last executing test programs: 13.937818544s ago: executing program 3 (id=3193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x8, [0x46, 0x8001, 0xfdd, 0x6, 0x9, 0x1, 0x5, 0x8]}}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) unshare(0x6a040080) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0x400}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200"], 0x124}}, 0x0) 12.791037048s ago: executing program 2 (id=3194): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x22000) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x4) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) link(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') r4 = socket$unix(0x1, 0x5, 0x0) unshare(0x4020400) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) set_mempolicy(0x4000, &(0x7f0000000140)=0x1, 0x3) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x259fdbfe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x0, 0x3}}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000380)={0x3, 0x3, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 12.327575481s ago: executing program 2 (id=3195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000680)=""/4090, 0xffa}, {0x0}, {&(0x7f0000000500)=""/43, 0x2b}], 0x4}, 0x7}], 0x3, 0x2000, 0x0) 12.160600618s ago: executing program 2 (id=3196): r0 = syz_usb_connect$hid(0x6, 0x1a5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0099827100"/18, @ANYRES32=r3, @ANYBLOB="20005080110001004abee33908f8eef16f162471f40000000500020002000000"], 0x3c}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="00000d004000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143041, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r7) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') epoll_create1(0x80000) 10.723043085s ago: executing program 1 (id=3203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) 10.447429816s ago: executing program 3 (id=3204): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', 0x90000, 0x21) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$uinput(0xffffff9c, &(0x7f0000000300), 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r3, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grop_id=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92df8") statx(r4, 0x0, 0x6000, 0x20, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat(r5, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000f00015b097ead85847817353d2dbad0", 0x1a, 0xfffffffffffffffd) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="401800002367ac87b38087ed945d029dcf"], 0x28}}, 0x24) socket$nl_netfilter(0x10, 0x3, 0xc) 10.399745076s ago: executing program 1 (id=3205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 9.519320765s ago: executing program 1 (id=3207): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}, 0xaf}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)=""/198, 0xc6}, {&(0x7f0000000680)=""/4090, 0xffa}, {0x0}, {&(0x7f0000000500)=""/43, 0x2b}], 0x4}, 0x7}], 0x3, 0x2000, 0x0) 8.822717861s ago: executing program 1 (id=3208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c) shutdown(r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x18, 0x0, 0xe, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in6=@private2, 0x29, 0x10, 0x10}]}, 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newaddr={0x20, 0x14, 0x800, 0x70bd2c, 0x25dfdbff, {0xa, 0x38, 0x2, 0xfe, r10}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x24}]}, 0x20}}, 0x0) 7.85029025s ago: executing program 2 (id=3210): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)={0x27, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}}, 0x1}, 0x8c) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003afe0620e60403000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) listen(r0, 0x0) syz_emit_ethernet(0xb1, &(0x7f00000007c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0x7e, 0x42, "f1e2", "79c58138730c55a64614e5d101fdd862eeec2cee9549d6000aad03a0112b9531b365ad7551a25a5e4698fdd2027f901796fca30f5e30cf883b95eefa10981bf3baf42f0ac9ec8bbf7d32c4dab722052ea18e9221b43efe1f8196eb43798da4a56ee76148c40ead06440959affe9d6670033ee6c2290c0394ce1c39d6d576e15cef260516e651b957562528d832e39c21899ba56d939e3ab2341ed1"}}}}}, &(0x7f0000000880)={0x1, 0x2, [0x2ec, 0x233, 0x4ad, 0x594]}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x4b0000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0xd34b, 0x114}, 0x10, 0x4}) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000004c0)=ANY=[@ANYBLOB="0003a7000000a7039997d4a47bee037d18cef3e071e7c8e75e3daeb9cfce482f738a9a77f7e1b76100ca4b76d6a509f2d058b9c7f902b3034a3aa65674975189a25da8302a18fb9823d896edf675f97d3a6a7621fbfcd5211d1f39090000000000000013e99e567f739d0b0f237b83bb75329eec5c5d28115ab28084c2df13f2eaff85847f2fb3c236e3380b10b215644c72eb092668911be5189d0243cb1ec64fdc7d4f46dd89e2d8b03a03d6"]}, &(0x7f0000000780)={0x1c, &(0x7f00000003c0)={0x0, 0x16}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000600)=ANY=[@ANYBLOB="2000c000000000be07464b298bdac5bd7861f4c44f353408dc4b61e3700a3dab7ffea6791b35334eb2ea4ccdf712d416b035c0f787e42e3b6a90a469132e6e3f0dc3d1d7e4bf3c839b1533057b808eaa8589967f5af8e43642be4ef700fb0da62274cec0de1401307f6de32c7395c55459ca2291a1ed47c41a828927e2d4a0886344b7f16afb3ee4dae1d59e4a6fc72799a7da610e7a8632772ab6074c66a7457d81dbf5314e626d425b2ec2ab28d572e1697696edf192339cee7a43d54f96715a3c98b930d1"], &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x9}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x80000000}]) io_pgetevents(r5, 0xd4, 0x0, &(0x7f0000000140), &(0x7f0000000300), 0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000580)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB='fd<', @ANYRESHEX=r6, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x1a1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x40, r10, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff, 0xffff, 0x1, 0x6, 0x2, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.091405674s ago: executing program 4 (id=3212): r0 = socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x110a, 0x80001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r8 = io_uring_setup(0xf04, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) r9 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r8], 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) 6.588415629s ago: executing program 3 (id=3214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251500000068000180140002006970366772653000000000000000000008000100", @ANYBLOB="d90744eeec3e2983382f11aaa6b537ae07de80dc0f4a9ab0d26688d6d3e4c5922d9a06c4fa51c279997aec7221f67fc337", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="5de57ec74ad4ff9180287c421afb465af85d912863583f9cc00cfc146b9169180288d83043fa399edeff048ad75b782b55cbdfcc55d7821743e0a0a3e07805453657d9bad4f70d78d6a226624b76674742832c4bf34a045f90a0386c86b8f9532867a944b087d314211d00ac5eb343ac32d75cbaad87a12a5db3c758b2ecf3c77273041548c85c726b3530cc205aef795c4ddc6540b579fdee84d5dc3ab3ddcf0b4f7b80dd359e1e1fd031b8af74373d5bba8e4e7a16b75806d9ae3f3b16f30e7c40bc6d14"], 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0xc8e2e5b2270ac528) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x89, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/45, 0x224000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140), 0x0, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 6.571121307s ago: executing program 4 (id=3215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x8, [0x46, 0x8001, 0xfdd, 0x6, 0x9, 0x1, 0x5, 0x8]}}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x22) unshare(0x6a040080) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x6, 0x400}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200"], 0x124}}, 0x0) 5.114902021s ago: executing program 3 (id=3218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) signalfd(r0, &(0x7f00000000c0)={[0x3, 0x8]}, 0x8) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5, 0x7, 0xfd99, 0x80000000}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x26, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0xa, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x741, @local, 0x10001}}, 0x6, 0x8, 0x7fff, 0x80000000, 0x80, 0x401, 0x3}, &(0x7f0000000100)=0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0x96d, @remote, 0x3}}, [0xfffffffffffffff8, 0x0, 0x9, 0x100000000, 0x26d, 0x5, 0x2, 0x1, 0x4b3, 0x200, 0x8000, 0xdda, 0x1, 0x1, 0x86a7]}, &(0x7f00000001c0)=0xfc) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x0, 0xfff1}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.034888458s ago: executing program 1 (id=3219): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_io_uring_setup(0x905, &(0x7f0000000480)={0x0, 0x107733, 0x100, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000180)={0x0, 0xa3, &(0x7f0000000740)="7fa88fedbcb48ef29ef3bfde224dda89d97f114526a05860b5e73918a6e963aa70af984a86af31643e7fbdcf76b5686d68937edf627bfe10c60574736dabfe259f959d0f89e5a28c1a618724a51596ddcda2e66a497e61cf4b53a25556cb607d382cb01606b2adc9b08a4ada029bd4957d0cbe4696516e3e27d36d8753dfdf874eb7d3c1f72583ab29bec6c654c1cbecbaa98447adf1f58bd0d0fbc453494360cdeb97"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2d, 0x0, 0x0, 0x6}]}, 0xfffffffffffffeea) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004) r4 = socket(0x3e, 0x80000, 0x40000003) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x11d, 0x1b, 0x0, &(0x7f00000021c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) io_uring_enter(r0, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x5, 0x58000, 0x1000, &(0x7f000025a000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d300"], 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x82b, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') pread64(r8, &(0x7f0000004380)=""/246, 0xf6, 0x2) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) syz_usb_control_io(r6, 0x0, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x46031, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x600600, 0x12, 0x22}, 0x18) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 4.040135391s ago: executing program 2 (id=3220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.202208224s ago: executing program 3 (id=3221): r0 = syz_usb_connect$hid(0x6, 0x1a5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0099827100"/18, @ANYRES32=r3, @ANYBLOB="20005080110001004abee33908f8eef16f162471f40000000500020002000000"], 0x3c}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="00000d004000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143041, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0xd) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) dup(r7) syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') epoll_create1(0x80000) 2.982319839s ago: executing program 4 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0}, 0x2000) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/237, 0xed}, {0x0}, {&(0x7f0000000680)=""/5, 0x5}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000001840)=""/4097, 0x1001}], 0x5}, 0x70000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x3, 0x40, 0x0) 2.880660468s ago: executing program 0 (id=3223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0) 2.850558194s ago: executing program 2 (id=3224): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0xc, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\\ ', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="4166deb08f5490e60cbd5dc80404c8a1d8b1dcefa938cbb0a2ca79523b6cc1574a6c7282edd54fa942633e7cf2fddaf1b19a9bd2aded624ffe3ed905bd5bc2ef28c3c689bdc609239748afb03e5201f0edcb4e0edfc9f07805d021a76bd013330c33937875ea24a4e7b7c9150afbfb67c43037a0f32d72c4b8b6a70cd359878738", 0x81}], 0x1}}], 0x1, 0x0) r2 = io_uring_setup(0x659e, &(0x7f0000000380)={0x0, 0xbe42, 0x0, 0x2, 0x34d, 0x0, r0}) r3 = syz_io_uring_setup(0x6fd, &(0x7f0000000280)={0x0, 0xe81c, 0x0, 0xfffffffe, 0x232, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r7 = socket$inet6(0xa, 0x1, 0x6) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x10d040, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000640)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8e, 0x3, 0x93, 0x81, "b982fc7c"}}, 0x0}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r10], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) io_uring_enter(r3, 0x47bc, 0x0, 0x4000000000000000, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x6, 0x40, 0x2, 0x0, 0xcf, 0x0}) 2.802314994s ago: executing program 4 (id=3225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x20, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}]}, {0x4}]}]}}]}, 0x50}}, 0x0) 2.539604873s ago: executing program 0 (id=3226): r0 = socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x110a, 0x80001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r6 = socket(0xa, 0x3, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r8 = io_uring_setup(0xf04, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000000940)=[{0x0}], 0x1) r9 = io_uring_setup(0x6fa2, &(0x7f0000000600)={0x0, 0x41e28, 0x0, 0x4, 0x3d}) io_uring_register$IORING_REGISTER_FILES(r9, 0x1e, &(0x7f0000000000)=[r8], 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x4}}, 0x10) 2.358586558s ago: executing program 0 (id=3227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}}, 0x0) 2.318551451s ago: executing program 4 (id=3228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x11) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000240)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_io_uring_setup(0x147e, &(0x7f0000000080)={0x0, 0x1010b6, 0x80, 0x400002, 0x403ae}, &(0x7f00000003c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) r3 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r4 = dup(r3) read(r4, &(0x7f0000000040), 0x0) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r4, &(0x7f0000008180)={0x2020}, 0xfffffdfc) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@pppoe={0x18, 0x0, {0x2, @random="c8feae7965a8", 'veth1_to_team\x00'}}, 0x80, 0x0}, 0x0, 0x20040000}) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b0102030109021b0081fc00000009040f0001e711e1000905830100"], 0x0) 2.000011677s ago: executing program 0 (id=3229): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0x6}, {}, {0x7, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@typed={0x4, 0x1}, @nested={0x4, 0x112}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r11 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x5f81, &(0x7f0000000600)={0x0, 0x7d71, 0x20, 0x0, 0x368}, &(0x7f0000000140), &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000700)={{0x0, 0x1, 0xffffffff, 0xfffffff8, 'syz0\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x9, 'syz0\x00', 0x0}) r12 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x1cba8c72}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x177ffb498171ed1, 0x8040010) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 1.900806794s ago: executing program 1 (id=3230): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000280)={0x27, {{0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}}, 0x1}, 0x8c) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003afe0620e60403000001010203010902240001000010000904140002a024260009050602ff0300000009058202"], 0x0) listen(r0, 0x0) syz_emit_ethernet(0xb1, &(0x7f00000007c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@llc_tr={0x11, {@llc={0x7e, 0x42, "f1e2", "79c58138730c55a64614e5d101fdd862eeec2cee9549d6000aad03a0112b9531b365ad7551a25a5e4698fdd2027f901796fca30f5e30cf883b95eefa10981bf3baf42f0ac9ec8bbf7d32c4dab722052ea18e9221b43efe1f8196eb43798da4a56ee76148c40ead06440959affe9d6670033ee6c2290c0394ce1c39d6d576e15cef260516e651b957562528d832e39c21899ba56d939e3ab2341ed1"}}}}}, &(0x7f0000000880)={0x1, 0x2, [0x2ec, 0x233, 0x4ad, 0x594]}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x4b0000, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0xd34b, 0x114}, 0x10, 0x4}) syz_usb_control_io$printer(r1, &(0x7f00000000c0)={0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000004c0)=ANY=[@ANYBLOB="0003a7000000a7039997d4a47bee037d18cef3e071e7c8e75e3daeb9cfce482f738a9a77f7e1b76100ca4b76d6a509f2d058b9c7f902b3034a3aa65674975189a25da8302a18fb9823d896edf675f97d3a6a7621fbfcd5211d1f39090000000000000013e99e567f739d0b0f237b83bb75329eec5c5d28115ab28084c2df13f2eaff85847f2fb3c236e3380b10b215644c72eb092668911be5189d0243cb1ec64fdc7d4f46dd89e2d8b03a03d6"]}, &(0x7f0000000780)={0x1c, &(0x7f00000003c0)={0x0, 