last executing test programs: 8.716149403s ago: executing program 3 (id=4418): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000071, 0x0, 0x28cd}]}) 8.397654263s ago: executing program 4 (id=4419): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) open(0x0, 0x80ff, 0x84) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x97, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x32, 0x6, 0x6a8, 0x358, 0x230, 0x358, 0x120, 0x358, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x4}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 8.323354715s ago: executing program 3 (id=4421): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x25, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x800006, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x3, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x6, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000002, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x80000001, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x8000, 0x0, 0x5, 0x7, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4, 0x86, 0xc, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x7538, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x40, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1002, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x50, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) 7.85802378s ago: executing program 0 (id=4422): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x5, 0x0, &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x6}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x7d5, @empty, 0x2}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000040)}) 7.532787511s ago: executing program 0 (id=4426): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f0b2ad1eb9769d74e4f1feff374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724190000006f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0ed9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab778c50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b28448692686ac80d81a89f9c29e276800"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r4, 0x0, 0xff00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8000000, 0x0, 0x32525942, 0x9, 0x0, [{}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x6}, {0x6}], 0x0, 0x8, 0x16, 0x1, 0x7}}) 6.497981644s ago: executing program 3 (id=4428): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1380, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 5.854293984s ago: executing program 3 (id=4433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040532b24004000010203010902690003012b4006080b020101032008090400000001012000092401008009090009090401000001022000090401010101022000090501091000320009082501023000010009040200"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1000}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000980)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x44000) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000300)={"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"}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000009c0)={0x5}) 5.382017319s ago: executing program 4 (id=4434): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) r2 = memfd_create(0x0, 0x0) write(r2, &(0x7f00000000c0)='ic', 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) syz_usb_ep_write(r0, 0x81, 0x6a, &(0x7f0000000180)="ca0d5409d86fa7f86028b36ab7c64046aac015f200b17de3f50bfec6dde5280ef2ce814f74bf9990fc3e2e317c41b03a424a2c51d30f816cfb30eb226205937ff993cbd9cee2ff8efa862388cd157347f88547141282d260ec3b728a9cda408316250943a85e802713f3") preadv(r1, &(0x7f0000002140)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1, 0xffff3702, 0x1) 5.314202251s ago: executing program 1 (id=4435): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) 4.054644401s ago: executing program 0 (id=4439): socket$inet(0x2, 0x2000000000003, 0x2) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 3.733443972s ago: executing program 2 (id=4440): r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 3.617419565s ago: executing program 1 (id=4441): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a32000000001400000011000147"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x2}]}}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) 3.524009268s ago: executing program 1 (id=4442): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x1, 0x2, 0x1, 0x10000, 0x2dcf0a80, 0x1, {0x3, 0x254, 0x8, 0x1, 0x100, 0x1, 0x3, 0x6, 0x5, 0x2000, 0x8, r2, 0x0, 0x1, 0x6}}, {0x3, 0x5, 0x2, 0x6, '.&'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f0000000640)=""/138, 0x8a) 3.289201046s ago: executing program 4 (id=4443): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1380, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 3.233093187s ago: executing program 1 (id=4444): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r0, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r6, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) open(0x0, 0x80ff, 0x84) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x97, 0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x32, 0x6, 0x6a8, 0x358, 0x230, 0x358, 0x120, 0x358, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x4}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 2.682078495s ago: executing program 2 (id=4445): userfaultfd(0x801) creat(&(0x7f0000000000)='./file0\x00', 0x11) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}, 0x1, 0x0, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x44) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000001340)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}]}}, 0x1, 0x0, 0x0) 2.53555228s ago: executing program 4 (id=4446): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xf, 0xfe3c, 0x4, 0x0, {}, {0x4, 0x8, 0x0, 0x4, 0x0, 0x2, "8200"}, 0xe5b1, 0x2, {}, 0x7, 0x0, r1}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64], 0x108}}], 0x1, 0xc040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) poll(&(0x7f0000000000)=[{r3, 0xa}], 0x1, 0xa1) r4 = dup3(r3, r2, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) 2.450953592s ago: executing program 0 (id=4447): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x5, 0x0, &(0x7f00000001c0), 0x0, 0x1, 0x0, 0x6}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x7d5, @empty, 0x2}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000580), &(0x7f0000000040)}) 2.164661311s ago: executing program 0 (id=4448): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000071, 0x0, 0x28cd}]}) 1.89338577s ago: executing program 0 (id=4449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r4, 0x0, 0xff00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0xe8}, 0x1, 0x0, 0x0, 0xc880}, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r2, r1}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x7f, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8000000, 0x0, 0x32525942, 0x9, 0x0, [{}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x6}, {0x6}], 0x0, 0x8, 0x16, 0x1, 0x7}}) 1.779272414s ago: executing program 3 (id=4450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x25, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x800006, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x3, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x6, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000002, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x80000001, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x8000, 0x0, 0x5, 0x7, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4, 0x86, 0xc, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x7538, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x40, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1002, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f0000002900)=ANY=[], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) 1.459137214s ago: executing program 2 (id=4451): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) r1 = syz_clone3(&(0x7f00000003c0)={0x201f0000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140), {0x30}, &(0x7f0000000240)=""/130, 0x82, &(0x7f0000000300)=""/110, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x0, r1, 0x3, &(0x7f0000000440)) socket(0x2, 0x3, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x10000000000000a5, 0x0, [{0x10a, 0x0, 0x4}]}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='unlo'], 0xe) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'macvtap0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) 1.407419295s ago: executing program 4 (id=4452): socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r3, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.173581843s ago: executing program 2 (id=4453): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.140719044s ago: executing program 1 (id=4454): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.060060086s ago: executing program 2 (id=4455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="6c6f636b20696f2b6d659edbee4093d3c95e6d4e639b05dee996d76f2f9f29ea608d00d6f2ad451493d07ae313d63bceaf5d5be81851fffd06c83847599826af1a0b89f26bd0b349080a"], 0xc) write$vga_arbiter(r3, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) socket$kcm(0x21, 0x2, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 826.607444ms ago: executing program 3 (id=4456): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x11800, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000180)={0x0}) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3}, &(0x7f0000000480)=""/82, 0x52, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$read(0xb, r3, &(0x7f0000000640)=""/254, 0xfe) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x6, 0x7fff, 0x5, 0x101, 0x1, 0x7, '\x00', 0x0, r5, 0x1, 0x1, 0x1, 0x6}, 0x50) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x101000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000340)=0x1e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x44, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) 452.224896ms ago: executing program 4 (id=4457): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010450c12510000000000010902"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 366.567268ms ago: executing program 1 (id=4458): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r0 = creat(0x0, 0x5d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) capset(&(0x7f0000000000)={0x20080522}, 0x0) shmget(0x3, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000240), 0x0, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r6, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x400, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) 0s ago: executing program 2 (id=4459): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r1, 0x4, 0x800) read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) kernel console output (not intermixed with test programs): sb_v2: found a 'Intel CE9500 reference design' in warm state [ 1319.087828][T15544] usb 4-1: selecting invalid altsetting 1 [ 1319.108443][T15544] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1319.163016][T15544] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1319.197931][T15544] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1319.213643][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1319.223680][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1319.232693][T15544] usb 4-1: media controller created [ 1319.273308][T17835] input: syz1 as /devices/virtual/input/input56 [ 1319.302713][T15544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1319.370762][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1319.402454][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1319.591618][T15544] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1319.609262][T15544] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1319.637765][T15544] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1319.720420][T17851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1320.253669][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1320.263946][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1320.523384][T15544] usb 4-1: USB disconnect, device number 79 [ 1320.679373][T17859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1320.884617][T17866] device syzkaller0 entered promiscuous mode [ 1321.298224][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1321.307976][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1321.383661][ T4336] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1322.333608][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1322.343532][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1323.359409][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3806'. [ 1323.373660][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1323.383219][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1324.423646][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1324.433263][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1325.308253][T17891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3801'. [ 1325.453595][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1325.463322][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1325.519244][T17931] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1325.663113][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 1325.663128][ T27] audit: type=1326 audit(1779535157.559:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1325.703581][T17937] netlink: 'syz.1.3817': attribute type 10 has an invalid length. [ 1325.742360][ T27] audit: type=1326 audit(1779535157.599:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc00f35d68e code=0x7ffc0000 [ 1325.746125][T17937] team0: Port device macvlan1 added [ 1325.829304][ T27] audit: type=1326 audit(1779535157.599:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1325.900386][ T27] audit: type=1326 audit(1779535157.599:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc00f35d68e code=0x7ffc0000 [ 1325.912633][T17937] syz.1.3817 (17937) used greatest stack depth: 20528 bytes left [ 1325.934670][ T27] audit: type=1326 audit(1779535157.599:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1325.993219][ T27] audit: type=1326 audit(1779535157.599:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1326.025443][ T27] audit: type=1326 audit(1779535157.599:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1326.065934][ T27] audit: type=1326 audit(1779535157.599:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1326.107314][ T27] audit: type=1326 audit(1779535157.599:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1326.143196][ T27] audit: type=1326 audit(1779535157.599:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17936 comm="syz.1.3817" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc00f39ce59 code=0x7ffc0000 [ 1326.369459][T17953] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3822'. [ 