6073] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2654.257565][ T6073] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2654.266995][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2654.276353][ T6073] usb 4-1: SerialNumber: syz [ 2654.502642][ T6073] usb 4-1: 0:2 : does not exist [ 2654.537947][ T6073] usb 4-1: USB disconnect, device number 26 [ 2654.569415][T31370] udevd[31370]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2654.992693][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 2655.007510][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 2655.019932][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2655.032577][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2655.043955][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2655.055787][T32133] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2655.084610][T32133] usb 3-1: USB disconnect, device number 22 [ 2655.184817][ T6552] binder: transaction release 227 bad handle 1, ret = -22 [ 2655.229229][ T6553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2655.308246][ T6556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2655.332556][ T6553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2656.330312][ T6573] syzkaller0: entered promiscuous mode [ 2656.337148][ T6573] syzkaller0: entered allmulticast mode [ 2656.836821][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2656.856227][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2656.895331][ T6580] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2657.104340][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2657.179542][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2657.192410][ T6585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2658.091948][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.134522][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.201814][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.219615][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.495597][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.506159][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.717901][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.726761][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2658.739537][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2658.748549][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2659.374857][ T6618] syzkaller0: entered promiscuous mode [ 2659.401208][ T6618] syzkaller0: entered allmulticast mode [ 2659.598091][ T6610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2660.468884][ T6636] netlink: 'syz.4.8013': attribute type 1 has an invalid length. [ 2660.557550][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8013'. [ 2660.661119][ T6636] bond10: entered promiscuous mode [ 2660.688232][ T6636] 8021q: adding VLAN 0 to HW filter on device bond10 [ 2660.751119][ T6649] bond10: (slave bridge0): making interface the new active one [ 2660.759581][ T6649] bridge0: entered promiscuous mode [ 2660.781407][ T6649] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 2660.793920][ T6641] syzkaller0: entered promiscuous mode [ 2660.813280][ T6641] syzkaller0: entered allmulticast mode [ 2660.831423][ T6638] bond10: entered allmulticast mode [ 2660.843473][ T6638] bridge0: entered allmulticast mode [ 2663.505775][ T6650] syzkaller0: entered promiscuous mode [ 2663.781774][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8021'. [ 2665.777137][ T6683] syzkaller0: entered promiscuous mode [ 2665.794484][ T6683] syzkaller0: entered allmulticast mode [ 2665.918515][ T30] audit: type=1326 audit(1774147733.723:20476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.2.8026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2666.024330][ T30] audit: type=1326 audit(1774147733.723:20477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.2.8026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2666.082767][ T6696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2666.091931][ T30] audit: type=1326 audit(1774147733.723:20478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.2.8026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2666.145847][ T30] audit: type=1326 audit(1774147733.723:20479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.2.8026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2666.174715][ T6690] syzkaller0: entered promiscuous mode [ 2666.180229][ T6690] syzkaller0: entered allmulticast mode [ 2666.201135][ T30] audit: type=1326 audit(1774147733.723:20480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.2.8026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2666.226151][ T30] audit: type=1326 audit(1774147733.873:20481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.2.8026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2666.314264][ T30] audit: type=1326 audit(1774147733.873:20482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.2.8026" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 