last executing test programs: 10.355589661s ago: executing program 0 (id=1120): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x2000c0d5) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x7f, 0x20000a30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0"], 0x40}}, 0x0) r7 = socket(0x11, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000140)=']\x91%.\x00', 0x5) syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xfd, 0x3d, 0xc3, 0x8, 0x499, 0x5002, 0x5505, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x8, 0x5, 0x80, 0x10, [{{0x9, 0x4, 0x4f, 0x1, 0x1, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x8}}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x1, 0x6d}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 9.526883625s ago: executing program 3 (id=1126): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x1004) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/tcp\x00') r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[], 0x40}}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x100b}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x29, 0x0) read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) close(r2) read$FUSE(r3, &(0x7f0000004340)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) socket$netlink(0x10, 0x3, 0x10) 7.860910006s ago: executing program 4 (id=1127): syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x2000c0d5) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x7f, 0x20000a30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) r7 = socket(0x11, 0x2, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000140)=']\x91%.\x00', 0x5) syz_usb_connect(0x0, 0x4a, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xfd, 0x3d, 0xc3, 0x8, 0x499, 0x5002, 0x5505, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x8, 0x5, 0x80, 0x10, [{{0x9, 0x4, 0x4f, 0x1, 0x1, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0xa}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0x1, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x8}}], [{{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0x1, 0x6d}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) 7.687598027s ago: executing program 3 (id=1128): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d", 0xd, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/80, 0x50, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r6, 0xc0045103, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e21, 0x6, @mcast1, 0x9}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x0, {[0x5, 0x0, 0x8, 0x8, 0x7, 0x98d, 0x22bb, 0x9]}}, 0x5c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x2) sendto$inet(r1, 0x0, 0x0, 0x400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) 7.380889146s ago: executing program 2 (id=1129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 7.186588069s ago: executing program 2 (id=1130): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@caif=@util={0x25, "46a4b6411a4e403dcc47ede7db3dfb55"}, 0x80, &(0x7f0000000140)}, 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, 0x0, 0x4840) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, 0x0, 0x0, 0x44055) syz_open_procfs(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.501476674s ago: executing program 0 (id=1131): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='qnx6\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x20002}]}, 0x44}}, 0x4008040) r6 = fsmount(r3, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.152693602s ago: executing program 2 (id=1132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 5.843877063s ago: executing program 1 (id=1133): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='qnx6\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 5.491366492s ago: executing program 2 (id=1134): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x10, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe4) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r8 = socket(0x11, 0x3, 0x0) setsockopt(r8, 0x107, 0xf, &(0x7f0000000100)="01000000", 0x4) 5.412919765s ago: executing program 3 (id=1135): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f668f1cdb1bf3d29d6ab43e28a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 4.405582117s ago: executing program 0 (id=1136): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) 4.186782605s ago: executing program 4 (id=1137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x8000) sendto$packet(r4, &(0x7f0000000180)="bad33075218151000031653a267fb4", 0xf, 0x0, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) 4.018609593s ago: executing program 1 (id=1138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x1004) r3 = syz_open_procfs(0x0, &(0x7f0000002080)='net/tcp\x00') r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[], 0x40}}, 0x8000) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x100b}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x29, 0x0) read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0x96) close(r2) read$FUSE(r3, &(0x7f0000004340)={0x2020}, 0x2020) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) socket$netlink(0x10, 0x3, 0x10) 3.499496762s ago: executing program 4 (id=1139): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) 3.321485287s ago: executing program 3 (id=1140): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x10, 0x42, 0x44}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000002c0), 0x1000, r2}, 0x38) 2.543726109s ago: executing program 2 (id=1141): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d"], 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) close_range(r2, 0xffffffffffffffff, 0x0) 2.308236112s ago: executing program 3 (id=1142): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000340)={&(0x7f00000002c0)=@caif=@util={0x25, "46a4b6411a4e403dcc47ede7db3dfb55"}, 0x80, &(0x7f0000000140)}, 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r2, 0x0, 0x4840) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r3, 0x0, 0x0, 0x44055) syz_open_procfs(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.286562291s ago: executing program 0 (id=1143): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f668f1cdb1bf3d29d6ab43e28a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.274238084s