1326.503666][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1326.513307][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1326.547448][T17957] device syzkaller0 entered promiscuous mode [ 1327.543599][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1327.553282][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1328.453854][T17990] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1328.574740][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1328.584389][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1329.191537][T17993] usb usb7: usbfs: process 17993 (syz.4.3834) did not claim interface 0 before use [ 1329.623592][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1329.633091][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1330.143746][T15547] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1330.355515][T15547] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1330.365942][T15547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.375104][T15547] usb 5-1: Product: syz [ 1330.379302][T15547] usb 5-1: Manufacturer: syz [ 1330.384421][T15547] usb 5-1: SerialNumber: syz [ 1330.404305][T15547] usb 5-1: config 0 descriptor?? [ 1330.660512][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1330.665544][T15547] usb 5-1: USB disconnect, device number 85 [ 1330.670219][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1330.999381][T17965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1331.693638][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1331.703187][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1331.803659][T15544] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1331.901050][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1331.977012][T18034] device syzkaller0 entered promiscuous mode [ 1331.997206][T15544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1332.021507][T15544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1332.042992][T15544] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1332.064637][T15544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.112126][T15544] usb 2-1: config 0 descriptor?? [ 1332.245604][T18041] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1332.280274][T18042] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3852'. [ 1332.635852][T15544] logitech-djreceiver 0003:046D:C71F.0007: unknown main item tag 0x7 [ 1332.743634][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1332.753479][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1332.820682][T18020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.881730][T15544] logitech-djreceiver 0003:046D:C71F.0007: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 1332.925127][T18020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.053550][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 1333.175760][T15544] usb 2-1: USB disconnect, device number 76 [ 1333.548598][T18054] fido_id[18054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1333.636039][T18071] fuse: Bad value for 'fd' [ 1333.773656][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1333.783173][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1333.899952][T18077] device syzkaller0 entered promiscuous mode [ 1334.191241][T18082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1334.813600][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1334.823492][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1335.236310][T18090] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1335.470867][T18103] bridge_slave_0: default FDB implementation only supports local addresses [ 1335.557989][T18106] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1335.599729][T18109] device syzkaller0 entered promiscuous mode [ 1335.853621][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1335.867448][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1336.285539][T18122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3878'. [ 1336.893656][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1336.903765][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1337.463691][ T4605] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1337.590131][T18145] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1337.663643][ T4605] usb 1-1: Using ep0 maxpacket: 32 [ 1337.670868][ T4605] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.681495][ T4605] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1337.691445][ T4605] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1337.700766][ T4605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.722154][ T4605] usb 1-1: config 0 descriptor?? [ 1337.933638][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1337.943583][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1338.220362][T18157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1338.973616][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1338.983164][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1340.013620][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1340.023362][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1340.250345][T16364] usb 1-1: USB disconnect, device number 101 [ 1340.395278][T18195] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1340.525345][T18198] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3904'. [ 1340.813731][T16364] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1341.053632][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1341.063369][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1341.225024][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'. [ 1341.269652][T18206] tipc: Started in network mode [ 1341.294163][T18206] tipc: Node identity ac1414aa, cluster identity 4711 [ 1341.319840][T18206] tipc: Enabled bearer , priority 10 [ 1341.337145][T18209] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1341.360895][T18209] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1341.897164][T18230] x_tables: duplicate underflow at hook 4 [ 1342.053643][T15547] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1342.093633][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1342.103260][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1342.243762][T15547] usb 5-1: Using ep0 maxpacket: 16 [ 1342.250987][T15547] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.272675][T18239] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1342.295706][T15547] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1342.317518][T15547] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1342.351215][T15547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.400215][T15547] usb 5-1: config 0 descriptor?? [ 1342.427626][T16363] tipc: Node number set to 2886997162 [ 1342.913688][T16364] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1343.104343][T16364] usb 1-1: Using ep0 maxpacket: 32 [ 1343.111818][T16364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.133682][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1343.143346][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1343.194196][T16364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.250980][T16364] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1343.309725][T16364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.365600][T16364] usb 1-1: config 0 descriptor?? [ 1343.402676][T16364] hub 1-1:0.0: USB hub found [ 1343.599829][T16364] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1344.003918][T16364] hid-generic 0003:046D:C31C.0008: unknown main item tag 0x0 [ 1344.040351][T16364] hid-generic 0003:046D:C31C.0008: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1344.173596][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1344.183345][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1344.396419][ T7898] usb 1-1: USB disconnect, device number 103 [ 1344.410594][T18276] device syzkaller0 entered promiscuous mode [ 1344.733300][T15547] usbhid 5-1:0.0: can't add hid device: -71 [ 1344.745617][T15547] usbhid: probe of 5-1:0.0 failed with error -71 [ 1344.785647][T15547] usb 5-1: USB disconnect, device number 86 [ 1345.004778][T18291] x_tables: duplicate underflow at hook 4 [ 1345.881623][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 1345.881638][ T27] audit: type=1326 audit(1779535177.779:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9ef9ce59 code=0x7ffc0000 [ 1345.965279][T18316] netlink: 'syz.3.3935': attribute type 10 has an invalid length. [ 1346.069762][ T27] audit: type=1326 audit(1779535177.839:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d9ef5d68e code=0x7ffc0000 [ 1346.152285][T18320] device syzkaller0 entered promiscuous mode [ 1346.164929][ T27] audit: type=1326 audit(1779535177.839:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9ef9ce59 code=0x7ffc0000 [ 1346.189355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.253598][ C1] net_ratelimit: 2 callbacks suppressed [ 1346.253624][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1346.268865][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1346.307962][ T27] audit: type=1326 audit(1779535177.839:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9ef9ce59 code=0x7ffc0000 [ 1346.473551][ T27] audit: type=1326 audit(1779535177.839:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d9ef9ce59 code=0x7ffc0000 [ 1346.628004][ T27] audit: type=1326 audit(1779535177.839:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9ef9ce59 code=0x7ffc0000 [ 1346.759906][ T27] audit: type=1326 audit(1779535177.839:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d9ef9ce59 code=0x7ffc0000 [ 1346.819736][ T27] audit: type=1326 audit(1779535177.839:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d9ef9e6c7 code=0x7ffc0000 [ 1346.883679][ T27] audit: type=1326 audit(1779535177.839:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4d9ef5d68e code=0x7ffc0000 [ 1346.914400][T18336] fuse: Bad value for 'fd' [ 1346.943540][ T4914] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1347.127713][ T27] audit: type=1326 audit(1779535177.839:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18315 comm="syz.3.3935" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4d9ef5d68e code=0x7ffc0000 [ 1347.173532][ T4914] usb 1-1: Using ep0 maxpacket: 32 [ 1347.180885][ T4914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.238145][ T4914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.280358][ T4914] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1347.293591][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1347.303216][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1347.325767][ T4914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.347402][ T4914] usb 1-1: config 0 descriptor?? [ 1347.362381][ T4914] hub 1-1:0.0: USB hub found [ 1347.561568][ T4914] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1347.965486][ T4914] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 1348.032309][ T4914] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1348.113283][T18358] netlink: 'syz.2.3948': attribute type 10 has an invalid length. [ 1348.333626][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1348.343277][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1348.352999][T18365] device syzkaller0 entered promiscuous mode [ 1348.394192][ T7898] usb 1-1: USB disconnect, device number 104 [ 1348.461629][T18360] fido_id[18360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1349.373613][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1349.383334][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1349.823631][ T7898] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1350.033968][ T7898] usb 5-1: Using ep0 maxpacket: 8 [ 1350.045460][ T7898] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.089688][ T7898] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1350.118513][ T7898] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1350.142350][ T7898] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1350.168534][ T7898] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1350.188700][ T7898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.224843][ T7898] usbtmc 5-1:16.0: bulk endpoints not found [ 1350.413634][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1350.423548][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1350.436048][ T4914] usb 5-1: USB disconnect, device number 87 [ 1351.455595][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1351.465644][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1352.493696][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1352.503386][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1352.587082][T18470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3982'. [ 1353.374074][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1353.533672][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1353.543225][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1353.764093][T18477] device syzkaller0 entered promiscuous mode [ 1354.326188][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1354.376093][T18493] usb usb7: usbfs: process 18493 (syz.4.3993) did not claim interface 0 before use [ 1354.478349][T18497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3994'. [ 1354.917106][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1354.926869][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1355.434922][T18510] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1356.023981][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1356.033713][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1356.974265][T15547] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1356.983490][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1356.993121][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1357.163491][T15547] usb 5-1: Using ep0 maxpacket: 32 [ 1357.172771][T15547] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1357.202800][T15547] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.231525][T15547] usb 5-1: Product: syz [ 1357.233626][T16364] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1357.241660][T15547] usb 5-1: Manufacturer: syz [ 1357.261915][T15547] usb 5-1: SerialNumber: syz [ 1357.435688][T16364] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1357.450476][T16364] usb 1-1: config 8 has an invalid interface number: 141 but max is 0 [ 1357.469601][T16364] usb 1-1: config 8 has no interface number 0 [ 1357.503740][T16364] usb 1-1: config 8 interface 141 has no altsetting 0 [ 1357.574356][T16364] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=f2.dd [ 1357.608337][T16364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.652575][T16364] usb 1-1: Product: syz [ 1357.675241][T16364] usb 1-1: Manufacturer: syz [ 1357.709471][T18541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1357.735142][T16364] usb 1-1: SerialNumber: syz [ 1358.093502][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1358.103260][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1358.189347][T16364] int51x1: probe of 1-1:8.141 failed