2667.462159][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2667.538975][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2667.550466][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2670.342859][ T6734] syzkaller0: entered promiscuous mode [ 2670.349004][ T6734] syzkaller0: entered allmulticast mode [ 2670.833374][ T6742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2670.946821][ T6742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2671.008944][ T6752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.275474][ T6795] tipc: Enabled bearer , priority 0 [ 2675.282577][ T6797] syzkaller0: entered promiscuous mode [ 2675.301612][ T6797] syzkaller0: entered allmulticast mode [ 2675.461686][ T6794] tipc: Resetting bearer [ 2675.603257][ T6792] tipc: Resetting bearer [ 2675.618021][ T6805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.640997][ T6806] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8051'. [ 2675.664047][ T6792] tipc: Disabling bearer [ 2675.706038][ T6805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2675.718790][ T6805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2676.413564][ T6818] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2676.467192][ T6822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2676.606324][ T6825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2677.359596][ T6837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2677.373641][ T6837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2677.394809][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8062'. [ 2677.462244][ T6839] syzkaller0: entered promiscuous mode [ 2677.468027][ T6839] syzkaller0: entered allmulticast mode [ 2677.475482][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2677.489671][ T6839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2677.607560][ T6841] tipc: Enabled bearer , priority 0 [ 2677.615641][ T6841] syzkaller0: entered promiscuous mode [ 2677.621495][ T6841] syzkaller0: entered allmulticast mode [ 2677.660955][ T6841] tipc: Resetting bearer [ 2677.697845][ T6840] tipc: Resetting bearer [ 2677.725217][ T6840] tipc: Disabling bearer [ 2678.330121][ T6854] batadv_slave_0: entered promiscuous mode [ 2678.456182][ T6862] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 2678.510829][ T6864] syzkaller0: entered promiscuous mode [ 2678.604207][ T6864] syzkaller0: entered allmulticast mode [ 2678.830962][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8073'. [ 2678.856845][ T6868] netlink: 'syz.0.8073': attribute type 1 has an invalid length. [ 2679.361180][ T6873] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2679.442336][ T6875] netlink: 'syz.2.8075': attribute type 7 has an invalid length. [ 2679.598434][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2679.694246][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2679.709537][ T6882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2679.781105][ T6885] syzkaller0: entered promiscuous mode [ 2679.787202][ T6885] syzkaller0: entered allmulticast mode [ 2679.796662][ T6885] tc action pedit offset 128 out of bounds [ 2679.802889][ T6885] tc action pedit offset 128 out of bounds [ 2679.808775][ T6885] tc action pedit offset 128 out of bounds [ 2679.814588][ T6885] tc action pedit offset 128 out of bounds [ 2679.820377][ T6885] tc action pedit offset 128 out of bounds [ 2679.826197][ T6885] tc action pedit offset 128 out of bounds [ 2679.831983][ T6885] tc action pedit offset 128 out of bounds [ 2679.837794][ T6885] tc action pedit offset 128 out of bounds [ 2679.843620][ T6885] tc action pedit offset 128 out of bounds [ 2679.849443][ T6885] tc action pedit offset 128 out of bounds [ 2679.855271][ T6885] TC_ACT_REPEAT abuse ? [ 2680.542676][T32133] usb 5-1: USB disconnect, device number 31 [ 2683.204643][ T6902] syzkaller0: entered promiscuous mode [ 2683.210181][ T6902] syzkaller0: entered allmulticast mode [ 2683.249792][ T6908] tipc: Enabling of bearer rejected, failed to enable media [ 2683.578032][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2683.597851][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2683.625945][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2683.718368][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2683.726040][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2683.797185][T16908] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2684.028289][T16908] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 2684.115807][T16908] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 2684.130203][T16908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2684.155841][T16908] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2684.174210][T16908] usb 3-1: config 0 has no interface number 0 [ 2684.193496][T16908] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2684.211285][T16908] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2684.239324][T16908] usb 3-1: New USB device found, idVendor=abcd, idProduct=cde3, bcdDevice= 