0x16}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000600)=ANY=[@ANYBLOB="2000c000000000be07464b298bdac5bd7861f4c44f353408dc4b61e3700a3dab7ffea6791b35334eb2ea4ccdf712d416b035c0f787e42e3b6a90a469132e6e3f0dc3d1d7e4bf3c839b1533057b808eaa8589967f5af8e43642be4ef700fb0da62274cec0de1401307f6de32c7395c55459ca2291a1ed47c41a828927e2d4a0886344b7f16afb3ee4dae1d59e4a6fc72799a7da610e7a8632772ab6074c66a7457d81dbf5314e626d425b2ec2ab28d572e1697696edf192339cee7a43d54f96715a3c98b930d1"], &(0x7f0000000700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x9}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x80000000}]) io_pgetevents(r5, 0xd4, 0x0, &(0x7f0000000140), &(0x7f0000000300), 0x0) io_getevents(r5, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000580)=0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB='fd<', @ANYRESHEX=r6, @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x1a1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x40, r10, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff, 0xffff, 0x1, 0x6, 0x2, 0x4, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.018121757s ago: executing program 0 (id=3231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000003d00)={'NETMAP\x00'}, &(0x7f0000003d40)=0x1e) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r4, 0x40}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 972.288609ms ago: executing program 0 (id=3232): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80000000000007c, 0x8000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = io_uring_setup(0x6ae5, &(0x7f0000000100)={0x0, 0x0, 0x20, 0x3, 0x3cc, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 801.882687ms ago: executing program 4 (id=3233): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020200030a000000000000000000000003000500002000000a004e23ac141426000000000000000002000100000000000000000b000000b5030006000000000002004e2200000000000000000000000004196e5c134907"], 0x50}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r6, 0xaea2, 0xffffffffffff7fff) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x58000, 0x2000, &(0x7f0000775000/0x2000)=nil}) r7 = dup(r6) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000240), 0x1, 0x321500) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201"], 0x0) ioctl$EVIOCSKEYCODE(r8, 0x40084504, &(0x7f0000000140)=[0x1800000, 0xff]) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/185) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x20d0}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltaction={0x110, 0x31, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9d0}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe4}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1dfa8000}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff001}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3c3}}]}]}, 0x110}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203110902120001000000000904"], 0x0) 0s ago: executing program 3 (id=3234): syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="21010000db168920402000d92ca9010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000700)=[{0x5, 0xac39d643e9965aa2, 0x0, 0x0}, {0x1900, 0x8000, 0x0, 0x0}], 0x2}) kernel console output (not intermixed with test programs): found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 740.092481][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.120136][ T44] usb 2-1: Product: syz [ 740.140531][ T44] usb 2-1: Manufacturer: syz [ 740.156430][ T44] usb 2-1: SerialNumber: syz [ 740.190454][ T44] usb 2-1: config 0 descriptor?? [ 740.460566][ T44] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 741.084796][ T5919] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 741.168145][T15458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2743'. [ 741.184542][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2743'. [ 741.199626][T15458] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2743'. [ 741.278391][ T5919] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 741.287373][ T5919] usb 5-1: config 0 has no interface number 0 [ 741.314793][ T5919] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 741.327200][ T5919] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 741.371026][ T5919] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 741.384325][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.392507][ T5919] usb 5-1: Product: syz [ 741.398429][ T5919] usb 5-1: Manufacturer: syz [ 741.403158][ T5919] usb 5-1: SerialNumber: syz [ 741.436312][ T5919] usb 5-1: config 0 descriptor?? [ 741.442863][T15453] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 741.454827][ T5918] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 741.469989][ T5919] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 741.539146][ T5919] ums-sddr09 5-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 741.607851][ T5918] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 741.619968][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.631352][ T5918] usb 4-1: config 0 descriptor?? [ 741.664423][ T5918] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 741.719661][T15475] hub 9-0:1.0: USB hub found [ 741.726576][T15475] hub 9-0:1.0: 1 port detected [ 741.861397][ T5918] gp8psk: usb in 128 operation failed. [ 741.874175][ T5918] gp8psk: usb in 137 operation failed. [ 741.880035][ T5918] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 742.105477][T15479] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 742.118196][ T5918] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 742.144092][ T5918] usb 4-1: USB disconnect, device number 36 [ 742.174550][T15481] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[15481] [ 743.124538][T15483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2747'. [ 743.212686][ T5918] usb 2-1: USB disconnect, device number 36 [ 743.881592][ T5918] usb 5-1: USB disconnect, device number 39 [ 744.005258][ T44] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 744.621672][ T44] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 744.650354][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.682586][ T44] usb 2-1: Product: syz [ 744.820570][ T44] usb 2-1: Manufacturer: syz [ 744.826709][T15507] ALSA: mixer_oss: invalid OSS volume '' [ 744.875755][T15495] ALSA: mixer_oss: invalid OSS volume '' [ 744.892022][ T44] usb 2-1: SerialNumber: syz [ 744.905030][ T44] usb 2-1: config 0 descriptor?? [ 745.132552][ T44] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 745.898762][T15523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2756'. [ 745.915762][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 745.954004][T15523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2756'. [ 746.524754][ T5919] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 746.730767][ T5919] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 746.785116][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.952552][ T5919] usb 1-1: config 0 descriptor?? [ 746.963852][ T5919] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 747.196203][ T5919] gp8psk: usb in 128 operation failed. [ 747.207399][ T5919] gp8psk: usb in 137 operation failed. [ 747.212924][ T5919] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 747.321995][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.329897][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.366864][ T5919] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 747.655439][ T5919] usb 1-1: USB disconnect, device number 32 [ 747.677972][ T44] usb 2-1: USB disconnect, device number 37 [ 747.799379][T15545] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[15545] [ 748.285795][T15551] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[15551] [ 750.144982][T15562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'. [ 750.377788][ T10] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 750.653037][ T10] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 750.663473][ T10] usb 3-1: config 0 has no interface number 0 [ 750.676489][ T10] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 750.721687][ T10] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 750.743213][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 750.758945][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.773533][ T10] usb 3-1: Product: syz [ 750.816265][ T10] usb 3-1: Manufacturer: syz [ 750.820937][ T10] usb 3-1: SerialNumber: syz [ 750.839543][ T10] usb 3-1: config 0 descriptor?? [ 750.866528][T15560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 750.881135][ T10] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 750.946188][ T10] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 751.444027][T15577] ALSA: mixer_oss: invalid OSS volume '' [ 751.560438][T15583] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 751.587063][T15580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2769'. [ 751.596427][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2769'. [ 751.627888][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2769'. [ 752.956364][T15595] random: crng reseeded on system resumption [ 753.164766][ T5890] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 753.216402][ T5917] usb 3-1: USB disconnect, device number 34 [ 753.345781][ T5890] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 753.420782][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.453902][ T5890] usb 5-1: Product: syz [ 753.461341][ T5890] usb 5-1: Manufacturer: syz [ 753.478215][ T5890] usb 5-1: SerialNumber: syz [ 753.517765][ T5890] usb 5-1: config 0 descriptor?? [ 753.717013][T15615] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15615] [ 753.903460][ T5890] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 753.914819][ T10] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 753.922669][ T5870] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 753.934263][T15617] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[15617] [ 754.132049][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 754.141236][ T5870] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 754.149929][ T5870] usb 3-1: config 0 has no interface number 0 [ 754.168178][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.309363][ T5870] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 754.326056][ T5870] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 754.378990][ T10] usb 2-1: config 0 descriptor?? [ 754.402864][ T5870] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 754.419990][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 754.428542][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.442344][ T5870] usb 3-1: Product: syz [ 754.460608][ T5870] usb 3-1: Manufacturer: syz [ 754.467435][ T5870] usb 3-1: SerialNumber: syz [ 754.495592][ T5870] usb 3-1: config 0 descriptor?? [ 754.550323][T15603] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 754.566620][ T5870] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 754.678174][ T10] gp8psk: usb in 128 operation failed. [ 754.695241][ T10] gp8psk: usb in 137 operation failed. [ 754.705272][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 754.730595][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 754.756411][ T10] usb 2-1: USB disconnect, device number 38 [ 754.936409][ T5870] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 755.150159][T15620] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 755.769217][T15628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2779'. [ 756.194786][ T5822] usb 5-1: USB disconnect, device number 40 [ 757.191908][ T5822] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 757.467021][ T10] usb 3-1: USB disconnect, device number 35 [ 757.942234][T15649] ALSA: mixer_oss: invalid OSS volume '' [ 758.029906][ T5822] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 758.052979][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.128723][ T5822] usb 5-1: Product: syz [ 758.225102][ T5822] usb 5-1: Manufacturer: syz [ 758.244714][ T5822] usb 5-1: SerialNumber: syz [ 758.306378][ T5822] usb 5-1: config 0 descriptor?? [ 758.397785][T15652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2782'. [ 758.407083][T15652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2782'. [ 758.485804][T15652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2782'. [ 758.888598][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 759.079123][ T5822] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 759.136081][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 759.308652][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 759.426490][T15663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2784'. [ 759.514818][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'. [ 759.615063][T15663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2784'. [ 759.651520][T15667] random: crng reseeded on system resumption [ 759.855024][T15672] usb usb8: usbfs: process 15672 (syz.0.2786) did not claim interface 0 before use [ 760.502211][T15676] hub 9-0:1.0: USB hub found [ 760.515604][T15676] hub 9-0:1.0: 1 port detected [ 760.869026][T15685] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[15685] [ 760.942505][ T10] usb 5-1: USB disconnect, device number 41 [ 762.984932][ T44] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 763.035558][ T10] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 763.151298][ T44] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 763.172556][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.181064][ T44] usb 5-1: Product: syz [ 763.185775][ T44] usb 5-1: Manufacturer: syz [ 763.190538][ T44] usb 5-1: SerialNumber: syz [ 763.213099][ T44] usb 5-1: config 0 descriptor?? [ 763.227447][ T10] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 763.236078][ T10] usb 1-1: config 0 has no interface number 0 [ 763.366497][ T10] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 763.615629][ T44] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 763.634819][ T10] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 763.668382][ T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 763.682466][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.738037][T15709] ALSA: mixer_oss: invalid OSS volume '' [ 763.819662][ T10] usb 1-1: Product: syz [ 763.824290][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2796'. [ 763.862255][ T10] usb 1-1: Manufacturer: syz [ 763.867884][ T10] usb 1-1: SerialNumber: syz [ 763.930626][ T10] usb 1-1: config 0 descriptor?? [ 763.951191][T15702] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 764.042748][ T10] ums-sddr09 1-1:0.20: USB Mass Storage device detected [ 764.094498][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2796'. [ 764.404509][ T10] ums-sddr09 1-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 764.499087][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2796'. [ 764.591323][T15720] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 765.500895][T15729] hub 9-0:1.0: USB hub found [ 765.514717][T15729] hub 9-0:1.0: 1 port detected [ 765.773671][ T10] usb 5-1: USB disconnect, device number 42 [ 765.879537][T15738] random: crng reseeded on system resumption [ 766.006831][ T5890] usb 1-1: USB disconnect, device number 33 [ 766.073909][T15703] ALSA: mixer_oss: invalid OSS volume '' [ 766.264701][ T5822] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 766.645761][ T5822] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 766.732982][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.779675][ T5822] usb 3-1: config 0 descriptor?? [ 766.801379][ T5822] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 767.141286][T15759] hub 9-0:1.0: USB hub found [ 767.182628][T15759] hub 9-0:1.0: 1 port detected [ 767.380980][ T5822] gp8psk: usb in 128 operation failed. [ 767.389858][ T5822] gp8psk: usb in 137 operation failed. [ 767.395649][ T5822] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 767.433617][ T5822] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 