with error -71 [ 1358.395243][T16364] usb 1-1: USB disconnect, device number 105 [ 1359.133638][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1359.143459][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1359.700397][ T4914] usb 5-1: USB disconnect, device number 88 [ 1359.753747][T15544] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1359.842455][T18574] usb usb7: usbfs: process 18574 (syz.4.4025) did not claim interface 0 before use [ 1359.955883][T15544] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1359.967252][T15544] usb 1-1: config 0 has no interface number 0 [ 1359.994614][T15544] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1360.032436][T15544] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.052895][T15544] usb 1-1: Product: syz [ 1360.059828][T15544] usb 1-1: Manufacturer: syz [ 1360.078182][T15544] usb 1-1: SerialNumber: syz [ 1360.091914][T15544] usb 1-1: config 0 descriptor?? [ 1360.093560][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1360.106504][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1360.915530][T15544] dvb_usb_ec168: probe of 1-1:0.1 failed with error -71 [ 1360.961710][T15544] usb 1-1: USB disconnect, device number 106 [ 1361.213499][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1361.223482][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1361.466888][T18607] usb usb7: usbfs: process 18607 (syz.3.4036) did not claim interface 0 before use [ 1361.688963][T18613] loop2: detected capacity change from 0 to 7 [ 1361.706805][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.718168][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.742205][T16608] Dev loop2: unable to read RDB block 7 [ 1361.749575][T16608] loop2: unable to read partition table [ 1361.764700][T16608] loop2: partition table beyond EOD, truncated [ 1361.795379][T18613] Dev loop2: unable to read RDB block 7 [ 1361.802300][T18613] loop2: unable to read partition table [ 1361.866180][T18613] loop2: partition table beyond EOD, truncated [ 1361.913259][T18613] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1362.253667][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1362.263375][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1362.383609][ T4605] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1362.579645][ T4605] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1362.658235][ T4605] usb 2-1: config 0 has no interface number 0 [ 1362.781206][ T4605] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1362.875777][ T4605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.884984][ T4605] usb 2-1: Product: syz [ 1362.889181][ T4605] usb 2-1: Manufacturer: syz [ 1362.894245][ T4605] usb 2-1: SerialNumber: syz [ 1362.906380][ T4605] usb 2-1: config 0 descriptor?? [ 1363.018034][T18627] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1363.117684][ T4605] dvb_usb_ec168: probe of 2-1:0.1 failed with error -71 [ 1363.138345][ T4605] usb 2-1: USB disconnect, device number 77 [ 1363.213496][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1363.223060][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1363.623755][T15544] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1363.761607][T18640] usb usb7: usbfs: process 18640 (syz.2.4049) did not claim interface 0 before use [ 1363.823649][T15544] usb 4-1: Using ep0 maxpacket: 16 [ 1363.830603][T15544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.843732][T15544] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.902400][T15544] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1363.939532][T15544] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1363.951887][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 1363.961743][T15544] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.983303][T15544] usb 4-1: config 0 descriptor?? [ 1364.166347][T18652] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4053'. [ 1364.333634][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1364.343319][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1364.343694][ T7900] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1364.412752][T15544] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input57 [ 1364.526802][T15544] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1364.653200][T15544] usb 4-1: USB disconnect, device number 80 [ 1364.846116][T18657] fido_id[18657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1365.228987][T18667] input: syz1 as /devices/virtual/input/input58 [ 1365.373748][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1365.383458][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1365.493777][T18675] usb usb7: usbfs: process 18675 (syz.3.4061) did not claim interface 0 before use [ 1365.573701][T18678] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1365.622810][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1366.333496][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1366.343272][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1366.716408][T18705] netlink: 'syz.2.4071': attribute type 75 has an invalid length. [ 1366.729023][T18705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1367.163726][T15544] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 1367.355121][T15544] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.374018][T16364] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1367.391006][T15544] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1367.399849][T15544] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1367.410041][T15544] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1367.418566][T15544] usb 4-1: Product: syz [ 1367.422745][T15544] usb 4-1: Manufacturer: syz [ 1367.427892][T15544] usb 4-1: SerialNumber: syz [ 1367.433892][ T4605] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1367.436396][T15544] usb 4-1: config 0 descriptor?? [ 1367.445099][T18724] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1367.456595][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1367.466223][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1367.492061][T15544] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 1367.554819][T16608] udevd[16608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1367.583752][T16364] usb 5-1: Using ep0 maxpacket: 16 [ 1367.591313][T16364] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.612779][T16364] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1367.620861][ T4605] usb 3-1: Using ep0 maxpacket: 8 [ 1367.633623][T16364] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1367.644359][ T4605] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1367.664091][T16364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.672525][ T4605] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1367.701178][T16364] usb 5-1: config 0 descriptor?? [ 1367.706841][ T4605] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1367.717870][ T4605] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1367.731610][ T4605] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1367.746782][ T4605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.763654][ T4914] usb 4-1: USB disconnect, device number 81 [ 1367.774359][ T4605] usbtmc 3-1:16.0: bulk endpoints not found [ 1367.971921][ T4605] usb 3-1: USB disconnect, device number 79 [ 1368.493815][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1368.503718][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1368.568366][T18736] loop2: detected capacity change from 0 to 7 [ 1368.575622][T18736] Dev loop2: unable to read RDB block 7 [ 1368.581344][T18736] loop2: unable to read partition table [ 1368.587306][T18736] loop2: partition table beyond EOD, truncated [ 1368.611282][T18736] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1369.463519][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1369.473590][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1370.113522][T15545] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1370.133178][T16364] usbhid 5-1:0.0: can't add hid device: -71 [ 1370.150066][T16364] usbhid: probe of 5-1:0.0 failed with error -71 [ 1370.209455][T16364] usb 5-1: USB disconnect, device number 89 [ 1370.306471][T15545] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.322210][T18767] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1370.333025][T15545] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1370.356699][T15545] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1370.366356][T15545] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1370.375053][T15545] usb 3-1: Product: syz [ 1370.379262][T15545] usb 3-1: Manufacturer: syz [ 1370.384835][T15545] usb 3-1: SerialNumber: syz [ 1370.392149][T15545] usb 3-1: config 0 descriptor?? [ 1370.424918][T15545] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1370.457565][T16608] udevd[16608]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1370.583626][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1370.593241][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1370.615191][ T4605] usb 3-1: USB disconnect, device number 80 [ 1370.633502][ T7900] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1370.823718][ T7900] usb 1-1: Using ep0 maxpacket: 8 [ 1370.834635][ T7900] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1370.850505][ T7900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1370.860438][ T7900] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1370.870981][ T7900] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1370.880923][ T7900] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.894794][ T7900] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1370.904286][ T7900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.917571][ T7900] usbtmc: probe of 1-1:16.0 failed with error -22 [ 1371.121843][ T4605] usb 1-1: USB disconnect, device number 109 [ 1371.280043][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4100'. [ 1371.507598][T18789] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4104'. [ 1371.623924][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1371.633628][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1371.783816][T16364] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1372.005243][T16364] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1372.021757][T16364] usb 2-1: config 0 has no interface number 0 [ 1372.053537][T16364] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1372.084135][T16364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.108583][T16364] usb 2-1: Product: syz [ 1372.130333][T16364] usb 2-1: Manufacturer: syz [ 1372.160307][T16364] usb 2-1: SerialNumber: syz [ 1372.189955][T16364] usb 2-1: config 0 descriptor?? [ 1372.422085][T16364] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1372.449452][T16364] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1372.484501][T16364] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1372.501224][T16364] usb 2-1: media controller created [ 1372.541364][T16364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1372.551226][T16365] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 1372.573666][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1372.583323][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1372.825554][T16365] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.858414][T16365] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1372.882464][T16365] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1372.898699][T16365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.925067][T16365] usb 3-1: config 0 descriptor?? [ 1372.947241][T16365] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1372.966734][T16365] dvb-usb: bulk message failed: -22 (3/0) [ 1373.010786][T16365] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1373.049504][T16365] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1373.067929][T16365] usb 3-1: media controller created [ 1373.084965][T16365] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1373.121970][T16365] dvb-usb: bulk message failed: -22 (6/0) [ 1373.130108][T16365] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1373.151295][T16365] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input60 [ 1373.170977][T18808] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1373.202203][T16365] dvb-usb: schedule remote query interval to 150 msecs. [ 1373.211013][T16365] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1373.365827][ T4605] dvb-usb: bulk message failed: -22 (1/0) [ 1373.372005][ T4605] dvb-usb: error while querying for an remote control event. [ 1373.563721][T16365] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1373.581657][ T4605] dvb-usb: bulk message failed: -22 (1/0) [ 1373.589547][ T4605] dvb-usb: error while querying for an remote control event. [ 1373.693561][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1373.703533][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1373.754247][T16364] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1373.790889][T16365] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.791648][T15545] usb 3-1: USB disconnect, device number 81 [ 1373.809815][T16365] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1373.835755][T16365] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1373.845535][T16365] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1373.848595][T15545] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1373.861253][T16364] usb 2-1: USB disconnect, device number 78 [ 1373.878297][T16365] usb 4-1: Product: syz [ 1373.890844][T16365] usb 4-1: Manufacturer: syz [ 1373.897065][T16365] usb 4-1: SerialNumber: syz [ 1373.907592][T16365] usb 4-1: config 0 descriptor?? [ 1373.934484][T16365] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 1373.962985][T16608] udevd[16608]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1374.130740][T16364] usb 4-1: USB disconnect, device number 82 [ 1374.583621][T16365] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1374.605564][T18828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4117'. [ 1374.743717][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1374.753681][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1374.793893][T16365] usb 2-1: Using ep0 maxpacket: 8 [ 1374.803340][T16365] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1374.832537][T16365] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1374.843076][T16365] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1374.856049][T16365] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1374.866485][T16365] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1374.895353][T16365] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1374.906221][T16365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.922196][T16365] usbtmc: probe of 2-1:16.0 failed with error -22 [ 1375.125766][T16365] usb 2-1: USB disconnect, device number 79 [ 