5.b9 [ 2684.248755][T16908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2684.271096][T16908] usb 3-1: config 0 descriptor?? [ 2684.297459][T16908] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2684.318830][T16908] usb 3-1: MIDIStreaming interface descriptor not found [ 2684.719632][ T6928] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2684.859509][ T5908] usb 3-1: USB disconnect, device number 23 [ 2685.641949][ T6933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2685.888332][ T5822] Bluetooth: hci3: command tx timeout [ 2687.504205][T32133] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 2687.829269][T32133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 2687.845038][T32133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 2687.880287][T32133] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2687.904501][T32133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2687.935536][T32133] usb 4-1: Product: syz [ 2687.960956][T32133] usb 4-1: Manufacturer: syz [ 2687.966011][ T5822] Bluetooth: hci3: command tx timeout [ 2687.994563][T32133] usb 4-1: SerialNumber: syz [ 2688.015116][T32133] usb 4-1: config 0 descriptor?? [ 2688.077530][T32133] hub 4-1:0.0: bad descriptor, ignoring hub [ 2688.085658][T32133] hub 4-1:0.0: probe with driver hub failed with error -5 [ 2688.130928][T32133] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input124 [ 2689.083158][ T13] bond10 (unregistering): (slave bridge0): Releasing backup interface [ 2689.106133][ T13] bridge0 (unregistering): left promiscuous mode [ 2689.118258][ T13] bridge0 (unregistering): left allmulticast mode [ 2689.264446][ T13] bond0 (unregistering): Released all slaves [ 2689.370164][ T13] bond1 (unregistering): Released all slaves [ 2689.452794][ T13] bond2 (unregistering): Released all slaves [ 2689.476177][ T13] bond3 (unregistering): Released all slaves [ 2689.501775][ T13] bond4 (unregistering): Released all slaves [ 2689.528287][ T13] bond5 (unregistering): Released all slaves [ 2689.545520][ T13] bond6 (unregistering): Released all slaves [ 2689.569360][ T13] bond7 (unregistering): Released all slaves [ 2689.581454][ T13] bond8 (unregistering): Released all slaves [ 2689.594961][ T13] bond9 (unregistering): Released all slaves [ 2689.607746][ T13] bond10 (unregistering): Released all slaves [ 2689.634807][T32133] usb 4-1: USB disconnect, device number 27 [ 2689.719239][ T6923] chnl_net:caif_netlink_parms(): no params data found [ 2689.872962][ T13] : left promiscuous mode [ 2689.990904][ T13] tipc: Disabling bearer [ 2690.013709][ T13] tipc: Left network mode [ 2690.016835][ T6986] syzkaller0: entered promiscuous mode [ 2690.023535][ T6986] syzkaller0: entered allmulticast mode [ 2690.035607][ T5822] Bluetooth: hci3: command tx timeout [ 2690.270364][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2690.348819][ T6998] netlink: 'syz.3.8100': attribute type 1 has an invalid length. [ 2690.365558][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2690.535669][ T6998] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2690.568783][ T7000] bond3: (slave ip6gretap0): making interface the new active one [ 2690.578934][ T7000] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 2690.588257][ T6923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2690.629613][ T6923] bridge0: port 1(bridge_slave_0) entered disabled state [ 2690.639668][ T6923] bridge_slave_0: entered allmulticast mode [ 2690.656193][ T6923] bridge_slave_0: entered promiscuous mode [ 2690.676385][ T6923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2690.693662][ T6923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2690.708991][ T6923] bridge_slave_1: entered allmulticast mode [ 2690.732353][ T6923] bridge_slave_1: entered promiscuous mode [ 2690.748801][ T7002] bond3: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 2690.886010][ T6923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2690.931343][ T6923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2691.100778][ T6923] team0: Port device team_slave_0 added [ 2691.123304][ T6923] team0: Port device team_slave_1 added [ 2691.212181][ T7022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8103'. [ 2691.222274][ T7022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8103'. [ 2691.341331][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2691.349555][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2691.384154][ T6923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2691.440783][ T6923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2691.467238][ T6923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2691.576970][ T6923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2691.694883][ T6923] hsr_slave_0: entered promiscuous mode [ 2691.815152][ T6923] hsr_slave_1: entered promiscuous mode [ 2691.823613][ T6923] debugfs: 'hsr0' already exists in 'hsr' [ 2691.833051][ T6923] Cannot create hsr debugfs directory [ 2692.114488][ T5822] Bluetooth: hci3: command tx timeout [ 2694.817070][ T6923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2694.866295][ T7079] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 2694.906521][ T7079] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2694.916394][ T7079] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 2694.925780][ T7079] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 2695.180433][ T6923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2695.295479][ T7079] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2695.325155][ T7079] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 2695.462457][ T7079] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 2695.480386][ T7085] syzkaller0: entered promiscuous mode [ 2695.492630][ T7085] syzkaller0: entered allmulticast mode [ 2695.498818][ T7079] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 2695.529270][ T6923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2695.581697][ T6923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2695.794634][ T7079] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 2695.803298][ T7079] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 2697.184005][ T6662] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2697.248869][ T7111] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2697.744782][ T6662] usb 4-1: Using ep0 maxpacket: 32 [ 2697.764595][ T6662] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2697.775945][ T6662] usb 4-1: config 0 has no interface number 0 [ 2697.782080][ T6662] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2697.797267][ T6662] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2697.814279][ T6662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2697.848172][ T6662] usb 4-1: Product: syz [ 2697.883236][ T6662] usb 4-1: Manufacturer: syz [ 2697.888439][ T6662] usb 4-1: SerialNumber: syz [ 2697.918673][ T6662] usb 4-1: config 0 descriptor?? [ 2698.645337][ T6662] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2698.657119][ T6662] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2701.558130][ T13] IPVS: stop unused estimator thread 0... [ 2701.636191][ T6662] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 2701.647495][ T6662] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 2701.721372][ T6662] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2701.785424][ T6662] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 2701.819965][ T7149] netlink: 'syz.0.8122': attribute type 1 has an invalid length. [ 2701.835978][ T6662] usb 4-1: USB disconnect, device number 28 [ 2701.947984][ T7149] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2701.989188][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2701.999116][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2702.038410][ T6923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2702.058512][ T7155] bond8: (slave syz_tun): making interface the new active one [ 2702.114374][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8123'. [ 2702.130333][ T7155] bond8: (slave syz_tun): Enslaving as an active interface with an up link [ 2702.231189][ T6923] 8021q: adding VLAN 0 to HW filter on device team0 [ 2702.311177][T32353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2702.318426][T32353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2702.407597][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 2702.414848][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2702.683625][ T6923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2702.862039][ T6923] veth0_vlan: entered promiscuous mode [ 2702.907129][ T6923] veth1_vlan: entered promiscuous mode [ 2703.001793][ T6923] veth0_macvtap: entered promiscuous mode [ 2703.013788][ T6923] veth1_macvtap: entered promiscuous mode [ 2703.023487][ T7171] trusted_key: encrypted_key: key trusted:syz not found [ 2703.077433][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2703.151613][ T6923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2703.210208][T32353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.231058][ T7171] could not allocate digest TFM handle sha3-224-ce [ 2703.255001][T32353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.277942][ T182] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.299905][ T182] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2703.398807][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2703.426335][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2703.485652][T32133] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2703.499486][T13046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2703.515893][T13046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2703.555274][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.620794][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.665659][ T7186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.693146][T32133] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2703.705494][T32133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2703.715754][T32133] usb 