767.778385][ T5822] usb 3-1: USB disconnect, device number 36 [ 767.969481][T15765] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15765] [ 769.613476][T15776] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2808'. [ 769.631766][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 769.663751][T15776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2808'. [ 770.664782][ T10] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 770.877130][ T10] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 770.885430][ T10] usb 4-1: config 0 has no interface number 0 [ 770.917244][ T10] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 770.928738][ T10] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 770.944549][ T10] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 770.974486][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.982696][ T10] usb 4-1: Product: syz [ 770.988877][ T10] usb 4-1: Manufacturer: syz [ 770.994841][ T10] usb 4-1: SerialNumber: syz [ 771.389466][ T10] usb 4-1: config 0 descriptor?? [ 771.425059][T15785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 771.451863][ T10] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 771.731079][ T10] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 772.090414][T15798] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 772.364127][T15801] random: crng reseeded on system resumption [ 772.567022][T15808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2815'. [ 772.579136][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2815'. [ 772.589946][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2815'. [ 772.604354][T15810] usb usb8: usbfs: process 15810 (syz.4.2816) did not claim interface 0 before use [ 772.945449][T15812] hub 9-0:1.0: USB hub found [ 772.954769][T15812] hub 9-0:1.0: 1 port detected [ 773.499963][ T10] usb 4-1: USB disconnect, device number 37 [ 774.510046][T15839] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[15839] [ 776.155008][ T5822] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 776.401217][ T5822] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 776.410408][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.419012][ T5822] usb 5-1: Product: syz [ 776.423288][ T5822] usb 5-1: Manufacturer: syz [ 776.429700][ T5822] usb 5-1: SerialNumber: syz [ 776.462111][ T5822] usb 5-1: config 0 descriptor?? [ 776.826787][T15851] hub 9-0:1.0: USB hub found [ 776.835347][T15851] hub 9-0:1.0: 1 port detected [ 777.606790][ T5822] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 778.723739][ T5822] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 779.743413][T15868] ALSA: mixer_oss: invalid OSS volume '' [ 779.996896][ T5822] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 780.128396][ T5822] usb 2-1: config 0 has no interface number 0 [ 780.358890][T15876] hub 9-0:1.0: USB hub found [ 780.364803][T15876] hub 9-0:1.0: 1 port detected [ 780.399423][ T9] usb 5-1: USB disconnect, device number 43 [ 780.481854][ T5822] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 780.525097][ T5822] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 780.637143][T15882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2836'. [ 780.651207][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 780.662565][ T5822] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 780.673562][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.690028][ T5822] usb 2-1: Product: syz [ 780.694832][T15882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2836'. [ 780.706138][ T5822] usb 2-1: Manufacturer: syz [ 780.710890][ T5822] usb 2-1: SerialNumber: syz [ 780.727353][ T5822] usb 2-1: config 0 descriptor?? [ 780.734451][T15862] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 780.808574][ T5822] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 780.891677][ T5822] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 781.387489][T15896] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 781.863557][T15901] hub 9-0:1.0: USB hub found [ 781.869078][T15901] hub 9-0:1.0: 1 port detected [ 782.553653][T15908] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15908] [ 782.901907][ T5917] usb 2-1: USB disconnect, device number 39 [ 784.385226][ T10] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 784.580784][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 784.590043][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.630175][ T10] usb 2-1: config 0 descriptor?? [ 784.652967][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 784.886021][ T10] gp8psk: usb in 128 operation failed. [ 784.925730][ T10] gp8psk: usb in 137 operation failed. [ 784.938809][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 784.952032][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 784.979426][ T10] usb 2-1: USB disconnect, device number 40 [ 786.605545][T15957] hub 9-0:1.0: USB hub found [ 786.621463][T15957] hub 9-0:1.0: 1 port detected [ 786.735877][T15954] ALSA: mixer_oss: invalid OSS volume '' [ 786.804711][ T5890] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 787.185062][ T5890] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 787.194837][ T5890] usb 5-1: config 0 has no interface number 0 [ 787.202258][ T5890] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 787.225972][ T5890] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.538747][ T5890] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 787.574702][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.582776][ T5890] usb 5-1: Product: syz [ 787.615702][ T5890] usb 5-1: Manufacturer: syz [ 787.638195][ T5890] usb 5-1: SerialNumber: syz [ 787.665640][ T5890] usb 5-1: config 0 descriptor?? [ 787.689386][T15953] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 787.726571][ T5890] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 788.024556][ T5890] ums-sddr09 5-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 788.319731][T15970] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 789.225847][T15977] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[15977] [ 789.897399][ T10] usb 5-1: USB disconnect, device number 44 [ 790.485733][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 790.854172][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 790.868079][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.919172][ T10] usb 2-1: config 0 descriptor?? [ 790.941107][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 791.150189][ T10] gp8psk: usb in 128 operation failed. [ 791.158136][ T10] gp8psk: usb in 137 operation failed. [ 791.183276][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 791.194939][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 791.226127][ T10] usb 2-1: USB disconnect, device number 41 [ 791.631190][T16011] ALSA: mixer_oss: invalid OSS volume '' [ 793.055545][ T5897] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 793.325165][ T5897] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 793.338536][ T5897] usb 3-1: config 0 has no interface number 0 [ 793.363189][ T5897] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 793.447721][ T5897] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 793.579562][T16035] hub 9-0:1.0: USB hub found [ 793.653743][T16035] hub 9-0:1.0: 1 port detected [ 793.766265][ T5897] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 793.776499][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.784962][ T5897] usb 3-1: Product: syz [ 793.833014][ T5897] usb 3-1: Manufacturer: syz [ 793.887901][ T5897] usb 3-1: SerialNumber: syz [ 794.079823][ T5897] usb 3-1: config 0 descriptor?? [ 794.095179][T16033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 794.124361][ T5897] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 794.309447][T16025] ALSA: mixer_oss: invalid OSS volume '' [ 794.377527][ T5897] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 794.726775][T16044] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 795.546367][T16049] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[16049] [ 796.096729][ T9] usb 3-1: USB disconnect, device number 37 [ 797.516800][T16057] ALSA: mixer_oss: invalid OSS volume '' [ 798.623752][T16086] ALSA: mixer_oss: invalid OSS volume '' [ 798.954826][ T5870] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 799.152259][ T5870] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 799.188507][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.252345][ T5870] usb 5-1: config 0 descriptor?? [ 799.487258][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 799.585706][ T5870] gp8psk: usb in 128 operation failed. [ 799.603500][ T5870] gp8psk: usb in 137 operation failed. [ 799.613630][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 799.625001][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 799.754390][T16076] ALSA: mixer_oss: invalid OSS volume '' [ 799.858316][ T5870] usb 5-1: USB disconnect, device number 45 [ 801.570761][T16102] ALSA: mixer_oss: invalid OSS volume '' [ 801.765026][T16118] hub 9-0:1.0: USB hub found [ 801.915009][T16118] hub 9-0:1.0: 1 port detected [ 802.615573][T16132] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[16132] [ 802.894893][ T10] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 803.131857][ T10] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 803.157941][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.456982][ T10] usb 4-1: config 0 descriptor?? [ 803.534138][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 803.873207][ T10] gp8psk: usb in 128 operation failed. [ 803.879169][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 803.886898][ T10] gp8psk: usb in 137 operation failed. [ 803.892441][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 803.903220][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 803.916738][ T10] usb 4-1: USB disconnect, device number 38 [ 804.577325][T16148] hub 9-0:1.0: USB hub found [ 804.585362][T16148] hub 9-0:1.0: 1 port detected [ 806.803339][ T5918] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 807.227914][ T5918] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 807.241829][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.300058][ T5918] usb 4-1: config 0 descriptor?? [ 807.318250][ T5918] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 807.562115][ T5918] gp8psk: usb in 128 operation failed. [ 807.571729][ T5918] gp8psk: usb in 137 operation failed. [ 807.719995][ T5918] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 807.814151][ T5918] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 807.948763][ T5918] usb 4-1: USB disconnect, device number 39 [ 808.008569][T16188] ALSA: mixer_oss: invalid OSS volume '' [ 808.257938][T16176] ALSA: mixer_oss: invalid OSS volume '' [ 808.700560][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.707013][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.659891][T16212] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[16212] [ 810.796115][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 810.806204][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 810.838340][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 810.847396][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 810.855624][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 810.885177][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 811.370721][ T10] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 811.404919][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.436598][ T10] usb 5-1: Product: syz [ 811.444250][ T10] usb 5-1: Manufacturer: syz [ 811.514762][ T10] usb 5-1: SerialNumber: syz [ 811.686720][ T10] usb 5-1: config 0 descriptor?? [ 812.219286][ T10] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 812.516620][ T120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.938804][ T5839] Bluetooth: hci5: command tx timeout [ 813.130232][ T120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.304080][ T120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.692767][ T120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.854096][T16216] chnl_net:caif_netlink_parms(): no params data found [ 814.088184][ T10] usb 5-1: USB disconnect, device number 46 [ 814.516829][T16216] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.548291][T16216] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.581705][T16216] bridge_slave_0: entered allmulticast mode [ 814.602616][T16216] bridge_slave_0: entered promiscuous mode [ 814.622624][ T120] bridge_slave_1: left allmulticast mode [ 814.643232][T16228] ALSA: mixer_oss: invalid OSS volume '' [ 814.655645][ T120] bridge_slave_1: left promiscuous mode [ 814.663334][ T120] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.677046][T16245] random: crng reseeded on system resumption [ 814.727256][ T120] bridge_slave_0: left allmulticast mode [ 814.733380][ T120] bridge_slave_0: left promiscuous mode [ 814.739826][ T120] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.025775][ T5839] Bluetooth: hci5: command tx timeout [ 815.322646][ T120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.347920][ T120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.410639][ T120] bond0 (unregistering): Released all slaves [ 815.458720][T16216] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.475096][T16216] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.534981][T16216] bridge_slave_1: entered allmulticast mode [ 815.558073][T16216] bridge_slave_1: entered promiscuous mode [ 815.834767][T16216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.866726][T16216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.906908][T16216] team0: Port device team_slave_0 added [ 815.915064][T16216] team0: Port device team_slave_1 added [ 815.973670][T16252] ptrace attach of "./syz-executor exec"[5847] was attempted by "./syz-executor exec"[16252] [ 816.058543][T16276] ALSA: mixer_oss: invalid OSS volume '' [ 816.625373][ T10] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 816.646205][T16216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.653294][T16216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.770197][T16216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.820324][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 816.840025][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.850709][T16216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.885008][ T10] usb 1-1: config 0 descriptor?? [ 816.891407][T16216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.940710][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 817.059052][T16216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.143390][ T5839] Bluetooth: hci5: command tx timeout [ 817.162525][ T10] gp8psk: usb in 128 operation failed. [ 817.178579][ T10] gp8psk: usb in 137 operation failed. [ 817.251226][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 817.302313][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 817.327939][ T10] usb 1-1: USB disconnect, device number 34 [ 818.651612][ T120] hsr_slave_0: left promiscuous mode [ 818.763970][ T120] hsr_slave_1: left promiscuous mode [ 818.783112][ T120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.808105][ T120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 819.053985][ T120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.183584][T16307] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[16307] [ 819.188539][ T5839] Bluetooth: hci5: command tx timeout [ 819.238809][ T120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 819.828602][ T120] veth1_macvtap: left promiscuous mode [ 819.837068][ T120] veth0_macvtap: left promiscuous mode [ 819.842673][ T120] veth1_vlan: left promiscuous mode [ 819.853660][ T120] veth0_vlan: left promiscuous mode [ 820.369499][ T120] team0 (unregistering): Port device team_slave_1 removed [ 820.404322][ T120] team0 (unregistering): Port device team_slave_0 removed [ 820.798685][T16216] hsr_slave_0: entered promiscuous mode [ 820.810310][T16216] hsr_slave_1: entered promiscuous mode [ 820.820692][T16216] debugfs: 'hsr0' already exists in 'hsr' [ 820.826946][T16216] Cannot create hsr debugfs directory [ 821.182765][T16318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2922'. [ 