1375.613733][T16364] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1375.693704][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1375.703595][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1375.813553][T16364] usb 1-1: Using ep0 maxpacket: 32 [ 1375.825339][T16364] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1375.918728][T18851] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1375.944511][T16364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.003360][T16364] usb 1-1: Product: syz [ 1376.020757][T16364] usb 1-1: Manufacturer: syz [ 1376.036097][T16364] usb 1-1: SerialNumber: syz [ 1376.094622][T15545] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1376.111329][T18828] team0: Port device macvlan1 removed [ 1376.274814][T16364] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1376.285494][T15545] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1376.301342][T16364] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1376.308632][T15545] usb 2-1: config 0 has no interface number 0 [ 1376.330998][T15545] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1376.341752][T16364] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 1376.353211][T15545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.362801][T15545] usb 2-1: Product: syz [ 1376.374113][T15545] usb 2-1: Manufacturer: syz [ 1376.376393][T16364] usb 1-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 1376.378878][T15545] usb 2-1: SerialNumber: syz [ 1376.412495][T15545] usb 2-1: config 0 descriptor?? [ 1376.522742][T16364] usb 1-1: USB disconnect, device number 110 [ 1376.629026][T15545] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1376.652386][T15545] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1376.682203][T15545] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1376.720322][T15545] usb 2-1: media controller created [ 1376.810263][T15545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1376.823545][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1376.833689][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1377.012304][T18860] input: syz1 as /devices/virtual/input/input62 [ 1377.783528][ T4605] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1377.853580][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1377.863536][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1377.957253][T18877] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1377.963838][T15545] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1377.964638][T18877] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1377.978529][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.985706][ T4605] usb 1-1: Using ep0 maxpacket: 32 [ 1377.995287][ T4605] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1378.047271][ T4605] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1378.059309][T15545] usb 2-1: USB disconnect, device number 80 [ 1378.101471][ T4605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.101545][T18877] vhci_hcd vhci_hcd.0: Device attached [ 1378.158252][ T4605] usb 1-1: config 0 descriptor?? [ 1378.171790][T18879] vhci_hcd: connection closed [ 1378.185128][T16263] vhci_hcd: stop threads [ 1378.215494][ T4605] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1378.229513][T16263] vhci_hcd: release socket [ 1378.252005][T16263] vhci_hcd: disconnect device [ 1378.313731][T15544] vhci_hcd: vhci_device speed not set [ 1378.358322][T18882] netlink: 'syz.2.4135': attribute type 10 has an invalid length. [ 1378.477213][T18885] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1378.813524][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1378.823220][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1379.165783][T18912] netlink: 'syz.4.4146': attribute type 10 has an invalid length. [ 1379.180819][T18912] team0: Port device macvlan1 added [ 1379.513505][T15545] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1379.710109][T15545] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1379.719733][T15545] usb 5-1: config 0 has no interface number 0 [ 1379.734835][T15545] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1379.754132][T15545] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.782685][T15545] usb 5-1: Product: syz [ 1379.792821][T15545] usb 5-1: Manufacturer: syz [ 1379.813082][T15545] usb 5-1: SerialNumber: syz [ 1379.841002][T15545] usb 5-1: config 0 descriptor?? [ 1379.933519][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1379.943503][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1380.071883][T15545] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1380.099975][T15545] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1380.117525][T15545] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1380.137166][T15545] usb 5-1: media controller created [ 1380.156166][T15545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1380.973784][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1380.983822][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1381.190531][T16364] usb 1-1: USB disconnect, device number 111 [ 1381.294126][T15545] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1381.427056][T15545] usb 5-1: USB disconnect, device number 90 [ 1381.531602][T18950] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1381.883582][T16364] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1381.933600][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1381.943491][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1382.085479][T16364] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1382.093632][T15547] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1382.103617][T16364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.129124][T16364] usb 2-1: config 0 descriptor?? [ 1382.159534][T16364] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1382.294420][T18968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4166'. [ 1382.316120][T18969] device syzkaller0 entered promiscuous mode [ 1382.556922][T16364] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1382.683639][T16363] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1382.923948][T16363] usb 1-1: Using ep0 maxpacket: 32 [ 1383.025414][T16363] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1383.053490][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1383.063530][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1383.239746][T16364] gspca_cpia1: usb_control_msg 05, error -71 [ 1383.248768][T16364] cpia1 2-1:0.0: unexpected systemstate: 00 [ 1383.255804][T16363] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1383.269693][T16363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.271432][T16364] usb 2-1: USB disconnect, device number 82 [ 1383.295548][T16363] usb 1-1: config 0 descriptor?? [ 1383.319337][T16363] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1383.521068][T18988] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4174'. [ 1383.759848][T16363] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1383.975860][T16363] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1383.993894][T16363] usb 5-1: config 0 has no interface number 0 [ 1384.002890][T16363] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1384.033351][T16363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.043536][T16363] usb 5-1: Product: syz [ 1384.061023][T16363] usb 5-1: Manufacturer: syz [ 1384.086780][T16363] usb 5-1: SerialNumber: syz [ 1384.093646][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1384.103260][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1384.135007][T16363] usb 5-1: config 0 descriptor?? [ 1384.183038][T19000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4177'. [ 1384.355109][T19006] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1384.355485][T16363] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1384.365563][T19005] device syzkaller0 entered promiscuous mode [ 1384.391244][T16363] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1384.405656][T16363] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1384.414300][T16363] usb 5-1: media controller created [ 1384.433076][T16363] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1384.713529][T15547] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1384.893631][T15547] usb 3-1: Using ep0 maxpacket: 16 [ 1384.908675][T15547] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1384.922716][T15547] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1384.938340][T15547] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1384.960875][T15547] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.982172][T15547] usb 3-1: Product: syz [ 1384.989420][T15547] usb 3-1: Manufacturer: syz [ 1385.006830][T15547] usb 3-1: SerialNumber: syz [ 1385.063479][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1385.073472][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1385.373729][ T4604] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1385.468078][T15547] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1385.495327][T15547] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1385.516645][ T7898] usb 1-1: USB disconnect, device number 112 [ 1385.533920][T16363] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1385.603071][T15547] usb 3-1: USB disconnect, device number 84 [ 1386.173543][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1386.183543][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1386.690934][T16363] usb 5-1: USB disconnect, device number 91 [ 1386.804077][T19038] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1387.213619][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1387.223432][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1387.462128][T19048] device bond0 entered promiscuous mode [ 1387.488288][T19048] device bond_slave_0 entered promiscuous mode [ 1387.513660][T19048] device bond_slave_1 entered promiscuous mode [ 1388.133592][T15547] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1388.173487][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1388.183522][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1388.953928][T15547] usb 3-1: Using ep0 maxpacket: 32 [ 1388.960559][T15547] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1388.992913][T15547] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1389.063523][T15547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.137751][T15547] usb 3-1: config 0 descriptor?? [ 1389.156304][T15547] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1389.293529][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1389.303229][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1389.495324][ T7900] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1389.696711][ T7900] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1389.715423][ T7900] usb 2-1: config 0 has no interface number 0 [ 1389.754357][ T7900] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1389.807574][ T7900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.851599][ T7900] usb 2-1: Product: syz [ 1389.868046][ T7900] usb 2-1: Manufacturer: syz [ 1389.887909][ T7900] usb 2-1: SerialNumber: syz [ 1389.919940][ T7900] usb 2-1: config 0 descriptor?? [ 1390.148641][ T7900] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1390.175727][ T7900] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1390.193534][T16364] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1390.224716][ T7900] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1390.232823][ T7900] usb 2-1: media controller created [ 1390.302203][ T7900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1390.333632][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1390.343191][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1390.396492][T16364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1390.423123][T16364] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1390.457935][T16364] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1390.481546][T16364] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1390.520562][T16364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.554431][T16364] usb 4-1: Product: syz [ 1390.558654][T16364] usb 4-1: Manufacturer: syz [ 1390.572910][T16364] usb 4-1: SerialNumber: syz [ 1390.594462][T16364] usb 4-1: selecting invalid altsetting 1 [ 1390.618272][T16364] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1390.672811][T16596] udevd[16596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1390.799969][T19101] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1391.072354][ T4605] usb 4-1: USB disconnect, device number 83 [ 1391.126591][T16364] usb 3-1: USB disconnect, device number 85 [ 1391.293491][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1391.303274][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1391.483799][ T7900] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1391.545219][ T7900] usb 2-1: USB disconnect, device number 83 [ 1392.413980][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1392.414734][ T7900] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1392.423785][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1392.733705][ T7900] usb 4-1: Using ep0 maxpacket: 16 [ 1392.740974][ T7900] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.777506][ T7900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1392.798729][ T7900] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1392.825801][ T7900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.881195][ T7900] usb 4-1: config 0 descriptor?? [ 1393.177868][T19148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4221'. [ 1393.319085][ T7900] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1393.357890][ T7900] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1393.410328][T19151] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1393.416987][T19151] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1393.427309][ T7900] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1393.450394][T19151] vhci_hcd vhci_hcd.0: Device attached [ 1393.456507][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1393.456784][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1393.480572][ T7900] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1393.495710][T19153] vhci_hcd: connection closed [ 1393.499007][ T11] vhci_hcd: stop threads [ 1393.500317][ T7900] nzxt-smart2 0003:1E71:2009.000B: unknown main item tag 0x0 [ 1393.522663][ T11] vhci_hcd: release socket [ 1393.528707][ T7900] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1393.533068][ T11] vhci_hcd: disconnect device [ 1393.562685][ C0] usb 4-1: input irq status -75 received [ 1393.778612][T16363] usb 4-1: USB disconnect, device number 84 [ 1393.866560][T19160] fido_id[19160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1394.413489][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1394.423166][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1394.433883][ T4605] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1394.571290][T19178] loop7: detected capacity change from 0 to 7 [ 