ago: executing program 1 (id=1144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 2.011590204s ago: executing program 4 (id=1145): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) close(0x4) 1.991949043s ago: executing program 1 (id=1146): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='qnx6\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = getpid() sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xfba1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x2a94, 0x60004}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x20002}]}, 0x44}}, 0x4008040) r6 = fsmount(r3, 0x0, 0x86) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.960984484s ago: executing program 4 (id=1147): r0 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0xa, 0x32e}, 0x28) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000240)=ANY=[], 0x9) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(r1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x70bd3d, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) 1.195365648s ago: executing program 3 (id=1148): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x8, 0x10, 0x0, 0x0}], 0x1}) 733.836195ms ago: executing program 0 (id=1149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x8000) sendto$packet(r4, &(0x7f0000000180)="bad33075218151000031653a267fb4", 0xf, 0x0, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) 508.979735ms ago: executing program 0 (id=1150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x10001, &(0x7f00000001c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[], [{@dont_hash}, {@euid_lt}]}}) read$FUSE(r2, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x203d) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x400, {0x1, 0x400000, 0x1000003, 0x105, 0x3fa, 0x3, {0x9, 0x10003, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xfffffffffffffff7, 0x8000, 0x6, 0x3, 0xa000, 0x2000007, r4, 0x0, 0x27, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) socket(0x40000000002, 0x3, 0x6) r6 = msgget$private(0x0, 0x9c) msgsnd(r6, &(0x7f0000000100)={0x2}, 0x8, 0x800) msgrcv(r6, &(0x7f0000000340)={0x0, ""/129}, 0x89, 0x2, 0x0) 414.024007ms ago: executing program 4 (id=1151): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x10, 0x0, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d"], 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752}}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe4) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r8 = socket(0x11, 0x3, 0x0) setsockopt(r8, 0x107, 0xf, &(0x7f0000000100)="01000000", 0x4) 318.789997ms ago: executing program 1 (id=1152): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 273.025138ms ago: executing program 1 (id=1153): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) 0s ago: executing program 2 (id=1154): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000003060104000000000000000002000005050001000700000025e0144d06db249617cab2013cfc2694c2e1fbf957bf4ea85e3a962656fcaf7b2c5242df28d75e9a5317dfd9db9095578c19f668f1cdb1bf3d29d6ab43e28a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) kernel console output (not intermixed with test programs): troller created [ 203.651458][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.736207][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 203.762805][ T796] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 203.815143][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.859569][ T796] usb 3-1: config 0 has no interface number 0 [ 203.866218][ T796] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 203.946234][ T796] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 203.965316][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.983563][ T796] usb 3-1: Product: syz [ 203.987935][ T796] usb 3-1: Manufacturer: syz [ 204.003881][ T796] usb 3-1: SerialNumber: syz [ 204.021656][ T796] usb 3-1: config 0 descriptor?? [ 204.057680][ T796] hub 3-1:0.89: bad descriptor, ignoring hub [ 204.063723][ T796] hub 3-1:0.89: probe with driver hub failed with error -5 [ 204.087334][ T796] option 3-1:0.89: GSM modem (1-port) converter detected [ 204.217142][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 204.226365][ T7999] netlink: 'syz.3.613': attribute type 5 has an invalid length. [ 204.234190][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.613'. [ 204.677604][ T29] usb 3-1: USB disconnect, device number 13 [ 204.687635][ T29] option 3-1:0.89: device disconnected [ 204.739390][ T5884] zl10353_read_register: readreg error (reg=127, ret==0) [ 204.826716][ T5910] usb 5-1: USB disconnect, device number 10 [ 205.020331][ T5884] usb 2-1: USB disconnect, device number 10 [ 206.458650][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 206.555970][ T5906] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 206.715241][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 206.731068][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.743818][ T5906] usb 4-1: config 4 interface 0 has no altsetting 0 [ 206.755346][ T5906] usb 4-1: string descriptor 0 read error: -22 [ 206.763514][ T5906] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 206.773277][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.798225][ T5906] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 206.824601][ T5906] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.851431][ T5906] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 206.869754][ T5906] usb 4-1: media controller created [ 206.906909][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.610654][ T8049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.808673][ T8060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 207.819412][ T8060] netlink: 'syz.4.631': attribute type 5 has an invalid length. [ 207.833480][ T8060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.631'. [ 208.022088][ T796] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 208.103412][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 208.204441][ T5906] usb 4-1: USB disconnect, device number 13 [ 208.258574][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 208.274145][ T796] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 208.311134][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.364655][ T796] usb 3-1: config 0 has no interface number 0 [ 208.404226][ T796] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.466893][ T796] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 208.485219][ T796] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 208.549613][ T796] usb 3-1: Product: syz [ 208.569955][ T796] usb 3-1: SerialNumber: syz [ 208.590625][ T796] usb 3-1: config 0 descriptor?? [ 208.618332][ T796] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 209.627605][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 211.189634][ T5906] usb 3-1: USB disconnect, device number 14 [ 212.112697][ T8114] netlink: 172 bytes leftover after parsing attributes in process `syz.1.644'. [ 212.835876][ T8129] netlink: 388 bytes leftover after parsing attributes in process `syz.0.648'. [ 213.080351][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 213.126307][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 213.153064][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 213.168500][ T8121] sctp: [Deprecated]: syz.1.646 (pid 8121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.168500][ T8121] Use struct sctp_sack_info instead [ 213.265250][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 213.290098][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 213.382976][ T5910] usb 4-1: config 8 has an invalid interface number: 79 but max is 0 [ 213.438004][ T5910] usb 4-1: config 8 has no interface number 0 [ 213.461599][ T5910] usb 4-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 213.637165][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 213.659440][ T5910] usb 4-1: config 8 interface 79 has no altsetting 0 [ 213.698121][ T5910] usb 4-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 213.714172][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.781864][ T5910] usb 4-1: Product: syz [ 213.788410][ T5910] usb 4-1: Manufacturer: syz [ 213.793079][ T5910] usb 4-1: SerialNumber: syz [ 213.805712][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 213.813198][ T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 213.829280][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.887601][ T24] usb 2-1: config 0 has no interface number 0 [ 213.945395][ T24] usb 2-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.998215][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 214.011789][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.051491][ T24] usb 2-1: Product: syz [ 214.061639][ T24] usb 2-1: Manufacturer: syz [ 214.066727][ T24] usb 2-1: SerialNumber: syz [ 214.077394][ T24] usb 2-1: config 0 descriptor?? [ 214.142324][ T5884] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 214.208855][ T8140] : renamed from vlan0 (while UP) [ 214.347257][ T24] hub 2-1:0.89: bad descriptor, ignoring hub [ 214.356230][ T24] hub 2-1:0.89: probe with driver hub failed with error -5 [ 214.372925][ T24] option 2-1:0.89: GSM modem (1-port) converter detected [ 214.492584][ T5884] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.513385][ T5884] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.577294][ T5884] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.677041][ T796] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 214.686444][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.905353][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 214.933902][ T796] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 214.942400][ T5884] usb 3-1: usb_control_msg returned -32 [ 214.942446][ T5884] usbtmc 3-1:16.0: can't read capabilities [ 214.954469][ T796] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.984846][ T796] usb 5-1: config 0 has no interface number 0 [ 214.995668][ T5920] usb 2-1: USB disconnect, device number 11 [ 215.007655][ T796] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.031636][ T5920] option 2-1:0.89: device disconnected [ 215.080598][ T796] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 215.096363][ T796] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 215.123881][ T796] usb 5-1: Product: syz [ 215.135861][ T796] usb 5-1: SerialNumber: syz [ 215.156502][ T796] usb 5-1: config 0 descriptor?? [ 215.184988][ T796] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 215.594218][ T8149] fuse: Unknown parameter '0x0000000000000005' [ 216.109173][ T8155] fuse: Bad value for 'fd' [ 216.262205][ T5910] usb 4-1: bad CDC descriptors [ 216.290477][ T5910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 216.355112][ T5910] snd-usb-audio 4-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 216.413516][ T5910] usb 4-1: USB disconnect, device number 14 [ 216.425755][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.635635][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.657'. [ 216.903014][ T5910] usb 3-1: USB disconnect, device number 15 [ 217.388997][ T8172] syzkaller0: entered promiscuous mode [ 217.401306][ T8172] syzkaller0: entered allmulticast mode [ 217.573520][ T8175] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 217.816734][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'. [ 217.953419][ T24] usb 5-1: USB disconnect, device number 11 [ 218.443904][ T8189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.883789][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 221.926422][ T8223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.672'. [ 222.138108][ T796] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 222.308589][ T796] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.334022][ T796] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.415327][ T5910] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 222.585543][ T796] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.643924][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.715950][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 222.726372][ T5910] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 222.751069][ T5910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.232566][ T796] usb 3-1: usb_control_msg returned -32 [ 223.238673][ T5910] usb 4-1: config 0 has no interface number 0 [ 223.246699][ T796] usbtmc 3-1:16.0: can't read capabilities [ 223.253670][ T5910] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.287066][ T5910] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 223.588958][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 223.719408][ T5910] usb 4-1: Product: syz [ 223.801247][ T5910] usb 4-1: SerialNumber: syz [ 223.839851][ T5910] usb 4-1: config 0 descriptor?? [ 223.886444][ T5910] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 223.977593][ T29] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 223.998209][ T29] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.039888][ T8251] sctp: [Deprecated]: syz.0.680 (pid 8251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.039888][ T8251] Use struct sctp_sack_info instead [ 224.068533][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.1.681'. [ 224.343942][ T8263] syzkaller0: entered promiscuous mode [ 224.353775][ T8263] syzkaller0: entered allmulticast mode [ 224.435567][ T5910] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 224.595818][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 224.603260][ T5910] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 224.611763][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.622361][ T5910] usb 1-1: config 0 has no interface number 0 [ 224.629305][ T5910] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.646917][ T5910] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 224.656242][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.664328][ T5910] usb 1-1: Product: syz [ 224.669632][ T5910] usb 1-1: Manufacturer: syz [ 224.674355][ T5910] usb 1-1: SerialNumber: syz [ 224.691947][ T5910] usb 1-1: config 0 descriptor?? [ 224.701963][ T5910] hub 1-1:0.89: bad descriptor, ignoring hub [ 224.708763][ T5910] hub 1-1:0.89: probe with driver hub failed with error -5 [ 224.716871][ T5910] option 1-1:0.89: GSM modem (1-port) converter detected [ 224.892258][ T24] usb 3-1: USB disconnect, device number 16 [ 225.023722][ T796] usb 1-1: USB disconnect, device number 11 [ 225.033367][ T796] option 1-1:0.89: device disconnected [ 225.306405][ T796] usb 4-1: USB disconnect, device number 15 [ 225.764563][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.686'. [ 225.790035][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.686'. [ 226.721734][ T8286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.689'. [ 227.961657][ T8300] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 228.097789][ T8300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.290633][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.696'. [ 228.605265][ T29] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 228.765266][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 228.777157][ T29] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 228.811639][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.054486][ T29] usb 2-1: config 0 has no interface number 0 [ 229.068183][ T29] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.422261][ T29] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 229.443275][ T29] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 229.461943][ T29] usb 2-1: Product: syz [ 229.483275][ T29] usb 2-1: SerialNumber: syz [ 229.499059][ T29] usb 2-1: config 0 descriptor?? [ 229.517129][ T29] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 230.410875][ T8341] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 231.208817][ T8356] fuse: Bad value for 'fd' [ 231.335119][ T5884] usb 2-1: USB disconnect, device number 12 [ 231.425284][ T796] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 231.590123][ T796] usb 3-1: Using ep0 maxpacket: 8 [ 231.628373][ T796] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.649031][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.4.711'. [ 231.703632][ T796] usb 3-1: config 4 interface 0 has no altsetting 0 [ 231.721673][ T796] usb 3-1: string descriptor 0 read error: -22 [ 231.728581][ T796] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 231.738641][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.784641][ T796] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 231.821489][ T796] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.837046][ T796] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 231.866086][ T796] usb 3-1: media controller created [ 231.903144][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.099478][ T796] zl10353_read_register: readreg error (reg=127, ret==0) [ 233.438649][ T796] usb 3-1: USB disconnect, device number 17 [ 233.527989][ T8391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.914323][ T8407] fuse: Bad value for 'fd' [ 236.017327][ T8399] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 236.023163][ T8399] syzkaller0: ignored: set checksum disabled [ 236.064666][ T8401] syzkaller0: entered promiscuous mode [ 236.105054][ T8401] syzkaller0: entered allmulticast mode [ 237.369569][ T8432] loop6: detected capacity change from 0 to 7 [ 237.394039][ C0] blk_print_req_error: 10 callbacks suppressed [ 237.394057][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.410023][ C0] buffer_io_error: 10 callbacks suppressed [ 237.410040][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.425657][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.435313][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.451750][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.461656][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.475476][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.485297][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.499508][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.509476][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.517748][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.527678][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.536202][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.546081][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.554052][ T8432] ldm_validate_partition_table(): Disk read failed. [ 237.566875][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.576896][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.596229][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.606443][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.629701][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 