3-1: Product: syz [ 2703.720052][T32133] usb 3-1: Manufacturer: syz [ 2703.727424][T32133] usb 3-1: SerialNumber: syz [ 2703.886208][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.949997][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2703.974530][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2704.155771][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2704.257652][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2704.417750][ T7200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2704.457626][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 2704.478127][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2704.539732][T32133] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2704.553083][T32133] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 2704.598313][T32133] usb 3-1: USB disconnect, device number 24 [ 2707.974359][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2708.038725][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2708.116618][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2709.996094][ T7264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2710.258784][ T7264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2710.303157][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2710.362085][ T7268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2710.396463][ T7267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2710.565503][ T7269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2710.859674][ T7274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2710.868727][ T7274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2711.136751][ T7278] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2713.220876][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8152'. [ 2713.239762][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.246347][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.230035][ T7327] libceph: resolve '0..' (ret=-3): failed [ 2714.908031][ T7335] netlink: zone id is out of range [ 2714.994413][ T7335] netlink: zone id is out of range [ 2715.007637][ T7344] tipc: Started in network mode [ 2715.032452][ T7344] tipc: Node identity e6431811fee4, cluster identity 4711 [ 2715.093574][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2715.107302][ T7344] tipc: Enabled bearer , priority 0 [ 2715.215299][ T7335] syzkaller0: entered promiscuous mode [ 2715.220830][ T7335] syzkaller0: entered allmulticast mode [ 2715.225771][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2715.294617][ T7334] tipc: Resetting bearer [ 2715.832458][ T7334] tipc: Disabling bearer [ 2716.094332][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2716.217388][ T7361] program syz.2.8162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2716.310472][ T10] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 2716.320196][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2716.338192][ T10] usb 6-1: Product: syz [ 2716.350249][ T10] usb 6-1: Manufacturer: syz [ 2716.371588][ T10] usb 6-1: SerialNumber: syz [ 2716.426073][ T10] usb 6-1: config 0 descriptor?? [ 2716.493424][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 2717.490649][ T10] gspca_sunplus: reg_w_riv err -71 [ 2717.496843][ T10] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 2717.559180][ T10] usb 6-1: USB disconnect, device number 2 [ 2746.034386][T16652] Bluetooth: hci2: command 0x0406 tx timeout [ 2761.626401][ T13] ------------[ cut here ]------------ [ 2761.632909][ T13] conntrack cleanup blocked for 60s [ 2761.632939][ T13] WARNING: net/netfilter/nf_conntrack_core.c:2512 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:1/13 [ 2761.650850][ T13] Modules linked in: [ 2761.655150][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2761.666095][ T13] Tainted: [L]=SOFTLOCKUP [ 2761.670435][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2761.680575][ T13] Workqueue: netns cleanup_net [ 2761.685496][ T13] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 2761.692284][ T13] Code: 08 48 89 df e8 cd 62 65 f8 4c 8b 3b 49 39 df 74 69 e8 90 20 fb f7 45 31 e4 e9 8e fe ff ff e8 83 20 fb f7 48 8d 3d 9c 53 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 2761.711933][ T13] RSP: 0018:ffffc900001278b0 EFLAGS: 00010293 [ 2761.718059][ T13] RAX: ffffffff89ca807d RBX: ffffc90000127a50 RCX: ffff88801d695b80 [ 2761.726088][ T13] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020d420 [ 2761.734841][ T13] RBP: 0000000000000001 R08: ffff88805dc83403 R09: 1ffff1100bb90680 [ 2761.742824][ T13] R10: dffffc0000000000 R11: ffffed100bb90681 R12: 0000000000000001 [ 2761.751349][ T13] R13: dffffc0000000000 R14: 000000010003c0e6 R15: 000000010003c0e7 [ 2761.759469][ T13] FS: 0000000000000000(0000) GS:ffff88812555d000(0000) knlGS:0000000000000000 [ 2761.768437][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2761.775057][ T13] CR2: 00005571180b7450 CR3: 000000003086c000 CR4: 00000000003526f0 [ 