821.191910][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2922'. [ 821.282385][T16318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2922'. [ 821.866413][T16317] hub 9-0:1.0: USB hub found [ 821.938079][T16317] hub 9-0:1.0: 1 port detected [ 822.364568][ T5917] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 822.769346][ T5917] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 822.813808][ T5917] usb 2-1: config 0 has no interface number 0 [ 822.824341][ T5917] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 822.853696][ T5917] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 822.913178][ T5917] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 822.922540][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.930958][ T5917] usb 2-1: Product: syz [ 822.935488][ T5917] usb 2-1: Manufacturer: syz [ 822.940117][ T5917] usb 2-1: SerialNumber: syz [ 822.953945][ T5917] usb 2-1: config 0 descriptor?? [ 822.962941][T16332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 822.978169][ T5917] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 823.295451][ T5917] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 823.484745][ T5890] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 823.621112][T16351] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 823.998899][ T5890] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 824.010403][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.019353][ T5890] usb 5-1: Product: syz [ 824.023587][ T5890] usb 5-1: Manufacturer: syz [ 824.029168][ T5890] usb 5-1: SerialNumber: syz [ 824.063742][T16358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2927'. [ 824.083589][ T5890] usb 5-1: config 0 descriptor?? [ 824.093105][T16358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2927'. [ 824.102847][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 824.111982][T16358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2927'. [ 824.303231][ T120] IPVS: stop unused estimator thread 0... [ 824.332391][T16216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 824.384801][T16216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 824.468904][ T5890] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 824.486441][T16216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 824.520759][T16216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 824.983177][T16216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.207711][T16216] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.249557][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.256740][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.307287][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.314439][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.381723][ T5917] usb 2-1: USB disconnect, device number 42 [ 825.796109][ T5822] usb 5-1: USB disconnect, device number 47 [ 825.934512][T16378] hub 9-0:1.0: USB hub found [ 825.966230][T16378] hub 9-0:1.0: 1 port detected [ 826.088542][T16216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.458316][T16397] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[16397] [ 828.023360][T16418] hub 9-0:1.0: USB hub found [ 828.038808][T16418] hub 9-0:1.0: 1 port detected [ 828.638911][T16216] veth0_vlan: entered promiscuous mode [ 828.674399][T16216] veth1_vlan: entered promiscuous mode [ 828.870745][T16216] veth0_macvtap: entered promiscuous mode [ 828.949092][T16216] veth1_macvtap: entered promiscuous mode [ 829.053478][T16440] ALSA: mixer_oss: invalid OSS volume '' [ 829.217736][T16216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.273173][T16216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.330451][ T5822] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 829.364736][ T120] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.632762][ T5822] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 829.968647][ T5822] usb 4-1: config 0 has no interface number 0 [ 830.007644][ T5822] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 830.080871][T16441] ALSA: mixer_oss: invalid OSS volume '' [ 830.103777][ T5822] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 830.126929][ T5822] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 830.137553][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.144510][ T120] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.253610][ T120] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.266829][ T5822] usb 4-1: Product: syz [ 830.271099][ T5822] usb 4-1: Manufacturer: syz [ 830.284822][ T120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.325229][ T5822] usb 4-1: SerialNumber: syz [ 830.581351][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.612242][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.825758][ T5822] usb 4-1: config 0 descriptor?? [ 830.841781][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.869868][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.877840][T16444] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 830.906026][ T5822] ums-sddr09 4-1:0.20: USB Mass Storage device detected [ 831.299296][ T5822] ums-sddr09 4-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 831.573189][T16476] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 832.324829][ T5822] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 832.510527][ T5822] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 832.546216][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.714514][ T5822] usb 5-1: Product: syz [ 832.721488][ T5822] usb 5-1: Manufacturer: syz [ 832.726860][ T5822] usb 5-1: SerialNumber: syz [ 832.773985][ T5822] usb 5-1: config 0 descriptor?? [ 832.942546][T16490] hub 9-0:1.0: USB hub found [ 832.955462][T16490] hub 9-0:1.0: 1 port detected [ 833.245355][ T5822] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 833.532045][ T10] usb 4-1: USB disconnect, device number 40 [ 834.477520][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2947'. [ 834.758972][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 834.769576][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 834.789081][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 834.799023][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 834.815468][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.015888][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.071017][ T10] usb 5-1: USB disconnect, device number 48 [ 835.536312][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.700732][T16512] hub 9-0:1.0: USB hub found [ 835.810405][T16512] hub 9-0:1.0: 1 port detected [ 836.001808][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.859271][ T5839] Bluetooth: hci0: command tx timeout [ 836.907700][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.136769][T16531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2953'. [ 837.204797][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 837.222301][T16531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2953'. [ 837.463112][T16532] hub 9-0:1.0: USB hub found [ 837.475090][T16532] hub 9-0:1.0: 1 port detected [ 837.680690][T16505] chnl_net:caif_netlink_parms(): no params data found [ 838.331602][ T13] bridge_slave_1: left allmulticast mode [ 838.337415][ T13] bridge_slave_1: left promiscuous mode [ 838.346265][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.362097][ T13] bridge_slave_0: left allmulticast mode [ 838.398715][ T13] bridge_slave_0: left promiscuous mode [ 838.562353][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.936188][ T5839] Bluetooth: hci0: command tx timeout [ 839.238386][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.249724][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.907189][ T13] bond0 (unregistering): Released all slaves [ 839.964081][ T5918] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 840.162143][ T5918] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 840.181626][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.267598][ T5918] usb 5-1: Product: syz [ 840.271828][ T5918] usb 5-1: Manufacturer: syz [ 840.323873][ T5918] usb 5-1: SerialNumber: syz [ 840.405213][ T5918] usb 5-1: config 0 descriptor?? [ 840.610305][T16505] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.641525][T16505] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.651850][ T5918] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 840.714860][T16505] bridge_slave_0: entered allmulticast mode [ 840.755648][T16505] bridge_slave_0: entered promiscuous mode [ 840.803702][T16505] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.831870][T16505] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.855001][T16505] bridge_slave_1: entered allmulticast mode [ 840.876360][T16505] bridge_slave_1: entered promiscuous mode [ 841.018047][ T5839] Bluetooth: hci0: command tx timeout [ 841.240874][T16505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.273909][T16505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.604007][T16570] hub 9-0:1.0: USB hub found [ 841.650248][T16570] hub 9-0:1.0: 1 port detected [ 841.831131][ T13] hsr_slave_0: left promiscuous mode [ 841.868079][ T13] hsr_slave_1: left promiscuous mode [ 841.891198][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.961833][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.405208][ T44] usb 5-1: USB disconnect, device number 49 [ 842.549655][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 842.584132][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.665493][ T13] veth1_macvtap: left promiscuous mode [ 842.671023][ T13] veth0_macvtap: left promiscuous mode [ 842.711479][ T13] veth1_vlan: left promiscuous mode [ 842.818148][ T13] veth0_vlan: left promiscuous mode [ 843.114813][ T44] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 843.122608][ T5839] Bluetooth: hci0: command tx timeout [ 843.276418][ T44] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 843.285209][ T44] usb 5-1: config 0 has no interface number 0 [ 843.298029][ T44] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 843.334283][ T44] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.365474][ T44] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 843.389449][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.424768][ T44] usb 5-1: Product: syz [ 843.429012][ T44] usb 5-1: Manufacturer: syz [ 843.452152][ T44] usb 5-1: SerialNumber: syz [ 843.555682][ T44] usb 5-1: config 0 descriptor?? [ 843.561604][T16587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 843.698042][ T44] ums-sddr09 5-1:0.20: USB Mass Storage device detected [ 843.923519][ T44] ums-sddr09 5-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 844.261349][T16593] ALSA: mixer_oss: invalid OSS volume '' [ 844.342083][T16603] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 844.608435][T16604] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[16604] [ 845.409860][T16610] hub 9-0:1.0: USB hub found [ 845.415950][T16610] hub 9-0:1.0: 1 port detected [ 846.244980][ T13] team0 (unregistering): Port device team_slave_1 removed [ 846.380251][ T13] team0 (unregistering): Port device team_slave_0 removed [ 846.426691][ T5890] usb 5-1: USB disconnect, device number 50 [ 846.911232][T16505] team0: Port device team_slave_0 added [ 846.928947][T16505] team0: Port device team_slave_1 added [ 847.440551][T16505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.466630][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.512032][T16505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.727087][T16505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.734065][T16505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.865902][T16505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.538970][T16505] hsr_slave_0: entered promiscuous mode [ 848.546339][T16505] hsr_slave_1: entered promiscuous mode [ 848.552475][T16505] debugfs: 'hsr0' already exists in 'hsr' [ 848.564191][T16505] Cannot create hsr debugfs directory [ 849.162992][ T5918] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 849.196118][ T5822] IPVS: starting estimator thread 0... [ 849.294799][T16650] IPVS: using max 26 ests per chain, 62400 per kthread [ 849.382232][ T5918] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 849.427089][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.435347][ T5870] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 849.509044][ T5918] usb 5-1: Product: syz [ 849.527516][ T5918] usb 5-1: Manufacturer: syz [ 849.532152][ T5918] usb 5-1: SerialNumber: syz [ 849.557957][ T5918] usb 5-1: config 0 descriptor?? [ 849.795137][ T5918] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 849.837933][ T5870] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 849.858102][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.895602][ T5870] usb 3-1: Product: syz [ 849.899815][ T5870] usb 3-1: Manufacturer: syz [ 849.904426][ T5870] usb 3-1: SerialNumber: syz [ 850.055555][ T5870] usb 3-1: config 0 descriptor?? [ 851.015640][T16665] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[16665] [ 851.163426][T16505] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 851.237885][T16505] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 851.389359][ T13] IPVS: stop unused estimator thread 0... [ 851.442049][T16505] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 851.468244][ T5870] int51x1 3-1:0.0: probe with driver int51x1 failed with error -71 [ 851.566402][ T5870] usb 3-1: USB disconnect, device number 38 [ 851.590816][T16505] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 851.939611][ T44] usb 5-1: USB disconnect, device number 51 [ 852.499576][T16674] hub 9-0:1.0: USB hub found [ 852.506292][T16674] hub 9-0:1.0: 1 port detected [ 852.898285][T16505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.913681][T16505] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.939770][ T120] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.947009][ T120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.040878][ T120] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.048073][ T120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.489338][T16505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.690386][T16505] veth0_vlan: entered promiscuous mode [ 853.918727][T16711] syz.4.2981 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 854.067728][T16505] veth1_vlan: entered promiscuous mode [ 854.119986][T16505] veth0_macvtap: entered promiscuous mode [ 854.238584][T16505] veth1_macvtap: entered promiscuous mode [ 854.474281][T16505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.779173][T16505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.864721][ T5918] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 854.935426][ T120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.944351][ T120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.997682][ T120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.047848][ T120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.190494][ T5918] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 855.255066][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.288878][ T5918] usb 3-1: Product: syz [ 855.293194][ T5918] usb 3-1: Manufacturer: syz [ 855.314319][ T5918] usb 3-1: SerialNumber: syz [ 855.352020][ T5918] usb 3-1: config 0 descriptor?? [ 855.712998][ T5918] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 855.725772][T16731] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 855.741589][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.754741][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.855683][ T5890] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 855.902992][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.919036][T16731] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 855.935855][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.983956][T16731] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.105087][T16731] usb 5-1: config 0 descriptor?? [ 856.161054][T16731] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 856.491526][T16731] gp8psk: usb in 128 operation failed. [ 856.616741][T16731] gp8psk: usb in 137 operation failed. [ 856.622303][T16731] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 