1394.582424][T16608] Dev loop7: unable to read RDB block 7 [ 1394.588642][T16608] loop7: unable to read partition table [ 1394.595437][T16608] loop7: partition table beyond EOD, truncated [ 1394.606158][T19178] Dev loop7: unable to read RDB block 7 [ 1394.612062][T19178] loop7: unable to read partition table [ 1394.619881][ T4605] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1394.633459][ T4605] usb 1-1: config 0 has no interface number 0 [ 1394.638452][T16263] loop: Write error at byte offset 7, length 3584. [ 1394.644044][T19178] loop7: partition table beyond EOD, truncated [ 1394.657392][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 1394.667246][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 1394.675356][ T4605] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1394.677188][T19178] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1394.721573][ T4605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.751679][ T4605] usb 1-1: Product: syz [ 1394.761849][ T4605] usb 1-1: Manufacturer: syz [ 1394.768881][ T4605] usb 1-1: SerialNumber: syz [ 1394.784216][ T4605] usb 1-1: config 0 descriptor?? [ 1394.789849][T15547] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1394.985610][T15547] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1394.992368][ T4605] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1395.011183][T15547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.032074][ T4605] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1395.085316][T15547] usb 3-1: config 0 descriptor?? [ 1395.098358][ T4605] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1395.111846][T15547] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1395.144833][ T4605] usb 1-1: media controller created [ 1395.295547][ T4605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1395.507481][T15547] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1395.533488][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1395.543202][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1396.126472][T15547] gspca_cpia1: usb_control_msg 05, error -71 [ 1396.139193][T15547] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1396.193289][T15547] usb 3-1: USB disconnect, device number 86 [ 1396.285074][ T4605] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1396.451381][ T4605] usb 1-1: USB disconnect, device number 113 [ 1396.573706][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1396.583615][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1397.183679][T15547] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1397.202927][T19220] device syzkaller0 entered promiscuous mode [ 1397.403506][T15547] usb 5-1: Using ep0 maxpacket: 16 [ 1397.410728][T15547] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1397.423937][T15547] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1397.431602][T15547] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1397.441153][T15547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.457628][T15547] usb 5-1: config 0 descriptor?? [ 1397.534328][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1397.543947][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1397.892765][T15547] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1397.923548][T15547] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1397.971825][T15547] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1398.004371][T15547] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1398.063654][T15547] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1398.121604][T15547] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1398.157276][ C0] usb 5-1: input irq status -75 received [ 1398.653492][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1398.663219][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1398.763695][T15547] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1398.967475][T15547] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1398.987057][T15547] usb 2-1: config 0 has no interface number 0 [ 1399.021957][T15547] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1399.060138][T15547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.094749][T15547] usb 2-1: Product: syz [ 1399.104492][T15547] usb 2-1: Manufacturer: syz [ 1399.109266][T15547] usb 2-1: SerialNumber: syz [ 1399.157357][T15547] usb 2-1: config 0 descriptor?? [ 1399.393230][T15547] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1399.420815][T15547] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1399.444275][T15547] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1399.454018][T15547] usb 2-1: media controller created [ 1399.496014][T15547] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1399.638148][T19256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4254'. [ 1399.693632][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1399.703287][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1399.981402][T16363] usb 5-1: USB disconnect, device number 92 [ 1400.653658][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1400.653990][T15547] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1400.663349][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1400.781305][T19279] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4262'. [ 1400.811454][T15547] usb 2-1: USB disconnect, device number 84 [ 1401.773736][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1401.783491][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1401.783501][ T7900] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1401.865149][T16364] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1402.005489][ T7900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1402.036428][ T7900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.073935][T16364] usb 4-1: Using ep0 maxpacket: 16 [ 1402.087207][T16364] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.118298][ T7900] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1402.139406][T16364] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1402.183868][ T7900] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1402.193831][T16364] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1402.223298][ T7900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.231586][T16364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.239860][ T7900] usb 2-1: Product: syz [ 1402.270289][ T7900] usb 2-1: Manufacturer: syz [ 1402.272026][T16364] usb 4-1: config 0 descriptor?? [ 1402.290806][ T7900] usb 2-1: SerialNumber: syz [ 1402.730790][T16364] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 1402.760898][T16364] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 1402.794951][T16364] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 1402.813811][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1402.823535][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1402.852997][T16364] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 1402.883143][T16364] nzxt-smart2 0003:1E71:2009.000D: unknown main item tag 0x0 [ 1402.926060][T16364] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1403.006773][ C1] usb 4-1: input irq status -75 received [ 1403.773505][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1403.783184][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1404.563543][ T7898] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1404.725717][ T7900] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1404.739832][ T7900] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1404.762286][T16363] usb 4-1: USB disconnect, device number 85 [ 1404.788347][ T7898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1404.809264][ T7898] usb 3-1: config 0 has no interface number 0 [ 1404.827943][ T7900] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1404.850460][ T7898] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1404.886793][ T7900] usb 2-1: USB disconnect, device number 85 [ 1404.893533][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1404.903227][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1404.907214][ T7898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.982493][ T7898] usb 3-1: Product: syz [ 1404.992428][ T7898] usb 3-1: Manufacturer: syz [ 1405.002144][ T7898] usb 3-1: SerialNumber: syz [ 1405.022546][ T7898] usb 3-1: config 0 descriptor?? [ 1405.134598][T16598] udevd[16598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1405.251558][ T7898] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1405.279013][ T7898] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1405.303760][ T7898] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1405.314803][ T7898] usb 3-1: media controller created [ 1405.365857][ T7898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1405.933612][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1405.943589][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1406.504238][ T7898] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1406.893510][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1406.903193][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1407.233483][T16363] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1407.435635][T16363] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1407.459860][T16363] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.576703][T16363] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1407.600683][ T7898] usb 3-1: USB disconnect, device number 87 [ 1407.625110][T16363] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1407.687392][T16363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.702959][T16363] usb 5-1: Product: syz [ 1407.709610][T16363] usb 5-1: Manufacturer: syz [ 1407.721225][T16363] usb 5-1: SerialNumber: syz [ 1408.013515][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1408.023546][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1409.053610][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1409.063517][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1409.903694][ T4605] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1409.942850][T16363] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1410.013482][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1410.023210][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1410.051267][T16363] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1410.105225][ T4605] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1410.125453][ T4605] usb 3-1: config 0 has no interface number 0 [ 1410.222999][ T4605] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1410.255526][T16363] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 1410.268165][ T4605] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.287514][T19417] input: syz1 as /devices/virtual/input/input69 [ 1410.325016][T16363] usb 5-1: USB disconnect, device number 93 [ 1410.341909][ T4605] usb 3-1: Product: syz [ 1410.354107][T16598] udevd[16598]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1410.408249][ T4605] usb 3-1: Manufacturer: syz [ 1410.424117][ T4605] usb 3-1: SerialNumber: syz [ 1410.443630][ T7900] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1410.447094][ T4605] usb 3-1: config 0 descriptor?? [ 1410.655420][ T7900] usb 1-1: Using ep0 maxpacket: 16 [ 1410.667891][ T4605] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1410.670291][ T7900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.695773][ T7900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.709886][ T7900] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1410.729206][ T7900] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1410.739839][ T7900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.755908][ T7900] usb 1-1: config 0 descriptor?? [ 1410.775413][ T4605] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1410.957188][ T4605] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1411.054124][ T4605] usb 3-1: media controller created [ 1411.132357][ T4605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1411.140823][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1411.141164][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1411.175052][ T7900] usbhid 1-1:0.0: can't add hid device: -71 [ 1411.181916][ T7900] usbhid: probe of 1-1:0.0 failed with error -71 [ 1411.239318][ T7900] usb 1-1: USB disconnect, device number 114 [ 1411.883569][T15544] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1411.963799][ T4605] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1412.073592][T15544] usb 2-1: Using ep0 maxpacket: 16 [ 1412.082563][T15544] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1412.106945][T15544] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.121697][T15544] usb 2-1: Product: syz [ 1412.129429][T15544] usb 2-1: Manufacturer: syz [ 1412.141493][T15544] usb 2-1: SerialNumber: syz [ 1412.160961][T15544] usb 2-1: config 0 descriptor?? [ 1412.173703][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1412.183346][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1412.473717][ T7900] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1412.572295][T15544] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1412.584159][T15544] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1412.594424][T15544] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1412.602530][T15544] usb 2-1: media controller created [ 1412.624131][T15544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1412.679131][ T7900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1412.695615][ T7900] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.708983][ T7900] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1412.735371][ T7900] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1412.756933][ T7900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.765783][ T7900] usb 4-1: Product: syz [ 1412.770070][ T7900] usb 4-1: Manufacturer: syz [ 1412.776552][ T7900] usb 4-1: SerialNumber: syz [ 1412.786884][T15544] zl10353_read_register: readreg error (reg=127, ret==0) [ 1412.801887][T15544] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1412.855866][T15544] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1412.871029][T15544] usb 2-1: USB disconnect, device number 86 [ 1412.922449][T15544] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1412.984178][ T4605] usb 3-1: USB disconnect, device number 88 [ 1413.133476][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1413.143470][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1413.251188][T19461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4318'. [ 1414.253501][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1414.263229][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1414.773541][T15545] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1414.973886][T15545] usb 1-1: Using ep0 maxpacket: 16 [ 1414.981461][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.178211][T15545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.210664][ T7900] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1415.293536][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1415.303164][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1415.338522][ T7900] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1415.348939][T15545] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1415.425264][T15545] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1415.465412][T15545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.496346][ T7900] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 1415.518571][T15545] usb 1-1: config 0 descriptor?? [ 1415.556866][ T7900] usb 4-1: USB disconnect, device number 86 [ 1415.578511][T16598] udevd[16598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.990426][T15545] usbhid 1-1:0.0: can't add hid device: -71 [ 1415.997702][T15545] usbhid: probe of 1-1:0.0 failed with error -71 [ 1416.027847][T15545] usb 1-1: USB disconnect, device number 115 [ 1416.063560][ T7898] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1416.253490][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1416.263253][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1416.283463][ T7898] usb 5-1: Using ep0 maxpacket: 32 [ 1416.297187][ T7898] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1416.344123][ T7898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.380491][ T7898] usb 5-1: Product: syz [ 1416.393664][ T7898] usb 5-1: Manufacturer: syz [ 1416.401832][ T7898] usb 5-1: SerialNumber: syz [ 1416.411208][ T7898] usb 5-1: config 0 descriptor?? [ 1416.421692][ T7898] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1416.433850][ T7898] dvb-usb: bulk message failed: -22 (4/0) [ 1416.439727][ T7898] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1416.451011][ T7898] dvb-usb: bulk message failed: -22 (5/0) [ 1416.457182][ T7898] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1416.468614][T19492] loop2: detected capacity change from 0 to 7 [ 1416.478722][ T7898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1416.489769][T16596] Dev loop2: unable to read RDB block 7 [ 1416.500672][T16596] loop2: unable to read partition table [ 1416.519204][T16596] loop2: partition table beyond EOD, truncated [ 1416.529550][ T7898] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1416.540993][T19492] Dev loop2: unable to read RDB block 7 [ 1416.551046][T19492] loop2: unable to read partition table [ 1416.557006][ T7898] usb 5-1: media controller created [ 1416.565787][T19492] loop2: partition table beyond EOD, truncated [ 1416.572100][T19492] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1416.606320][ T7898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1416.623578][T19489] dvb-usb: bulk message failed: -22 (7/0) [ 1416.633552][T19489] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1416.664589][T19489] ttusb2: i2c transfer failed. [ 1416.681690][ T7898] usb 5-1: selecting invalid altsetting 3 [ 1416.694968][ T7898] ttusb2: set interface to alts=3 failed [ 1416.793511][T16364] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1416.861093][ T7898] DVB: Unable to find symbol tda10086_attach() [ 1416.871587][ T7898] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1416.892626][T19505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.924533][ T7898] dvb-usb: bulk message failed: -22 (4/0) [ 1416.930622][ T7898] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1416.968008][ T7898] dvb-usb: bulk message failed: -22 (5/0) [ 1416.991592][ T7898] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1417.014925][T16364] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1417.027604][T16364] usb 2-1: config 0 has no interface number 0 [ 1417.044277][ T7898] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1417.076257][ T7898] usb 5-1: USB disconnect, device number 94 [ 1417.108071][T16364] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1417.132014][ T7898] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1417.220571][T16364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.260055][T19505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.367953][T19509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4331'. [ 1417.383657][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1417.393207][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1417.465272][T16263] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1418.152689][T16364] usb 2-1: Product: syz [ 1418.157326][T16364] usb 2-1: Manufacturer: syz [ 1418.162323][T16364] usb 2-1: SerialNumber: syz [ 1418.169045][T16364] usb 2-1: config 0 descriptor?? [ 1418.378044][T16364] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1418.401516][T16364] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1418.413493][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1418.423229][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1418.474238][T16364] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1418.533593][T16364] usb 2-1: media controller created [ 1418.562031][T16364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1418.953594][ T7898] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1418.996602][T19521] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4336'. [ 1419.061082][T19521] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4336'. [ 1419.146387][ T7898] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1419.164611][ T7898] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.231916][ T7898] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1419.276356][ T7898] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1419.299408][ T7898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.322473][ T7898] usb 5-1: Product: syz [ 1419.349943][ T7898] usb 5-1: Manufacturer: syz [ 1419.370443][ T7898] usb 5-1: SerialNumber: syz [ 1419.373486][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1419.384924][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1419.643819][T16364] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1419.761934][T16364] usb 2-1: USB disconnect, device number 87 [ 1420.493485][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1420.504296][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1420.813510][ T4605] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1421.023461][ T4605] usb 2-1: Using ep0 maxpacket: 16 [ 1421.031788][ T4605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.163725][ T4605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.287079][ T4605] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1421.474970][ T4605] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1421.533560][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1421.543123][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1421.591598][ T4605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.651071][ T4605] usb 2-1: config 0 descriptor?? [ 1422.127942][T19548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4343'. [ 1422.139379][ T4605] usbhid 2-1:0.0: can't add hid device: -71 [ 1422.493471][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1422.503095][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1422.881660][ T4605] usbhid: probe of 2-1:0.0 failed with error -71 [ 1422.889761][ T4605] usb 2-1: USB disconnect, device number 88 [ 1423.136802][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.143285][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.242901][T19554] fuse: Bad value for 'fd' [ 1423.313715][T16364] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1423.350850][T19557] binder: 19552:19557 ioctl 80105873 200000000140 returned -22 [ 1423.410600][T19559] binder: 19552:19559 unknown command 1074553620 [ 1423.438646][T19559] binder: 19552:19559 ioctl c0306201 200000000640 returned -22 [ 1423.503460][T16364] usb 4-1: Using ep0 maxpacket: 32 [ 1423.510945][T16364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.571185][T19563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1423.600771][T16364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.613474][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1423.623163][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1423.672450][T16364] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1423.691708][T16364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.729264][T16364] usb 4-1: config 0 descriptor?? [ 1423.733972][T15545] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1423.938612][T15545] usb 2-1: config 0 has an invalid interface number: 147 but max is 0 [ 1423.956115][T15545] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.994415][ T7898] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 1424.010067][T15545] usb 2-1: config 0 has no interface number 0 [ 1424.019015][T15545] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1424.030695][T15545] usb 2-1: config 0 interface 147 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1424.045790][T15545] usb 2-1: config 0 interface 147 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1424.061923][ T7898] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 1424.119152][T15545] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.03 [ 1424.147983][T15545] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.157527][ T7898] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 1424.172799][T16364] usbhid 4-1:0.0: can't add hid device: -71 [ 1424.183000][T16364] usbhid: probe of 4-1:0.0 failed with error -71 [ 1424.226315][T15545] usb 2-1: Product: syz [ 1424.233755][ T7898] usb 5-1: USB disconnect, device number 95 [ 1424.254363][T15545] usb 2-1: Manufacturer: syz [ 1424.260322][T16599] udevd[16599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1424.278647][T15545] usb 2-1: SerialNumber: syz [ 1424.291206][T15545] usb 2-1: config 0 descriptor?? [ 1424.298178][T19557] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1424.374520][T16364] usb 4-1: USB disconnect, device number 87 [ 1424.444951][T15545] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1424.514111][ T11] usb 2-1: Failed to submit usb control message: -71 [ 1424.549243][ T11] usb 2-1: unable to send the bmi data to the device: -71 [ 1424.568865][T15545] usb 2-1: USB disconnect, device number 89 [ 1424.596554][ T11] usb 2-1: unable to get target info from device [ 1424.630220][ T11] usb 2-1: could not get target info (-71) [ 1424.653734][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1424.654839][ T11] usb 2-1: could not probe fw (-71) [ 1424.663456][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1424.935632][T19578] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1424.942211][T19578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1424.957444][T19578] vhci_hcd vhci_hcd.0: Device attached [ 1425.035326][T19586] x_tables: duplicate underflow at hook 4 [ 1425.073592][ T7900] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1425.233710][T15545] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1425.241475][T15547] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 1425.275962][ T7900] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1425.284621][ T7900] usb 1-1: config 0 has no interface number 0 [ 1425.294933][ T7900] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1425.329504][ T7900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.359066][ T7900] usb 1-1: Product: syz [ 1425.378510][ T7900] usb 1-1: Manufacturer: syz [ 1425.400309][ T7900] usb 1-1: SerialNumber: syz [ 1425.422736][ T7900] usb 1-1: config 0 descriptor?? [ 1425.438017][T15545] usb 4-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 1425.464364][T15545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.504263][T15545] usb 4-1: Product: syz [ 1425.527855][T15545] usb 4-1: Manufacturer: syz [ 1425.552573][T15545] usb 4-1: SerialNumber: syz [ 1425.623533][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1425.633626][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1425.664265][ T7900] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1425.710615][ T7900] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1425.724009][ T7900] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1425.733602][ T7900] usb 1-1: media controller created [ 1425.790352][T19583] vhci_hcd: connection reset by peer [ 1425.801447][T15545] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1425.803959][ T4336] vhci_hcd: stop threads [ 1425.835910][ T7900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1425.880731][T15545] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1425.892874][ T4336] vhci_hcd: release socket [ 1425.925399][T15545] usb 4-1: USB disconnect, device number 88 [ 1426.009678][T19592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4354'. [ 1426.733473][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1426.743511][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1426.813510][ T4336] vhci_hcd: disconnect device [ 1427.014853][ T7900] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1427.064032][T16596] udevd[16596]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1427.195165][ T7900] usb 1-1: USB disconnect, device number 116 [ 1427.263679][T16364] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1427.473510][T16364] usb 2-1: Using ep0 maxpacket: 16 [ 1427.487011][T16364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.518812][T16364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.555601][T16364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1427.587654][T16364] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1427.607228][T16364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.631010][T16364] usb 2-1: config 0 descriptor?? [ 1427.751619][T19612] input: syz1 as /devices/virtual/input/input73 [ 1427.773459][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1427.783096][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1427.954133][ T7898] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1428.052727][T16364] usbhid 2-1:0.0: can't add hid device: -71 [ 1428.073658][T16364] usbhid: probe of 2-1:0.0 failed with error -71 [ 1428.107226][T16364] usb 2-1: USB disconnect, device number 90 [ 1428.145863][ T7898] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1428.186841][ T7898] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.237780][ T7898] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1428.266243][ T7898] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1428.293497][ T7898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.311120][ T7898] usb 4-1: Product: syz [ 1428.316895][ T7898] usb 4-1: Manufacturer: syz [ 1428.321532][ T7898] usb 4-1: SerialNumber: syz [ 1428.533456][T16363] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1428.723545][T16363] usb 1-1: Using ep0 maxpacket: 32 [ 1428.731352][T16363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.742568][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1428.742811][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1428.835719][T16363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.911764][T16363] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1428.991035][T19630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4365'. [ 