2761.783027][ T13] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2761.791047][ T13] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2761.799103][ T13] Call Trace: [ 2761.802382][ T13] [ 2761.805372][ T13] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 2761.811465][ T13] ops_undo_list+0x52b/0x940 [ 2761.816107][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 2761.821274][ T13] ? idr_destroy+0x218/0x290 [ 2761.826120][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 2761.831251][ T13] cleanup_net+0x56b/0x800 [ 2761.836232][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 2761.841172][ T13] ? process_scheduled_works+0xa8d/0x18c0 [ 2761.847439][ T13] ? process_scheduled_works+0xa8d/0x18c0 [ 2761.853207][ T13] process_scheduled_works+0xb6e/0x18c0 [ 2761.858885][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 2761.864925][ T13] ? assign_work+0x3d5/0x5e0 [ 2761.869535][ T13] worker_thread+0xa53/0xfc0 [ 2761.874704][ T13] kthread+0x388/0x470 [ 2761.878789][ T13] ? __pfx_worker_thread+0x10/0x10 [ 2761.883894][ T13] ? __pfx_kthread+0x10/0x10 [ 2761.888771][ T13] ret_from_fork+0x51e/0xb90 [ 2761.893384][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 2761.898558][ T13] ? __switch_to+0xc7d/0x1450 [ 2761.903280][ T13] ? __pfx_kthread+0x10/0x10 [ 2761.907910][ T13] ret_from_fork_asm+0x1a/0x30 [ 2761.912703][ T13] [ 2761.915759][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2761.923042][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2761.933879][ T13] Tainted: [L]=SOFTLOCKUP [ 2761.938202][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2761.948265][ T13] Workqueue: netns cleanup_net [ 2761.953029][ T13] Call Trace: [ 2761.956314][ T13] [ 2761.959235][ T13] vpanic+0x56c/0xa60 [ 2761.963240][ T13] ? __pfx__printk+0x10/0x10 [ 2761.967815][ T13] ? __pfx_vpanic+0x10/0x10 [ 2761.972311][ T13] ? is_bpf_text_address+0x292/0x2b0 [ 2761.977590][ T13] ? is_bpf_text_address+0x26/0x2b0 [ 2761.982795][ T13] panic+0xc5/0xd0 [ 2761.986516][ T13] ? __pfx_panic+0x10/0x10 [ 2761.990950][ T13] ? ret_from_fork_asm+0x1a/0x30 [ 2761.995915][ T13] __warn+0x315/0x4f0 [ 2761.999940][ T13] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 2762.006189][ T13] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 2762.012349][ T13] __report_bug+0x29a/0x540 [ 2762.016921][ T13] ? __lock_acquire+0x6b5/0x2cf0 [ 2762.021863][ T13] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 2762.028025][ T13] ? __pfx___report_bug+0x10/0x10 [ 2762.033052][ T13] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 2762.039213][ T13] report_bug_entry+0x19a/0x290 [ 2762.044064][ T13] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 2762.050221][ T13] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 2762.056373][ T13] handle_bug+0xce/0x200 [ 2762.060613][ T13] exc_invalid_op+0x1a/0x50 [ 2762.065112][ T13] asm_exc_invalid_op+0x1a/0x20 [ 2762.069958][ T13] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 2762.076719][ T13] Code: 08 48 89 df e8 cd 62 65 f8 4c 8b 3b 49 39 df 74 69 e8 90 20 fb f7 45 31 e4 e9 8e fe ff ff e8 83 20 fb f7 48 8d 3d 9c 53 56 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 2762.096328][ T13] RSP: 0018:ffffc900001278b0 EFLAGS: 00010293 [ 2762.102405][ T13] RAX: ffffffff89ca807d RBX: ffffc90000127a50 RCX: ffff88801d695b80 [ 2762.110372][ T13] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff9020d420 [ 2762.118336][ T13] RBP: 0000000000000001 R08: ffff88805dc83403 R09: 1ffff1100bb90680 [ 2762.126300][ T13] R10: dffffc0000000000 R11: ffffed100bb90681 R12: 0000000000000001 [ 2762.134266][ T13] R13: dffffc0000000000 R14: 000000010003c0e6 R15: 000000010003c0e7 [ 2762.142240][ T13] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 2762.148412][ T13] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 2762.154478][ T13] ops_undo_list+0x52b/0x940 [ 2762.159081][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 2762.164190][ T13] ? idr_destroy+0x218/0x290 [ 2762.168774][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 2762.173883][ T13] cleanup_net+0x56b/0x800 [ 2762.178298][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 2762.183236][ T13] ? process_scheduled_works+0xa8d/0x18c0 [ 2762.188995][ T13] ? process_scheduled_works+0xa8d/0x18c0 [ 2762.194720][ T13] process_scheduled_works+0xb6e/0x18c0 [ 2762.200287][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 2762.206298][ T13] ? assign_work+0x3d5/0x5e0 [ 2762.210891][ T13] worker_thread+0xa53/0xfc0 [ 2762.215499][ T13] kthread+0x388/0x470 [ 2762.219571][ T13] ? __pfx_worker_thread+0x10/0x10 [ 2762.224682][ T13] ? __pfx_kthread+0x10/0x10 [ 2762.229276][ T13] ret_from_fork+0x51e/0xb90 [ 2762.233882][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 2762.238986][ T13] ? __switch_to+0xc7d/0x1450 [ 2762.243659][ T13] ? __pfx_kthread+0x10/0x10 [ 2762.248246][ T13] ret_from_fork_asm+0x1a/0x30 [ 2762.253026][ T13] [ 2762.256300][ T13] Kernel Offset: disabled [ 2762.260612][ T13] Rebooting in 86400 seconds..