856.682877][ T5890] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 856.702431][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.714681][T16731] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 856.748672][ T5890] usb 1-1: Product: syz [ 856.753733][T16747] ALSA: mixer_oss: invalid OSS volume '' [ 857.134808][ T5890] usb 1-1: Manufacturer: syz [ 857.154810][T16731] usb 5-1: USB disconnect, device number 52 [ 857.171576][ T5890] usb 1-1: SerialNumber: syz [ 857.188456][ T5890] usb 1-1: config 0 descriptor?? [ 857.268680][T16752] ptrace attach of "./syz-executor exec"[16505] was attempted by "./syz-executor exec"[16752] [ 857.318142][ T5890] usb 1-1: can't set config #0, error -71 [ 857.378813][ T5890] usb 1-1: USB disconnect, device number 35 [ 858.146343][ T9] usb 3-1: USB disconnect, device number 39 [ 859.263238][ T5918] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 859.688370][T16773] hub 9-0:1.0: USB hub found [ 859.694870][T16773] hub 9-0:1.0: 1 port detected [ 859.822588][ T5918] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 859.839177][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.848059][ T5918] usb 5-1: Product: syz [ 859.980644][ T5918] usb 5-1: Manufacturer: syz [ 859.985368][ T5918] usb 5-1: SerialNumber: syz [ 860.015478][ T5918] usb 5-1: config 0 descriptor?? [ 860.469622][ T5918] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 860.881286][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 860.894172][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 860.922498][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 860.933064][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 860.942816][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 862.011744][T16809] ptrace attach of "./syz-executor exec"[16216] was attempted by "./syz-executor exec"[16809] [ 862.110359][T16794] chnl_net:caif_netlink_parms(): no params data found [ 862.864841][ T9] usb 5-1: USB disconnect, device number 53 [ 863.015025][ T5839] Bluetooth: hci2: command tx timeout [ 863.204536][T16794] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.246150][T16794] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.253476][T16794] bridge_slave_0: entered allmulticast mode [ 863.271750][T16794] bridge_slave_0: entered promiscuous mode [ 863.990085][T16827] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[16827] [ 864.172399][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.259358][T16794] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.287501][T16794] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.326194][T16794] bridge_slave_1: entered allmulticast mode [ 864.344491][T16794] bridge_slave_1: entered promiscuous mode [ 864.772986][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.934292][T16794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.964474][T16794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.129999][ T5839] Bluetooth: hci2: command tx timeout [ 865.219700][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.625694][T16794] team0: Port device team_slave_0 added [ 865.641857][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.275431][T16794] team0: Port device team_slave_1 added [ 866.402990][T16794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.420632][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.588716][T16794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.599577][ T5917] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 866.709174][T16794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.735408][T16794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.789603][T16794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.811151][ T5917] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 866.824200][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.926437][ T5917] usb 4-1: config 0 descriptor?? [ 866.941128][ T5917] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 867.149537][ T5917] gp8psk: usb in 128 operation failed. [ 867.174986][ T5839] Bluetooth: hci2: command tx timeout [ 867.212358][ T5917] gp8psk: usb in 137 operation failed. [ 867.233351][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 867.280466][ T5917] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 867.294114][T16794] hsr_slave_0: entered promiscuous mode [ 867.331548][T16794] hsr_slave_1: entered promiscuous mode [ 867.338478][ T5917] usb 4-1: USB disconnect, device number 41 [ 867.423741][T16794] debugfs: 'hsr0' already exists in 'hsr' [ 867.486438][T16794] Cannot create hsr debugfs directory [ 867.618652][T16856] hub 9-0:1.0: USB hub found [ 867.623890][ T42] bridge_slave_1: left allmulticast mode [ 867.631466][T16856] hub 9-0:1.0: 1 port detected [ 867.642354][ T42] bridge_slave_1: left promiscuous mode [ 867.669609][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.694546][ T42] bridge_slave_0: left allmulticast mode [ 867.707415][ T42] bridge_slave_0: left promiscuous mode [ 867.712254][T16859] ptrace attach of "./syz-executor exec"[16216] was attempted by "./syz-executor exec"[16859] [ 867.927467][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.883189][ T5890] IPVS: starting estimator thread 0... [ 869.025858][T16873] IPVS: using max 38 ests per chain, 91200 per kthread [ 869.134801][T16734] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 869.254983][ T5839] Bluetooth: hci2: command tx timeout [ 869.322333][T16734] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 869.367785][T16734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.395059][T16734] usb 4-1: Product: syz [ 869.421697][T16734] usb 4-1: Manufacturer: syz [ 869.446803][T16734] usb 4-1: SerialNumber: syz [ 869.508635][T16734] usb 4-1: config 0 descriptor?? [ 869.566179][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.609058][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.619398][ T42] bond0 (unregistering): Released all slaves [ 869.730746][T16734] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22 [ 870.195406][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.201936][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.344708][T16734] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 870.520024][T16734] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 870.529938][T16734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.541890][T16734] usb 1-1: config 0 descriptor?? [ 870.550448][T16734] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 870.781311][T16734] gp8psk: usb in 128 operation failed. [ 870.787383][T16734] gp8psk: usb in 137 operation failed. [ 870.792872][T16734] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 870.803311][T16734] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 870.816456][T16734] usb 1-1: USB disconnect, device number 36 [ 871.213528][ T42] hsr_slave_0: left promiscuous mode [ 871.243443][ T42] hsr_slave_1: left promiscuous mode [ 871.261153][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 871.293782][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.371089][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 871.408169][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.462392][ T42] veth1_macvtap: left promiscuous mode [ 871.473059][ T42] veth0_macvtap: left promiscuous mode [ 871.482225][ T42] veth1_vlan: left promiscuous mode [ 871.498397][ T42] veth0_vlan: left promiscuous mode [ 871.774676][ T5870] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 871.968786][ T5870] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 871.993914][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.020302][ T9] usb 4-1: USB disconnect, device number 42 [ 872.083172][ T5870] usb 3-1: config 0 descriptor?? [ 872.098822][ T5870] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 872.419415][ T5870] gp8psk: usb in 128 operation failed. [ 872.446673][ T5870] gp8psk: usb in 137 operation failed. [ 872.458316][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 872.483012][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 872.645883][ T5870] usb 3-1: USB disconnect, device number 40 [ 872.815147][T16922] hub 9-0:1.0: USB hub found [ 872.820663][T16922] hub 9-0:1.0: 1 port detected [ 873.940399][ T42] team0 (unregistering): Port device team_slave_1 removed [ 873.997816][ T42] team0 (unregistering): Port device team_slave_0 removed [ 875.231755][T16948] hub 9-0:1.0: USB hub found [ 875.244808][T16948] hub 9-0:1.0: 1 port detected [ 875.313353][T16933] ptrace attach of "./syz-executor exec"[16216] was attempted by "./syz-executor exec"[16933] [ 875.838328][T16950] hub 9-0:1.0: USB hub found [ 875.845035][T16950] hub 9-0:1.0: 1 port detected [ 877.760590][T16961] ptrace attach of "./syz-executor exec"[16505] was attempted by "./syz-executor exec"[16961] [ 878.485521][T16794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 878.562739][T16794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 878.866216][T16794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 879.496711][T16794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 879.708355][T16993] hub 9-0:1.0: USB hub found [ 879.787352][T16993] hub 9-0:1.0: 1 port detected [ 879.835760][ T5870] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 880.099772][ T5870] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 880.359333][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.398871][ T5870] usb 5-1: Product: syz [ 880.427353][ T5870] usb 5-1: Manufacturer: syz [ 880.432033][ T5870] usb 5-1: SerialNumber: syz [ 880.506495][ T5870] usb 5-1: config 0 descriptor?? [ 880.675725][T16794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.815864][ T42] IPVS: stop unused estimator thread 0... [ 880.847364][T16794] 8021q: adding VLAN 0 to HW filter on device team0 [ 880.906984][ T5870] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 880.930055][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.937337][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.055436][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.062578][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.523714][T16794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.707855][T16794] veth0_vlan: entered promiscuous mode [ 881.805866][T16794] veth1_vlan: entered promiscuous mode [ 882.017751][T16794] veth0_macvtap: entered promiscuous mode [ 882.088294][T16794] veth1_macvtap: entered promiscuous mode [ 882.475533][T17018] hub 9-0:1.0: USB hub found [ 882.480801][T17018] hub 9-0:1.0: 1 port detected [ 882.608407][T16794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.644130][T16794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.729880][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.798122][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.075033][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.159904][ T5890] usb 5-1: USB disconnect, device number 54 [ 883.183963][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.544340][T17026] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 883.572101][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.644689][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.073790][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.083114][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.688957][T17053] fuse: Bad value for 'fd' [ 885.227241][T17061] program syz.4.3024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 885.606513][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3025'. [ 885.616100][T17076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3025'. [ 885.635025][T17076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3025'. [ 885.907292][T17086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3026'. [ 885.927431][T17086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 885.969507][T17086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3026'. [ 887.004172][ T5890] IPVS: starting estimator thread 0... [ 887.108673][T17103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 887.115512][T17105] IPVS: using max 38 ests per chain, 91200 per kthread [ 887.225127][ T5890] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 887.424065][ T5890] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 887.743060][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.800334][ T5890] usb 2-1: Product: syz [ 887.828526][ T5890] usb 2-1: Manufacturer: syz [ 887.855718][ T5890] usb 2-1: SerialNumber: syz [ 887.876350][ T5917] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 887.917117][ T5890] usb 2-1: config 0 descriptor?? [ 888.058013][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 888.110152][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'. [ 888.176133][ T5890] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 888.210178][ T5917] usb 4-1: config 7 has an invalid interface number: 140 but max is 0 [ 888.219532][ T5917] usb 4-1: config 7 has no interface number 0 [ 888.237361][ T5917] usb 4-1: config 7 interface 140 has no altsetting 0 [ 888.255540][ T5917] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=a1.aa [ 888.277649][T17119] netlink: 'syz.2.3033': attribute type 3 has an invalid length. [ 888.284860][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.303119][ T5917] usb 4-1: Product: syz [ 888.320121][T17118] delete_channel: no stack [ 888.327715][ T5917] usb 4-1: Manufacturer: syz [ 888.363525][ T5917] usb 4-1: SerialNumber: syz [ 888.630480][ T5917] ldusb 4-1:7.140: Interrupt in endpoint not found [ 888.689183][ T5917] usb 4-1: USB disconnect, device number 43 [ 889.657084][T17146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3040'. [ 889.815532][T17146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'. [ 889.829186][T17146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3040'. [ 890.135009][T17148] hub 9-0:1.0: USB hub found [ 890.143069][T17148] hub 9-0:1.0: 1 port detected [ 890.484363][T17153] fuse: Bad value for 'fd' [ 890.652964][ T5870] usb 2-1: USB disconnect, device number 43 [ 890.833379][T17163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3042'. [ 890.886829][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3042'. [ 890.900768][T17163] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3042'. [ 891.383115][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 891.396823][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 891.416405][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 891.430376][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 891.439477][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 892.164988][T17176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3046'. [ 892.302429][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.741437][T17188] ALSA: mixer_oss: invalid OSS volume '' [ 892.824515][T17196] netlink: 'syz.2.3047': attribute type 2 has an invalid length. [ 892.866085][T17196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3047'. [ 892.918501][T17170] chnl_net:caif_netlink_parms(): no params data found [ 893.370502][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.521514][ T5827] Bluetooth: hci1: command tx timeout [ 893.697290][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.098645][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.233323][T17170] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.267003][T17170] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.339696][T17170] bridge_slave_0: entered allmulticast mode [ 894.376904][T17170] bridge_slave_0: entered promiscuous mode [ 894.475514][T17170] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.504453][T17170] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.538917][T17170] bridge_slave_1: entered allmulticast mode [ 894.600964][T17170] bridge_slave_1: entered promiscuous mode [ 894.749053][T17170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.878252][T17170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.124726][ T5870] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 895.155393][T17170] team0: Port device team_slave_0 added [ 895.263139][T17170] team0: Port device team_slave_1 added [ 895.322894][ T5870] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 895.396297][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.424828][T17226] binder: BINDER_SET_CONTEXT_MGR already set [ 895.439025][ T5870] usb 3-1: Product: syz [ 895.444070][ T5870] usb 3-1: Manufacturer: syz [ 895.445631][T17226] binder: 17222:17226 ioctl 4018620d 80000200 returned -16 [ 895.491907][ T5870] usb 3-1: SerialNumber: syz [ 895.575012][ T5827] Bluetooth: hci1: command tx timeout [ 895.577505][ T5870] usb 3-1: config 0 descriptor?? [ 895.613014][T17170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.623817][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 895.683132][T17170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.994092][ T5870] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 896.043927][T17170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.087603][T17170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.172314][T17170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.647919][ T42] bridge_slave_1: left allmulticast mode [ 896.659505][ T42] bridge_slave_1: left promiscuous mode [ 896.672978][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.748393][ T42] bridge_slave_0: left allmulticast mode [ 896.755698][ T42] bridge_slave_0: left promiscuous mode [ 896.784712][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.825706][T17237] ptrace attach of "./syz-executor exec"[16505] was attempted by "./syz-executor exec"[17237] [ 897.531399][T17250] netlink: 'syz.1.3059': attribute type 4 has an invalid length. [ 897.628062][ T29] audit: type=1400 audit(1771205091.841:3): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=17249 comm="syz.1.3059" [ 897.659414][ T5839] Bluetooth: hci1: command tx timeout [ 898.045924][ T5919] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 898.215826][ T5919] usb 5-1: device descriptor read/64, error -71 [ 898.260272][T16734] usb 3-1: USB disconnect, device number 41 [ 898.347113][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.413661][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.457422][ T5919] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 898.458886][ T42] bond0 (unregistering): Released all slaves [ 898.570520][T17170] hsr_slave_0: entered promiscuous mode [ 898.578247][T17170] hsr_slave_1: entered promiscuous mode [ 898.595139][ T5919] usb 5-1: device descriptor read/64, error -71 [ 898.735561][ T5919] usb usb5-port1: attempt power cycle [ 899.026881][T17273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'. [ 899.079636][ T42] hsr_slave_0: left promiscuous mode [ 899.095863][ T5919] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 899.118754][ T42] hsr_slave_1: left promiscuous mode [ 899.135617][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.147116][ T5919] usb 5-1: device descriptor read/8, error -71 [ 899.157430][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.166679][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.205745][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.238517][ T42] veth1_macvtap: left promiscuous mode [ 899.246323][ T42] veth0_macvtap: left promiscuous mode [ 899.252012][ T42] veth1_vlan: left promiscuous mode [ 899.276351][ T42] veth0_vlan: left promiscuous mode [ 899.410366][ T5919] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 899.588606][ T5919] usb 5-1: device descriptor read/8, error -71 [ 899.736576][ T5839] Bluetooth: hci1: command tx timeout [ 899.773689][ T5919] usb usb5-port1: unable to enumerate USB device [ 900.349788][ T42] team0 (unregistering): Port device team_slave_1 removed [ 900.395397][ T42] team0 (unregistering): Port device team_slave_0 removed [ 902.044785][ T29] audit: type=1326 audit(1771205096.261:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17306 comm="syz.3.3072" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x0 [ 902.168456][T17308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 902.195494][T17317] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 902.207919][T16734] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 902.284692][ T5919] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 902.414752][T16734] usb 3-1: Using ep0 maxpacket: 8 [ 902.426621][T16734] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 902.449771][T16734] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 902.480642][ T5919] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 902.502314][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.521996][T16734] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 902.552227][ T5919] usb 2-1: Product: syz [ 902.601070][ T5919] usb 2-1: Manufacturer: syz [ 902.612109][T16734] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 902.642668][ T5919] usb 2-1: SerialNumber: syz [ 902.729152][ T5919] usb 2-1: config 0 descriptor?? [ 902.738983][T16734] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.797376][T16734] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 902.882110][T16734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.926073][T17330] netlink: 'syz.3.3075': attribute type 10 has an invalid length. [ 903.275105][ T5919] int51x1 2-1:0.0: probe with driver int51x1 failed with error -22 [ 903.329451][T16734] usb 3-1: GET_CAPABILITIES returned 0 [ 903.398077][T16734] usbtmc 3-1:16.0: can't read capabilities [ 903.549395][T17330] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 903.611671][T17340] netlink: 'syz.4.3074': attribute type 10 has an invalid length. [ 903.622605][ T5822] usb 3-1: USB disconnect, device number 42 [ 903.683615][T17326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 903.694347][T17341] netlink: 'syz.4.3074': attribute type 10 has an invalid length. [ 903.786162][T17340] team0: Port device netdevsim0 added [ 903.806485][T17170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 903.825797][T17170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 903.865739][T17341] team0: Port device netdevsim0 removed [ 903.919964][T17341] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 904.039121][T17170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 904.072858][T17170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 904.437993][ T42] IPVS: stop unused estimator thread 0... [ 904.586986][T17170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.651106][T17170] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.680820][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.688008][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.759670][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.766834][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.880721][T17170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.023847][T17170] veth0_vlan: entered promiscuous mode [ 905.082865][T17170] veth1_vlan: entered promiscuous mode [ 905.169987][T17170] veth0_macvtap: entered promiscuous mode [ 905.185940][T17170] veth1_macvtap: entered promiscuous mode [ 905.234037][T17170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.278025][T17170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.325618][T17295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.358471][T17295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.371792][T17295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.385175][ T29] audit: type=1326 audit(1771205099.611:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.428176][T17295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.454317][ T29] audit: type=1326 audit(1771205099.671:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.476766][ T5822] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 905.556114][ T5890] usb 2-1: USB disconnect, device number 44 [ 905.634781][ T29] audit: type=1326 audit(1771205099.671:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.697434][ T29] audit: type=1326 audit(1771205099.671:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.720542][ T29] audit: type=1326 audit(1771205099.671:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.768082][ T29] audit: type=1326 audit(1771205099.671:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.816889][ T29] audit: type=1326 audit(1771205099.671:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.840351][T17381] binder: BINDER_SET_CONTEXT_MGR already set [ 905.861960][T17381] binder: 17379:17381 ioctl 4018620d 80000140 returned -16 [ 905.879600][ T29] audit: type=1326 audit(1771205099.671:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.903397][ T29] audit: type=1326 audit(1771205099.701:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 905.934057][ T29] audit: type=1326 audit(1771205099.701:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.4.3077" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcef6c code=0x7ffc0000 [ 906.517971][T17295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.557306][T17295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.669272][T17397] binder: 17396:17397 ioctl c0306201 80000480 returned -14 [ 906.702944][T17397] sctp: [Deprecated]: syz.4.3086 (pid 17397) Use of int in max_burst socket option deprecated. [ 906.702944][T17397] Use struct sctp_assoc_value instead [ 906.756265][T17295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.766153][T17295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.590901][T17418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3052'. [ 907.600015][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3052'. [ 907.739511][T17418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3052'. [ 907.849099][T17431] ptrace attach of "./syz-executor exec"[16216] was attempted by "./syz-executor exec"[17431] [ 907.864967][ T5918] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 908.134637][ T5918] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 908.153317][ T5918] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 908.204799][ T5918] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 908.296542][ T5918] usb 5-1: config 220 has no interface number 2 [ 908.314467][ T5918] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 908.349674][ T5918] usb 5-1: config 220 interface 0 has no altsetting 0 [ 908.436220][ T5918] usb 5-1: config 220 interface 76 has no altsetting 0 [ 908.453284][ T5918] usb 5-1: config 220 interface 1 has no altsetting 0 [ 908.480101][ T5918] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 908.491379][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.803480][ T5918] usb 5-1: Product: syz [ 908.958264][ T5918] usb 5-1: Manufacturer: syz [ 909.009378][ T5918] usb 5-1: SerialNumber: syz [ 909.206102][T17450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3098'. [ 909.353236][ T5918] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 909.364926][T17452] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3097'. [ 909.388064][ T5918] uvcvideo 5-1:220.0: No valid video chain found. [ 909.396676][ T5918] usb 5-1: selecting invalid altsetting 0 [ 909.448875][ T5918] usb 5-1: selecting invalid altsetting 0 [ 909.625717][ T5918] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 909.850217][ T5918] usb 5-1: USB disconnect, device number 60 [ 909.874768][T17452] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3097'. [ 910.274724][T16734] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 910.457613][T16734] usb 2-1: Using ep0 maxpacket: 16 [ 910.488259][T16734] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 910.507809][T16734] usb 2-1: config 0 has no interface number 0 [ 910.526380][T16734] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 910.556828][T16734] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 910.574191][T16734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.599404][T16734] usb 2-1: Product: syz [ 910.616365][T16734] usb 2-1: Manufacturer: syz [ 910.627843][T16734] usb 2-1: SerialNumber: syz [ 910.666184][T16734] usb 2-1: config 0 descriptor?? [ 910.899707][T17457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.925191][T17458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.936400][T17457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.980040][T17458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.459374][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 911.468589][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 911.477990][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 911.498709][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 911.555246][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 912.932486][T16734] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 912.997265][T16734] usb 2-1: USB disconnect, device number 45 [ 913.508119][T17507] tipc: Started in network mode [ 913.535555][T17507] tipc: Node identity e0000002, cluster identity 4711 [ 913.661007][T17507] tipc: Enabling of bearer rejected, failed to enable media [ 913.735653][ T5827] Bluetooth: hci4: command tx timeout [ 913.878897][ T42] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.171487][ T42] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.283375][ T42] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.369325][ T42] bond0: (slave netdevsim0): Releasing backup interface [ 914.384208][ T42] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.704126][T17488] chnl_net:caif_netlink_parms(): no params data found [ 915.276484][T17488] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.283678][T17488] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.414258][T17488] bridge_slave_0: entered allmulticast mode [ 915.423552][T17488] bridge_slave_0: entered promiscuous mode [ 915.436341][T17488] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.443735][T17488] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.464109][T17488] bridge_slave_1: entered allmulticast mode [ 915.531436][T17488] bridge_slave_1: entered promiscuous mode [ 915.547097][ T42] bridge_slave_1: left allmulticast mode [ 915.600918][ T42] bridge_slave_1: left promiscuous mode [ 915.675977][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.735238][ T42] bridge_slave_0: left allmulticast mode [ 915.741134][ T42] bridge_slave_0: left promiscuous mode [ 915.758883][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.830592][ T5827] Bluetooth: hci4: command tx timeout [ 916.267148][T17545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3113'. [ 916.671083][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.685572][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.696197][ T42] bond0 (unregistering): Released all slaves [ 916.758853][T17488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.772638][T17488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.967593][T17488] team0: Port device team_slave_0 added [ 916.985216][T17488] team0: Port device team_slave_1 added [ 917.151199][ T42] hsr_slave_0: left promiscuous mode [ 917.172828][ T42] hsr_slave_1: left promiscuous mode [ 917.192474][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.221731][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.236110][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.244067][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.261320][ T42] veth1_macvtap: left promiscuous mode [ 917.273522][ T42] veth0_macvtap: left promiscuous mode [ 917.279607][ T42] veth1_vlan: left promiscuous mode [ 917.288082][ T42] veth0_vlan: left promiscuous mode [ 917.906068][ T5827] Bluetooth: hci4: command tx timeout [ 918.171189][ T42] team0 (unregistering): Port device team_slave_1 removed [ 918.191382][T17584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'. [ 918.203061][ T42] team0 (unregistering): Port device team_slave_0 removed [ 918.351909][T17488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.359116][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.385326][T17488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.411294][T17579] ÿÿÿÿÿÿ: renamed from veth1_vlan (while UP) [ 918.417869][T17579] FAULT_INJECTION: forcing a failure. [ 918.417869][T17579] name failslab, interval 1, probability 0, space 0, times 1 [ 918.431226][T17579] CPU: 1 UID: 0 PID: 17579 Comm: syz.0.3119 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.431259][T17579] Tainted: [L]=SOFTLOCKUP [ 918.431265][T17579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.431283][T17579] Call Trace: [ 918.431289][T17579] [ 