1429.849101][T16363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.857544][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1429.857852][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1429.994482][T16363] usb 1-1: config 0 descriptor?? [ 1430.085413][T19634] x_tables: duplicate underflow at hook 4 [ 1430.413517][T15547] vhci_hcd: vhci_device speed not set [ 1430.458353][T16363] usbhid 1-1:0.0: can't add hid device: -71 [ 1430.468762][T16363] usbhid: probe of 1-1:0.0 failed with error -71 [ 1430.477016][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1430.571113][T16363] usb 1-1: USB disconnect, device number 117 [ 1430.893682][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1430.903659][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1431.160362][T19650] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1431.167017][T19650] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1431.258100][T19650] vhci_hcd vhci_hcd.0: Device attached [ 1431.380506][ T7898] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1431.442757][ T7898] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1431.491541][ T7898] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 1431.493520][T16363] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1431.523522][T16364] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 1431.541019][ T7898] usb 4-1: USB disconnect, device number 89 [ 1431.541909][T16598] udevd[16598]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1431.583758][T15547] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1431.800412][T15547] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1431.813322][T15547] usb 1-1: config 0 has no interface number 0 [ 1431.823474][T16363] usb 5-1: device descriptor read/64, error -71 [ 1431.848993][T15547] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1431.853511][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1431.867824][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1431.908239][T15547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.955339][T15547] usb 1-1: Product: syz [ 1431.972214][T15547] usb 1-1: Manufacturer: syz [ 1431.985598][T15547] usb 1-1: SerialNumber: syz [ 1432.010762][T15547] usb 1-1: config 0 descriptor?? [ 1432.094213][T16363] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1432.269220][T15547] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1432.273525][T16363] usb 5-1: device descriptor read/64, error -71 [ 1432.299277][T15547] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1432.318242][T15547] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1432.331708][T15547] usb 1-1: media controller created [ 1432.351224][T15547] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1432.433639][T16363] usb usb5-port1: attempt power cycle [ 1432.773660][T15545] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1432.853653][T16363] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1432.904140][T16363] usb 5-1: device descriptor read/8, error -71 [ 1432.953497][T15545] usb 2-1: Using ep0 maxpacket: 16 [ 1432.962256][T15545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.973471][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1432.983069][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1433.001122][T15545] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1433.036440][T15545] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1433.087479][T15545] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1433.109139][T15545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.154931][T15545] usb 2-1: config 0 descriptor?? [ 1433.193453][T16363] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1433.234340][T16363] usb 5-1: device descriptor read/8, error -71 [ 1433.354080][T16363] usb usb5-port1: unable to enumerate USB device [ 1433.454810][T15547] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1433.562134][T15547] usb 1-1: USB disconnect, device number 118 [ 1433.570318][T15545] usbhid 2-1:0.0: can't add hid device: -71 [ 1433.578798][T15545] usbhid: probe of 2-1:0.0 failed with error -71 [ 1433.606135][T15545] usb 2-1: USB disconnect, device number 91 [ 1433.915554][T19652] vhci_hcd: connection reset by peer [ 1433.921166][ T41] vhci_hcd: stop threads [ 1433.926056][ T41] vhci_hcd: release socket [ 1433.943646][ T41] vhci_hcd: disconnect device [ 1434.013507][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1434.023205][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1434.177730][T19677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4377'. [ 1434.973455][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1434.984123][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1435.213715][T16365] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1435.263562][T16363] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1435.353483][T15544] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1435.393759][T16365] usb 4-1: Using ep0 maxpacket: 32 [ 1435.400994][T16365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1435.412921][T16365] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1435.423954][T16365] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1435.433743][T16365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.451007][T16365] usb 4-1: config 0 descriptor?? [ 1435.456447][T16363] usb 5-1: Using ep0 maxpacket: 32 [ 1435.475136][T16363] usb 5-1: config 0 has no interfaces? [ 1435.495026][T16363] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1435.504695][T16363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.513274][T16363] usb 5-1: Product: syz [ 1435.529415][T16363] usb 5-1: Manufacturer: syz [ 1435.535149][T16363] usb 5-1: SerialNumber: syz [ 1435.551486][T16363] usb 5-1: config 0 descriptor?? [ 1435.567124][T15544] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1435.585226][T15544] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.602761][T15544] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1435.618056][T15544] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1435.628426][T15544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.636903][T15544] usb 3-1: Product: syz [ 1435.641627][T15544] usb 3-1: Manufacturer: syz [ 1435.647308][T15544] usb 3-1: SerialNumber: syz [ 1435.778186][T19688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.793085][T19688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1435.829695][T19698] x_tables: duplicate underflow at hook 4 [ 1435.887023][T16365] usbhid 4-1:0.0: can't add hid device: -71 [ 1435.903729][T16365] usbhid: probe of 4-1:0.0 failed with error -71 [ 1436.015523][T16365] usb 4-1: USB disconnect, device number 90 [ 1436.093475][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1436.103475][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1436.684503][T19710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4387'. [ 1436.733731][T16364] vhci_hcd: vhci_device speed not set [ 1437.073573][ T7898] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1437.143469][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1437.153507][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1437.286179][ T7898] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1437.309776][ T7898] usb 4-1: config 0 has no interface number 0 [ 1437.344862][ T7898] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1437.460703][ T7898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.572498][ T7898] usb 4-1: Product: syz [ 1437.610920][ T7898] usb 4-1: Manufacturer: syz [ 1437.658270][ T7898] usb 4-1: SerialNumber: syz [ 1437.744660][ T7898] usb 4-1: config 0 descriptor?? [ 1437.994876][ T7898] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1438.030818][ T7898] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1438.088103][ T7898] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1438.093521][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1438.105786][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1438.105981][ T7898] usb 4-1: media controller created [ 1438.155472][ T7898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1438.166444][T15545] usb 5-1: USB disconnect, device number 100 [ 1438.385851][T19727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4392'. [ 1439.213490][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1439.223429][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1439.323781][ T7898] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1439.415531][ T7898] usb 4-1: USB disconnect, device number 91 [ 1440.247340][T15544] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1440.254597][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1440.254896][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1440.353479][ T7898] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1440.367549][T15544] snd-usb-audio: probe of 3-1:1.1 failed with error -22 [ 1440.416158][T15544] snd-usb-audio: probe of 3-1:1.2 failed with error -22 [ 1440.465621][T15544] usb 3-1: USB disconnect, device number 89 [ 1440.490176][T16598] udevd[16598]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1440.545149][ T7898] usb 4-1: Using ep0 maxpacket: 32 [ 1440.562553][ T7898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.581284][T19747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4396'. [ 1440.626097][ T7898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1440.646091][ T7898] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1440.656033][ T7898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.678199][ T7898] usb 4-1: config 0 descriptor?? [ 1441.096888][ T7898] usbhid 4-1:0.0: can't add hid device: -71 [ 1441.104252][ T7898] usbhid: probe of 4-1:0.0 failed with error -71 [ 1441.149037][ T7898] usb 4-1: USB disconnect, device number 92 [ 1441.213492][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1441.223621][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1441.451238][T19762] x_tables: duplicate underflow at hook 4 [ 1441.803779][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4404'. [ 1442.333510][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1442.343168][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1443.183506][T16364] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1443.203729][ T7898] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1443.373599][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1443.376191][T16364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1443.383309][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1443.402417][T16364] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.424981][ T7898] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1443.453656][ T7898] usb 4-1: config 0 has no interface number 0 [ 1443.455493][T16364] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1443.480656][T16364] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1443.492489][T16364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.495662][ T7898] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1443.519824][T16364] usb 2-1: Product: syz [ 1443.524932][T16364] usb 2-1: Manufacturer: syz [ 1443.529770][T16364] usb 2-1: SerialNumber: syz [ 1443.533778][ T7898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.573302][T19786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4409'. [ 1443.578623][ T7898] usb 4-1: Product: syz [ 1443.602689][ T7898] usb 4-1: Manufacturer: syz [ 1443.617043][ T7898] usb 4-1: SerialNumber: syz [ 1443.651193][ T7898] usb 4-1: config 0 descriptor?? [ 1443.865120][ T7898] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1443.885572][ T7898] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1443.915805][ T7898] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1443.936028][ T7898] usb 4-1: media controller created [ 1443.972234][ T7898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1444.333599][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1444.343282][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1445.144012][ T7898] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1445.253889][ T7898] usb 4-1: USB disconnect, device number 93 [ 1445.453497][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1445.463227][T15545] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1445.463518][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1445.663862][T15545] usb 3-1: Using ep0 maxpacket: 32 [ 1445.678037][T15545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1445.732701][T15545] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.894835][T19803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1446.493511][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1446.503587][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1446.675419][T15545] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1446.755847][T15545] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.824839][T15545] usb 3-1: config 0 descriptor?? [ 1447.278970][T15545] usbhid 3-1:0.0: can't add hid device: -71 [ 1447.297681][T15545] usbhid: probe of 3-1:0.0 failed with error -71 [ 1447.339655][T15545] usb 3-1: USB disconnect, device number 90 [ 1447.453477][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1447.463076][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1447.643337][T19823] x_tables: duplicate underflow at hook 4 [ 1447.749347][T16364] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1447.827574][T16364] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 1448.069571][T16364] snd-usb-audio: probe of 2-1:1.2 failed with error -22 [ 1448.153604][T16364] usb 2-1: USB disconnect, device number 92 [ 1448.175311][T16598] udevd[16598]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1448.312149][T19837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1448.494366][ T4605] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1448.573467][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1448.583530][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1449.295435][ T4605] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1449.314245][ T4605] usb 1-1: config 0 has no interface number 0 [ 1449.331697][T19843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1449.334992][ T4605] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1449.360703][ T4605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.370181][ T4605] usb 1-1: Product: syz [ 1449.384120][ T4605] usb 1-1: Manufacturer: syz [ 1449.393910][ T4605] usb 1-1: SerialNumber: syz [ 1449.413984][ T4605] usb 1-1: config 0 descriptor?? [ 1449.494497][T19848] fuse: Bad value for 'fd' [ 1449.613455][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1449.623269][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1449.641940][ T4605] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1449.688860][ T4605] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1449.769721][ T4605] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1449.808623][ T4605] usb 1-1: media controller created [ 1449.867288][ T4605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1450.013749][T16265] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1450.183646][T16364] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1450.406688][T16364] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1450.423072][T16364] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.433431][T16364] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1450.447179][T16364] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1450.456635][T16364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.464980][T16364] usb 4-1: Product: syz [ 1450.469461][T16364] usb 4-1: Manufacturer: syz [ 1450.475236][T16364] usb 4-1: SerialNumber: syz [ 1450.493574][T15545] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1450.579623][T15544] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1450.583449][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1450.597011][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1450.683493][T15545] usb 5-1: Using ep0 maxpacket: 16 [ 1450.690774][T15545] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.743800][T15545] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1450.750525][T15545] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1450.763621][T15544] usb 2-1: Using ep0 maxpacket: 32 [ 1450.771073][T15544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1450.788861][T15545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.797696][T15544] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1450.839945][T15545] usb 5-1: config 0 descriptor?? [ 1450.846888][T15544] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1450.897855][T15544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.934223][ T4605] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1450.942802][T15544] usb 2-1: config 0 descriptor?? [ 1451.084782][ T4605] usb 1-1: USB disconnect, device number 119 [ 1451.275535][T15545] nzxt-smart2 0003:1E71:2009.000E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1451.364377][T15544] usbhid 2-1:0.0: can't add hid device: -71 [ 1451.382030][T15544] usbhid: probe of 2-1:0.0 failed with error -71 [ 1451.442894][T15544] usb 2-1: USB disconnect, device number 93 [ 1451.683856][T15544] usb 5-1: USB disconnect, device number 101 [ 1451.693453][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1451.703085][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1451.728408][T19872] fido_id[19872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1451.864969][ T7898] usb 1-1: new full-speed USB device number 120 using dummy_hcd [ 1451.950635][T19876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4441'. [ 1452.065694][ T7898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.095763][ T7898] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1452.140668][ T7898] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1452.181730][ T7898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.243946][ T7898] usb 1-1: config 0 descriptor?? [ 1452.291749][ T7898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1452.329673][ T7898] dvb-usb: bulk message failed: -22 (3/0) [ 1452.395697][ T7898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1452.453878][T19874] dvb-usb: bulk message failed: -22 (2/0) [ 1452.472349][ T7898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1452.507363][ T7898] usb 1-1: media controller created [ 1452.549776][ T7898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1452.572111][ T7898] dvb-usb: bulk message failed: -22 (6/0) [ 1452.579745][ T7898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1452.598033][ T7898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input77 [ 1452.656588][ T7898] dvb-usb: schedule remote query interval to 150 msecs. [ 1452.680396][ T7898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1452.733479][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1452.743278][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1452.755957][ T7898] usb 1-1: USB disconnect, device number 120 [ 1452.834371][T19887] x_tables: duplicate underflow at hook 4 [ 1452.846215][ T7898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1453.693538][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1453.703204][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1453.770212][T16364] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1453.819666][T16364] snd-usb-audio: probe of 4-1:1.1 failed with error -22 [ 1453.907850][T16364] snd-usb-audio: probe of 4-1:1.2 failed with error -22 [ 1453.957225][T16364] usb 4-1: USB disconnect, device number 94 [ 1453.964619][T16610] udevd[16610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1454.103657][ T7900] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1454.294965][ T7900] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1454.312564][ T7900] usb 1-1: config 0 has no interface number 0 [ 1454.334840][ T7900] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1454.353531][ T7900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.384192][ T7900] usb 1-1: Product: syz [ 1454.409163][ T7900] usb 1-1: Manufacturer: syz [ 1454.425312][ T7900] usb 1-1: SerialNumber: syz [ 1454.441626][ T7900] usb 1-1: config 0 descriptor?? [ 1454.501064][T19917] loop2: detected capacity change from 0 to 7 [ 1454.513924][T16596] Dev loop2: unable to read RDB block 7 [ 1454.520146][T16596] loop2: unable to read partition table [ 1454.526202][T16596] loop2: partition table beyond EOD, truncated [ 1454.537660][T19917] Dev loop2: unable to read RDB block 7 [ 1454.543614][T19917] loop2: unable to read partition table [ 1454.549629][T19917] loop2: partition table beyond EOD, truncated [ 1454.583879][T19917] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1454.650758][ T7900] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1454.661414][ T7900] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1454.673341][ T7900] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1454.681717][ T7900] usb 1-1: media controller created [ 1454.702822][T19920] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1454.713996][ T7900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1454.813462][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1454.823159][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1455.453701][ T4605] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1455.664677][ T4605] usb 5-1: Using ep0 maxpacket: 16 [ 1455.672762][ T4605] usb 5-1: config 0 has no interfaces? [ 1455.682049][ T4605] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 1455.692707][ T4605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.712215][ T4605] usb 5-1: config 0 descriptor?? [ 1455.778471][ T7900] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1455.853449][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1455.863114][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1455.876251][ T7900] usb 1-1: USB disconnect, device number 121 [ 1455.923542][T16365] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1455.985132][T19938] [ 1455.987527][T19938] ============================================ [ 1455.993849][T19938] WARNING: possible recursive locking detected [ 1456.000368][T19938] syzkaller #0 Not tainted [ 1456.004808][T19938] -------------------------------------------- [ 1456.011039][T19938] syz.4.4457/19938 is trying to acquire lock: [ 1456.017182][T19938] ffffffff8d3f39b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 1456.027439][T19938] [ 1456.027439][T19938] but task is already holding lock: [ 1456.034789][T19938] ffffffff8d3f39b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 1456.045014][T19938] [ 1456.045014][T19938] other info that might help us debug this: [ 1456.053757][T19938] Possible unsafe locking scenario: [ 1456.053757][T19938] [ 1456.061212][T19938] CPU0 [ 1456.064669][T19938] ---- [ 1456.067961][T19938] lock(qp_broker_list.mutex); [ 1456.073077][T19938] lock(qp_broker_list.mutex); [ 1456.077916][T19938] [ 1456.077916][T19938] *** DEADLOCK *** [ 1456.077916][T19938] [ 1456.086159][T19938] May be due to missing lock nesting notation [ 1456.086159][T19938] [ 1456.094771][T19938] 1 lock held by syz.4.4457/19938: [ 1456.099876][T19938] #0: ffffffff8d3f39b8 (qp_broker_list.mutex){+.+.}-{3:3}, at: vmci_qp_broker_detach+0x114/0xf00 [ 1456.110754][T19938] [ 1456.110754][T19938] stack backtrace: [ 1456.116727][T19938] CPU: 0 PID: 19938 Comm: syz.4.4457 Not tainted syzkaller #0 [ 1456.124179][T19938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1456.134409][T19938] Call Trace: [ 1456.137778][T19938] [ 1456.140876][T19938] dump_stack_lvl+0x188/0x24e [ 1456.145665][T19938] ? show_regs_print_info+0x12/0x12 [ 1456.150901][T19938] ? load_image+0x400/0x400 [ 1456.155613][T19938] __lock_acquire+0x123e/0x7d10 [ 1456.160509][T19938] ? __lock_acquire+0x7d10/0x7d10 [ 1456.165672][T19938] ? verify_lock_unused+0x140/0x140 [ 1456.170879][T19938] ? mark_lock+0x94/0x320 [ 1456.175406][T19938] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1456.181384][T19938] ? lock_chain_count+0x20/0x20 [ 1456.186231][T19938] lock_acquire+0x1bb/0x4a0 [ 1456.190849][T19938] ? vmci_qp_broker_detach+0x114/0xf00 [ 1456.193559][T16365] usb 3-1: Using ep0 maxpacket: 32 [ 1456.196400][T19938] ? __might_sleep+0xd0/0xd0 [ 1456.206352][T19938] ? read_lock_is_recursive+0x10/0x10 [ 1456.211840][T19938] ? kasan_set_track+0x60/0x70 [ 1456.216685][T19938] ? kasan_save_free_info+0x2d/0x50 [ 1456.221871][T19938] ? ____kasan_slab_free+0x126/0x1e0 [ 1456.227188][T19938] ? slab_free_freelist_hook+0x131/0x1a0 [ 1456.232827][T19938] __mutex_lock+0x12d/0xaf0 [ 1456.237426][T19938] ? vmci_qp_broker_detach+0x114/0xf00 [ 1456.243142][T19938] ? exit_to_user_mode_loop+0xe6/0x110 [ 1456.248670][T19938] ? exit_to_user_mode_prepare+0xee/0x180 [ 1456.254520][T19938] ? do_syscall_64+0x58/0xa0 [ 1456.259115][T19938] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.265175][T19938] ? vmci_qp_broker_detach+0x114/0xf00 [ 1456.270625][T19938] ? mutex_lock_nested+0x10/0x10 [ 1456.275555][T19938] ? mark_lock+0x94/0x320 [ 1456.279873][T19938] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1456.285933][T19938] vmci_qp_broker_detach+0x114/0xf00 [ 1456.291245][T19938] ? kasan_quarantine_put+0xd4/0x220 [ 1456.296522][T19938] ? lockdep_hardirqs_on+0x94/0x140 [ 1456.301859][T19938] ? qp_notify_peer+0x1f0/0x1f0 [ 1456.306703][T19938] ? slab_free_freelist_hook+0x131/0x1a0 [ 1456.312336][T19938] ? vmci_ctx_put+0x5ca/0xc40 [ 1456.317214][T19938] ? __kmem_cache_free+0xb6/0x1f0 [ 1456.322233][T19938] vmci_ctx_put+0x629/0xc40 [ 1456.326815][T19938] ? vmci_ctx_put+0x13e/0xc40 [ 1456.331576][T19938] ? preempt_schedule_common+0xa5/0xd0 [ 1456.337026][T19938] ? vmci_ctx_destroy+0xf0/0xf0 [ 1456.342384][T19938] ? preempt_schedule+0xbc/0xd0 [ 1456.347325][T19938] ? schedule_preempt_disabled+0x20/0x20 [ 1456.353365][T19938] ? __lock_acquire+0x7d10/0x7d10 [ 1456.358397][T19938] ? __rwlock_init+0x140/0x140 [ 1456.363150][T19938] vmci_ctx_enqueue_datagram+0x3a7/0x420 [ 1456.368779][T19938] vmci_datagram_dispatch+0x449/0xc10 [ 1456.374146][T19938] ? vmci_is_context_owner+0xd0/0xd0 [ 1456.379518][T19938] vmci_qp_broker_detach+0x8ca/0xf00 [ 1456.384892][T19938] ? qp_notify_peer+0x1f0/0x1f0 [ 1456.389731][T19938] ? vmci_ctx_put+0x5ca/0xc40 [ 1456.394401][T19938] ? __kmem_cache_free+0xb6/0x1f0 [ 1456.399415][T19938] vmci_ctx_put+0x629/0xc40 [ 1456.403901][T19938] ? vmci_ctx_put+0x13e/0xc40 [ 1456.408573][T19938] ? vmci_ctx_destroy+0xf0/0xf0 [ 1456.413413][T19938] ? do_raw_spin_lock+0x128/0x2f0 [ 1456.418423][T19938] ? __rwlock_init+0x140/0x140 [ 1456.423164][T19938] ? do_raw_spin_unlock+0x11d/0x230 [ 1456.428538][T19938] vmci_host_close+0x97/0x160 [ 1456.433305][T19938] ? vmci_host_open+0xe0/0xe0 [ 1456.437974][T19938] __fput+0x22c/0x920 [ 1456.442032][T19938] task_work_run+0x1d0/0x260 [ 1456.446735][T19938] ? task_work_cancel+0x220/0x220 [ 1456.451851][T19938] ? exit_to_user_mode_loop+0x3b/0x110 [ 1456.457333][T19938] exit_to_user_mode_loop+0xe6/0x110 [ 1456.462698][T19938] exit_to_user_mode_prepare+0xee/0x180 [ 1456.468247][T19938] syscall_exit_to_user_mode+0x16/0x40 [ 1456.473808][T19938] do_syscall_64+0x58/0xa0 [ 1456.478242][T19938] ? clear_bhb_loop+0x60/0xb0 [ 1456.482902][T19938] ? clear_bhb_loop+0x60/0xb0 [ 1456.487737][T19938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.493632][T19938] RIP: 0033:0x7f92a919ce59 [ 1456.498136][T19938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.517967][T19938] RSP: 002b:00007f92a73f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1456.526373][T19938] RAX: 0000000000000000 RBX: 00007f92a9416090 RCX: 00007f92a919ce59 [ 1456.534341][T19938] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000008 [ 1456.542649][T19938] RBP: 00007f92a9232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1456.550704][T19938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.558745][T19938] R13: 00007f92a9416128 R14: 00007f92a9416090 R15: 00007ffe22cd58a8 [ 1456.566703][T19938] [ 1456.569865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.589644][T16365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.632674][T16365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.670597][T16365] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1456.708383][T16365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.758616][T16365] usb 3-1: config 0 descriptor?? [ 1456.813475][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1456.823597][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1457.186831][T16365] usbhid 3-1:0.0: can't add hid device: -71 [ 1457.193066][T16365] usbhid: probe of 3-1:0.0 failed with error -71 [ 1457.201611][T16365] usb 3-1: USB disconnect, device number 91 [ 1457.933476][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1457.943129][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1458.974877][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1458.984348][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1459.933571][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1459.943260][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1461.053502][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1461.063179][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1462.093440][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1462.103066][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1463.053558][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1463.063252][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.4 [ 1464.173452][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1464.183212][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.2 [ 1465.213510][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5 [ 1465.223018][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.30.1.5