918.431296][T17579] dump_stack_lvl+0xe8/0x150 [ 918.431325][T17579] should_fail_ex+0x412/0x560 [ 918.431352][T17579] should_failslab+0xa8/0x100 [ 918.431371][T17579] __kmalloc_noprof+0xe8/0x760 [ 918.431397][T17579] ? kobject_get_path+0xc5/0x2f0 [ 918.431415][T17579] ? kernfs_rename_ns+0x2e9/0x7b0 [ 918.431438][T17579] kobject_get_path+0xc5/0x2f0 [ 918.431477][T17579] kobject_rename+0x193/0x520 [ 918.431503][T17579] ? kernfs_put+0x40e/0x470 [ 918.431525][T17579] ? __pfx_kobject_rename+0x10/0x10 [ 918.431562][T17579] ? sysfs_rename_link_ns+0x178/0x1b0 [ 918.431589][T17579] device_rename+0x15d/0x210 [ 918.431619][T17579] netif_change_name+0x28e/0x960 [ 918.431643][T17579] ? dev_change_name+0x125/0x260 [ 918.431667][T17579] ? dev_ioctl+0x5dc/0x1150 [ 918.431689][T17579] ? __pfx_netif_change_name+0x10/0x10 [ 918.431708][T17579] ? full_name_hash+0x92/0xe0 [ 918.431731][T17579] ? __dev_get_by_name+0xe5/0x140 [ 918.431753][T17579] dev_change_name+0x125/0x260 [ 918.431779][T17579] dev_ioctl+0x5ec/0x1150 [ 918.431803][T17579] sock_do_ioctl+0x23e/0x320 [ 918.431824][T17579] ? __pfx_sock_do_ioctl+0x10/0x10 [ 918.431850][T17579] ? unix_ioctl+0x203/0x720 [ 918.431868][T17579] ? unix_compat_ioctl+0x15/0x30 [ 918.431889][T17579] compat_sock_ioctl+0xba6/0xcb0 [ 918.431912][T17579] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 918.431933][T17579] ? __fget_files+0x3a0/0x420 [ 918.431953][T17579] ? __fget_files+0x2a/0x420 [ 918.431975][T17579] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 918.431996][T17579] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 918.432015][T17579] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 918.432034][T17579] ? __fget_files+0x3a0/0x420 [ 918.432075][T17579] ? fput+0xa0/0xd0 [ 918.432102][T17579] ? ksys_write+0x242/0x270 [ 918.432146][T17579] __do_fast_syscall_32+0x20d/0x640 [ 918.432165][T17579] ? do_fast_syscall_32+0x33/0x70 [ 918.432181][T17579] ? asm_int80_emulation+0x1a/0x20 [ 918.432196][T17579] ? do_int80_emulation+0x274/0x4d0 [ 918.432211][T17579] ? trace_irq_disable+0x3b/0x150 [ 918.432235][T17579] do_fast_syscall_32+0x33/0x70 [ 918.432252][T17579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 918.432276][T17579] RIP: 0023:0xf705ef6c [ 918.432294][T17579] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 918.432308][T17579] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 918.432327][T17579] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008923 [ 918.432337][T17579] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 918.432346][T17579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 918.432355][T17579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 918.432364][T17579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 918.432386][T17579] [ 918.773920][T17584] vlan2: entered promiscuous mode [ 918.786917][T17584] bridge0: entered promiscuous mode [ 918.854517][T17488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.867041][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.936361][T17488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.062862][T17590] process 'syz.2.3123' launched '/dev/fd/9' with NULL argv: empty string added [ 919.325281][T16734] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 919.351182][T17488] hsr_slave_0: entered promiscuous mode [ 919.361272][T17488] hsr_slave_1: entered promiscuous mode [ 919.391251][T17488] debugfs: 'hsr0' already exists in 'hsr' [ 919.401196][T17488] Cannot create hsr debugfs directory [ 919.655962][T16734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.706037][T17610] ptrace attach of "./syz-executor exec"[16794] was attempted by "./syz-executor exec"[17610] [ 919.743728][T16734] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 919.794860][T16734] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 919.803972][T16734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.814837][ T5822] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 919.977626][ T5827] Bluetooth: hci4: command tx timeout [ 920.055182][T16734] usb 3-1: config 0 descriptor?? [ 920.265327][ T5822] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 920.346594][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.503287][ T5822] usb 4-1: Product: syz [ 920.705215][T16734] Bluetooth: Can't get state to change to load ram patch err [ 920.733788][T16734] Bluetooth: Loading patch file failed [ 920.759802][ T5822] usb 4-1: Manufacturer: syz [ 920.764538][ T5822] usb 4-1: SerialNumber: syz [ 920.785570][ T5822] usb 4-1: config 0 descriptor?? [ 920.795960][T16734] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 921.023202][T16734] usb 3-1: USB disconnect, device number 43 [ 921.062571][ T5822] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22 [ 921.997776][ T42] IPVS: stop unused estimator thread 0... [ 922.315396][ T10] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 922.361419][ T5917] usb 4-1: USB disconnect, device number 44 [ 922.500982][T17488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 922.516619][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 32181, setting to 1023 [ 922.543262][ T10] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 922.563633][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.588187][T17488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 922.608805][ T10] usb 3-1: Product: syz [ 922.613020][ T10] usb 3-1: Manufacturer: syz [ 922.662171][ T10] usb 3-1: SerialNumber: syz [ 922.675894][ T10] usb 3-1: config 0 descriptor?? [ 922.698516][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 922.713798][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 922.815978][ T10] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 922.997763][T17488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 923.067984][T17649] openvswitch: netlink: Flow actions attr not present in new flow. [ 923.219443][T17651] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 923.224960][T17488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 923.537985][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 923.538000][ T29] audit: type=1326 audit(1771205117.741:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.1.3132" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aef6c code=0x0 [ 923.699178][T17662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3132'. [ 923.766354][T17662] netlink: 'syz.1.3132': attribute type 30 has an invalid length. [ 923.802727][T17664] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 924.001889][ T1038] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.020040][ T1038] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.130246][ T1038] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.164657][ T1038] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 924.289051][T17488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.300720][T17671] netlink: 'syz.0.3135': attribute type 16 has an invalid length. [ 924.329506][T17671] netlink: 'syz.0.3135': attribute type 17 has an invalid length. [ 924.346898][T17488] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.496380][T17671] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.504130][T17671] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.782287][T17671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.794865][T17671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 924.947874][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.993589][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.000836][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.043453][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.052776][ T5918] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 925.102192][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.109386][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.220678][ T5918] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 925.230084][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.264710][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.276306][ T5918] usb 2-1: config 0 descriptor?? [ 925.299283][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.319453][ T5918] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 925.536083][ T29] audit: type=1326 audit(1771205119.761:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.581522][ T5918] gp8psk: usb in 128 operation failed. [ 925.588167][ T29] audit: type=1326 audit(1771205119.761:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.649745][ T29] audit: type=1326 audit(1771205119.761:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.677853][ T29] audit: type=1326 audit(1771205119.801:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.700976][ T29] audit: type=1326 audit(1771205119.801:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.709120][T17488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.726518][ T29] audit: type=1326 audit(1771205119.801:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.759534][ T29] audit: type=1326 audit(1771205119.821:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.838898][ T29] audit: type=1326 audit(1771205119.871:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 925.867772][ T29] audit: type=1326 audit(1771205119.901:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17676 comm="syz.1.3136" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e572b code=0x7ffc0000 [ 925.889908][ T5918] gp8psk: usb in 137 operation failed. [ 925.898154][ T5918] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 925.910267][ T5918] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 926.204385][T17488] veth0_vlan: entered promiscuous mode [ 926.248144][ T5822] usb 3-1: USB disconnect, device number 44 [ 926.280369][ T5918] usb 2-1: USB disconnect, device number 46 [ 926.353263][T17488] veth1_vlan: entered promiscuous mode [ 927.326984][T17708] hub 9-0:1.0: USB hub found [ 927.338418][T17708] hub 9-0:1.0: 1 port detected [ 928.142818][T17488] veth0_macvtap: entered promiscuous mode [ 928.171379][T17488] veth1_macvtap: entered promiscuous mode [ 928.337433][T17488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.503796][T17488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.564809][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.583812][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.727371][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.749739][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.970554][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.183039][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.290424][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.408573][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.493018][T16734] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 929.739725][T16734] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 929.769034][T16734] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 929.795740][T17735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3147'. [ 929.844414][T16734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 929.878177][T16734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.890442][T16734] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 929.974714][T16734] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 929.984301][T16734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.013460][T16734] usb 3-1: Product: syz [ 930.026228][T16734] usb 3-1: Manufacturer: syz [ 930.044291][T16734] usb 3-1: SerialNumber: syz [ 930.076164][T16734] usb 3-1: config 0 descriptor?? [ 930.093904][T17726] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 930.105968][T16734] iuu_phoenix 3-1:0.0: iuu_phoenix converter detected [ 930.165725][T16734] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 930.358294][T17726] netlink: 'syz.2.3145': attribute type 1 has an invalid length. [ 930.377543][ T5890] usb 3-1: USB disconnect, device number 45 [ 930.412608][ T5890] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 930.492544][ T5890] iuu_phoenix 3-1:0.0: device disconnected [ 931.634243][T17742] ptrace attach of "./syz-executor exec"[16505] was attempted by "./syz-executor exec"[17742] [ 931.649898][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.659944][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.498861][T17766] fuse: Bad value for 'fd' [ 932.507490][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 932.507509][ T29] audit: type=1326 audit(1771205126.731:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.540592][ T29] audit: type=1326 audit(1771205126.761:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.566723][ T29] audit: type=1326 audit(1771205126.761:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.628387][ T29] audit: type=1326 audit(1771205126.841:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.714633][ T29] audit: type=1326 audit(1771205126.851:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.744797][ T29] audit: type=1326 audit(1771205126.851:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.767360][ T29] audit: type=1326 audit(1771205126.881:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.819590][T17767] ptrace attach of "./syz-executor exec"[16216] was attempted by "./syz-executor exec"[17767] [ 932.846619][ T29] audit: type=1326 audit(1771205126.901:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 932.909780][ T29] audit: type=1326 audit(1771205126.901:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17758 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705ef6c code=0x7ffc0000 [ 933.341053][T17772] hub 9-0:1.0: USB hub found [ 933.348995][T17772] hub 9-0:1.0: 1 port detected [ 933.741012][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 935.282624][T17787] netlink: 'syz.3.3157': attribute type 4 has an invalid length. [ 935.463358][T17794] netlink: 'syz.3.3157': attribute type 4 has an invalid length. [ 936.216436][T17782] ALSA: mixer_oss: invalid OSS volume '' [ 936.817002][T17796] ALSA: mixer_oss: invalid OSS volume '' [ 937.311826][T17802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3160'. [ 938.829934][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 938.839300][T17824] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3165'. [ 939.043417][T17841] ptrace attach of "./syz-executor exec"[17488] was attempted by "./syz-executor exec"[17841] [ 939.951203][T17846] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 940.144665][T16734] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 940.317255][T16734] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 940.332123][T16734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 940.384157][T16734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 940.409021][T16734] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 940.435203][T16734] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 940.446971][T16734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.491115][T16734] usb 3-1: config 0 descriptor?? [ 940.939078][T16734] hid_parser_main: 7 callbacks suppressed [ 940.939107][T16734] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 940.986348][T16734] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 941.002609][T16734] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 941.035828][T16734] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 941.057322][T16734] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 941.115233][T16734] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 941.499043][T17844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3172'. [ 941.638846][ T5890] usb 3-1: USB disconnect, device number 46 [ 943.579452][T17896] syzkaller1: entered promiscuous mode [ 943.624895][T17896] syzkaller1: entered allmulticast mode [ 943.637847][T17902] FAULT_INJECTION: forcing a failure. [ 943.637847][T17902] name failslab, interval 1, probability 0, space 0, times 0 [ 943.729698][T17902] CPU: 0 UID: 0 PID: 17902 Comm: syz.4.3191 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.729732][T17902] Tainted: [L]=SOFTLOCKUP [ 943.729739][T17902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.729751][T17902] Call Trace: [ 943.729759][T17902] [ 943.729767][T17902] dump_stack_lvl+0xe8/0x150 [ 943.729801][T17902] should_fail_ex+0x412/0x560 [ 943.729833][T17902] should_failslab+0xa8/0x100 [ 943.729857][T17902] __kmalloc_cache_noprof+0x88/0x660 [ 943.729889][T17902] ? io_wq_create+0x6b/0x7b0 [ 943.729918][T17902] io_wq_create+0x6b/0x7b0 [ 943.729949][T17902] io_uring_alloc_task_context+0x265/0x590 [ 943.729986][T17902] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 943.730030][T17902] __io_uring_add_tctx_node+0x38d/0x530 [ 943.730070][T17902] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 943.730102][T17902] ? __fget_files+0x2a/0x420 [ 943.730134][T17902] ? __fget_files+0x2a/0x420 [ 943.730176][T17902] __io_uring_add_tctx_node_from_submit+0x90/0x120 [ 943.730214][T17902] __se_sys_io_uring_enter+0x15d2/0x18c0 [ 943.730245][T17902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 943.730275][T17902] ? __fget_files+0x3a0/0x420 [ 943.730304][T17902] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 943.730332][T17902] ? fput+0xa0/0xd0 [ 943.730360][T17902] ? ksys_write+0x242/0x270 [ 943.730401][T17902] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 943.730428][T17902] __do_fast_syscall_32+0x20d/0x640 [ 943.730456][T17902] ? do_fast_syscall_32+0x33/0x70 [ 943.730479][T17902] ? asm_int80_emulation+0x1a/0x20 [ 943.730498][T17902] ? do_int80_emulation+0x274/0x4d0 [ 943.730520][T17902] ? trace_irq_disable+0x3b/0x150 [ 943.730553][T17902] do_fast_syscall_32+0x33/0x70 [ 943.730579][T17902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 943.730606][T17902] RIP: 0023:0xf7f95f6c [ 943.730626][T17902] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 943.730644][T17902] RSP: 002b:00000000f534b50c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 943.730668][T17902] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000047f5 [ 943.730683][T17902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 943.730695][T17902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 943.730708][T17902] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 943.730720][T17902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 943.730752][T17902] [ 944.478434][T17905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3193'. [ 944.914708][T16734] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 945.054694][T16734] usb 2-1: device descriptor read/64, error -71 [ 945.294858][T16734] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 945.424860][T16734] usb 2-1: device descriptor read/64, error -71 [ 945.554897][T16734] usb usb2-port1: attempt power cycle [ 947.844894][T16734] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 948.202042][T16734] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 948.211776][T16734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.222212][T16734] usb 4-1: Product: syz [ 948.241667][T16734] usb 4-1: Manufacturer: syz [ 948.246923][T16734] usb 4-1: SerialNumber: syz [ 948.273747][T16734] usb 4-1: config 0 descriptor?? [ 948.615926][T17960] ALSA: mixer_oss: invalid OSS volume '' [ 949.296939][T17973] hub 9-0:1.0: USB hub found [ 949.304727][T17973] hub 9-0:1.0: 1 port detected [ 950.234710][ T5918] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 950.516336][ T5918] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 950.527528][ T5918] usb 3-1: config 0 has no interface number 0 [ 950.637647][ T5918] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 950.656033][ T5918] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 950.712548][T16734] int51x1 4-1:0.0: probe with driver int51x1 failed with error -71 [ 950.731083][T16734] usb 4-1: USB disconnect, device number 45 [ 950.737434][ T5918] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 950.750891][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.782948][ T5918] usb 3-1: Product: syz [ 950.803958][ T5918] usb 3-1: Manufacturer: syz [ 950.824736][ T5918] usb 3-1: SerialNumber: syz [ 950.850049][ T5918] usb 3-1: config 0 descriptor?? [ 950.900856][T17984] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 950.925953][ T5918] ums-sddr09 3-1:0.20: USB Mass Storage device detected [ 951.058528][ T5918] ums-sddr09 3-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 951.315671][T18002] ptrace attach of "./syz-executor exec"[16505] was attempted by "./syz-executor exec"[18002] [ 951.436117][T18003] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3215'. [ 951.988804][T18005] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 953.317816][ T5822] usb 3-1: USB disconnect, device number 47 [ 953.670411][T18013] ALSA: mixer_oss: invalid OSS volume '' [ 954.234788][ T5917] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 954.468246][ T5917] usb 2-1: no configurations [ 954.478089][ T5917] usb 2-1: can't read configurations, error -22 [ 954.626335][ T5917] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 954.788049][ T5917] usb 2-1: no configurations [ 954.793224][ T5917] usb 2-1: can't read configurations, error -22 [ 954.800678][ T5917] usb usb2-port1: attempt power cycle [ 954.954691][T16734] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 955.084855][T16734] usb 3-1: device descriptor read/64, error -71 [ 955.145124][ T5917] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 955.176572][ T5917] usb 2-1: no configurations [ 955.182560][ T5917] usb 2-1: can't read configurations, error -22 [ 955.314821][ T5917] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 955.341819][ T5917] usb 2-1: no configurations [ 955.348554][T16734] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 955.348662][ T5917] usb 2-1: can't read configurations, error -22 [ 955.367600][ T5917] usb usb2-port1: unable to enumerate USB device [ 955.426446][ T5918] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 955.518027][T16734] usb 3-1: device descriptor read/64, error -71 [ 955.614628][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 955.626093][ T5918] usb 5-1: config 252 has too many interfaces: 129, using maximum allowed: 32 [ 955.647034][T16734] usb usb3-port1: attempt power cycle [ 955.656871][ T5918] usb 5-1: config 252 has 1 interface, different from the descriptor's value: 129 [ 955.692245][ T5918] usb 5-1: config 252 has no interface number 0 [ 955.714518][ T5918] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 955.744450][ T5918] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 955.758372][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.774965][ T5918] usb 5-1: Product: syz [ 955.779195][ T5918] usb 5-1: Manufacturer: syz [ 955.783823][ T5918] usb 5-1: SerialNumber: syz [ 955.806755][ T5918] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 955.904791][ T10] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 956.003862][ T1038] usb 5-1: Failed to submit usb control message: -71 [ 956.004515][ T5917] usb 5-1: USB disconnect, device number 61 [ 956.019018][ T1038] usb 5-1: unable to send the bmi data to the device: -71 [ 956.027358][ T1038] usb 5-1: unable to get target info from device [ 956.033950][ T1038] usb 5-1: could not get target info (-71) [ 956.040356][ T1038] usb 5-1: could not probe fw (-71) [ 956.068418][T16734] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 956.095602][T16734] usb 3-1: device descriptor read/8, error -71 [ 956.103305][ T10] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 956.111644][ T10] usb 2-1: config 0 has no interface number 0 [ 956.118212][ T10] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 956.129277][ T10] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 956.142917][ T10] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.00 [ 956.152618][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.164222][ T10] usb 2-1: Product: syz [ 956.168546][ T10] usb 2-1: Manufacturer: syz [ 956.173216][ T10] usb 2-1: SerialNumber: syz [ 956.182289][ T10] usb 2-1: config 0 descriptor?? [ 956.192064][T18063] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 956.202403][ T10] ums-sddr09 2-1:0.20: USB Mass Storage device detected [ 956.258134][ T10] ums-sddr09 2-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 956.334736][T16734] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 956.355850][T16734] usb 3-1: device descriptor read/8, error -71 [ 956.465084][T16734] usb usb3-port1: unable to enumerate USB device [ 956.628054][T18076] syz_tun: entered allmulticast mode [ 956.871108][T18077] fuse: Unknown parameter 'fd<0x00000000000000090xffffffffffffffff00000000000000000000' [ 957.134658][ T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 957.274743][T16734] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 957.288416][ T10] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 957.297294][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.311201][ T10] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 957.320684][ T10] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 957.334477][ T10] usb 5-1: Manufacturer: syz [ 957.346341][ T10] usb 5-1: config 0 descriptor?? [ 957.434690][T16734] usb 1-1: Using ep0 maxpacket: 32 [ 957.443985][T16734] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 957.453661][T16734] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.462097][ T10] rc_core: IR keymap rc-hauppauge not found [ 957.469412][ T10] Registered IR keymap rc-empty [ 957.476371][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 957.487328][T16734] usb 1-1: config 0 descriptor?? [ 957.497735][T16734] gspca_main: sq930x-2.14.0 probing 041e:403c [ 957.506962][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 957.634317][T18078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.659472][T18078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.674914][T16731] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 957.706016][T18078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.735945][T18078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.834956][T16731] usb 4-1: Using ep0 maxpacket: 32 [ 957.849539][T16731] usb 4-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 957.864820][T16731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.884721][T16731] usb 4-1: Product: syz [ 957.888962][T16731] usb 4-1: Manufacturer: syz [ 957.893594][T16731] usb 4-1: SerialNumber: syz [ 957.908630][T16731] usb 4-1: config 0 descriptor?? [ 957.920803][T16731] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 957.929819][T16731] dw2102: su3000_power_ctrl: 1, initialized 0 [ 957.936595][T16731] dvb-usb: bulk message failed: -22 (2/0) [ 957.953968][ T10] usb 5-1: USB disconnect, device number 62 [ 957.967004][T16731] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 957.995446][T16731] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 958.010186][T16731] usb 4-1: media controller created [ 958.026506][T16731] dvb-usb: bulk message failed: -22 (6/0) [ 958.036469][T16731] dw2102: i2c transfer failed. [ 958.041581][T16731] dvb-usb: bulk message failed: -22 (6/0) [ 958.047712][T16731] dw2102: i2c transfer failed. [ 958.052535][T16731] dvb-usb: bulk message failed: -22 (6/0) [ 958.061232][T16731] dw2102: i2c transfer failed. [ 958.068347][T16731] dvb-usb: bulk message failed: -22 (6/0) [ 958.074328][T16731] dw2102: i2c transfer failed. [ 958.079208][T16731] dvb-usb: bulk message failed: -22 (6/0) [ 958.086197][T16731] dw2102: i2c transfer failed. [ 958.091021][T16731] dvb-usb: bulk message failed: -22 (6/0) [ 958.097620][T16731] dw2102: i2c transfer failed. [ 958.102545][T16731] dvb-usb: MAC address: 02:02:02:02:02:02 [ 958.110972][T18075] syz_tun: left allmulticast mode [ 958.125092][T18084] dvb-usb: bulk message failed: -22 (3/0) [ 958.131824][T18084] dw2102: i2c transfer failed. [ 958.139972][T16731] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.148808][T18084] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 958.160753][T18084] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 958.169172][T18084] CPU: 0 UID: 0 PID: 18084 Comm: syz.3.3234 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.180125][T18084] Tainted: [L]=SOFTLOCKUP [ 958.184471][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 958.194861][T18084] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 958.200817][T18084] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 fd ad 3a fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f5 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 958.220505][T18084] RSP: 0000:ffffc9000d32f9d0 EFLAGS: 00010202 [ 958.226635][T18084] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 958.234652][T18084] RDX: ffffffff87f4e205 RSI: ffffffff8f766d70 RDI: 0000000000001900 [ 958.242647][T18084] RBP: 0000000000000001 R08: ffff888027eb1e40 R09: 0000000000000002 [ 958.250638][T18084] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 958.258629][T18084] R13: 1ffff1100f86a05a R14: 0000000000000002 R15: ffff88807c3502d8 [ 958.266687][T18084] FS: 0000000000000000(0000) GS:ffff88812546f000(0063) knlGS:00000000f54adb40 [ 958.275665][T18084] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 958.282263][T18084] CR2: 00007f3041f909c0 CR3: 0000000057b64000 CR4: 00000000003526f0 [ 958.290269][T18084] Call Trace: [ 958.293580][T18084] [ 958.296533][T18084] __i2c_transfer+0x79a/0x2020 [ 958.301317][T18084] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 958.307157][T18084] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 958.313013][T18084] ? i2c_transfer+0xc8/0x2d0 [ 958.317627][T18084] i2c_transfer+0x1cc/0x2d0 [ 958.322154][T18084] i2cdev_ioctl_rdwr+0x460/0x740 [ 958.327119][T18084] compat_i2cdev_ioctl+0x59f/0x5c0 [ 958.332254][T18084] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 958.337922][T18084] ? __fget_files+0x3a0/0x420 [ 958.342641][T18084] ? __fget_files+0x2a/0x420 [ 958.347282][T18084] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 958.352886][T18084] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 958.358376][T18084] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 958.364374][T18084] ? kmem_cache_free+0x187/0x630 [ 958.369343][T18084] ? __se_sys_futex_time32+0x3ab/0x440 [ 958.374844][T18084] ? rcu_is_watching+0x15/0xb0 [ 958.379629][T18084] __do_fast_syscall_32+0x20d/0x640 [ 958.384855][T18084] ? do_fast_syscall_32+0x33/0x70 [ 958.389919][T18084] ? asm_int80_emulation+0x1a/0x20 [ 958.395048][T18084] ? do_int80_emulation+0x274/0x4d0 [ 958.400290][T18084] ? trace_irq_disable+0x3b/0x150 [ 958.405407][T18084] do_fast_syscall_32+0x33/0x70 [ 958.410294][T18084] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.416636][T18084] RIP: 0023:0xf70bef6c [ 958.420744][T18084] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 958.440373][T18084] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 958.448821][T18084] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 958.456814][T18084] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.464820][T18084] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.472817][T18084] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 958.480794][T18084] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.488775][T18084] [ 958.491836][T18084] Modules linked in: [ 958.496873][T18084] ---[ end trace 0000000000000000 ]--- [ 958.511274][T18084] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 958.517481][T18084] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 fd ad 3a fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f5 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 958.538669][T18084] RSP: 0000:ffffc9000d32f9d0 EFLAGS: 00010202 [ 958.545151][T18084] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 958.553284][T18084] RDX: ffffffff87f4e205 RSI: ffffffff8f766d70 RDI: 0000000000001900 [ 958.561422][T18084] RBP: 0000000000000001 R08: ffff888027eb1e40 R09: 0000000000000002 [ 958.569595][T18084] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 958.577695][T18084] R13: 1ffff1100f86a05a R14: 0000000000000002 R15: ffff88807c3502d8 [ 958.585816][T18084] FS: 0000000000000000(0000) GS:ffff88812556f000(0063) knlGS:00000000f54adb40 [ 958.594877][T18084] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 958.601500][T18084] CR2: 0000000033c23ffc CR3: 0000000057b64000 CR4: 00000000003526f0 [ 958.610962][T18084] Kernel panic - not syncing: Fatal exception [ 958.617698][T18084] Kernel Offset: disabled [ 958.622073][T18084] Rebooting in 86400 seconds..