237.639568][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.654514][ T8432] Dev loop6: unable to read RDB block 0 [ 237.675921][ T8432] loop6: unable to read partition table [ 237.683272][ T8432] loop6: partition table beyond EOD, truncated [ 237.689799][ T796] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.698201][ T8432] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 237.877221][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.901897][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.912687][ T796] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 237.922390][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.942547][ T796] usb 4-1: config 0 descriptor?? [ 238.378728][ T796] usbhid 4-1:0.0: can't add hid device: -71 [ 238.384851][ T796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.420772][ T796] usb 4-1: USB disconnect, device number 16 [ 240.004013][ T8458] fuse: Bad value for 'fd' [ 241.121101][ T8470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.509029][ T8482] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 241.515373][ T8482] syzkaller0: ignored: set checksum disabled [ 241.722329][ T8482] syzkaller0: entered promiscuous mode [ 241.734744][ T8482] syzkaller0: entered allmulticast mode [ 241.748537][ T6317] syzkaller0: tun_net_xmit 48 [ 242.013458][ T8485] netlink: 'syz.2.738': attribute type 1 has an invalid length. [ 243.048906][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 243.110508][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.740'. [ 247.414084][ T8572] IPv6: Can't replace route, no match found [ 248.188529][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.750'. [ 248.422018][ T8594] netlink: 388 bytes leftover after parsing attributes in process `syz.0.752'. [ 249.103798][ T796] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.321305][ T796] usb 3-1: Using ep0 maxpacket: 16 [ 249.387849][ T796] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 249.413668][ T796] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.444498][ T796] usb 3-1: config 0 has no interface number 0 [ 249.465699][ T796] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.576019][ T796] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 249.585100][ T796] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 249.614467][ T796] usb 3-1: Product: syz [ 249.619867][ T796] usb 3-1: SerialNumber: syz [ 249.637164][ T796] usb 3-1: config 0 descriptor?? [ 249.668006][ T796] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 249.932216][ T8602] sctp: [Deprecated]: syz.0.754 (pid 8602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.932216][ T8602] Use struct sctp_sack_info instead [ 249.951057][ T29] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 249.964048][ T29] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.495522][ T29] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 250.755239][ T29] usb 1-1: Using ep0 maxpacket: 32 [ 250.789562][ T29] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 250.805392][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.821682][ T29] usb 1-1: config 0 has no interface number 0 [ 250.833291][ T29] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.875001][ T29] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 250.889764][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.903074][ T29] usb 1-1: Product: syz [ 250.912444][ T29] usb 1-1: Manufacturer: syz [ 250.934800][ T29] usb 1-1: SerialNumber: syz [ 250.957208][ T29] usb 1-1: config 0 descriptor?? [ 250.965118][ T29] hub 1-1:0.89: bad descriptor, ignoring hub [ 250.975627][ T29] hub 1-1:0.89: probe with driver hub failed with error -5 [ 251.004773][ T29] option 1-1:0.89: GSM modem (1-port) converter detected [ 251.474235][ T29] usb 3-1: USB disconnect, device number 18 [ 251.965628][ T5875] usb 1-1: USB disconnect, device number 12 [ 251.974068][ T5875] option 1-1:0.89: device disconnected [ 252.688062][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.762'. [ 252.713559][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.762'. [ 253.040125][ T8645] IPv6: Can't replace route, no match found [ 255.617907][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.633916][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.805361][ T29] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 255.957160][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 255.980672][ T29] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 256.005601][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.021275][ T29] usb 4-1: config 0 has no interface number 0 [ 256.029668][ T29] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.058417][ T29] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 256.068494][ T29] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 256.101062][ T29] usb 4-1: Product: syz [ 256.118988][ T29] usb 4-1: SerialNumber: syz [ 256.148035][ T29] usb 4-1: config 0 descriptor?? [ 256.165418][ T8684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.205078][ T29] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 256.238967][ T8687] sctp: [Deprecated]: syz.4.773 (pid 8687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.238967][ T8687] Use struct sctp_sack_info instead [ 256.257036][ T796] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 256.310465][ T796] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.594257][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 257.755300][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 257.778981][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 257.791431][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.826906][ T24] usb 5-1: config 0 has no interface number 0 [ 257.845607][ T24] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 257.878052][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 257.900488][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.984719][ T24] usb 5-1: Product: syz [ 257.998368][ T24] usb 5-1: Manufacturer: syz [ 258.022187][ T24] usb 5-1: SerialNumber: syz [ 258.070886][ T24] usb 5-1: config 0 descriptor?? [ 258.088654][ T24] hub 5-1:0.89: bad descriptor, ignoring hub [ 258.107727][ T24] hub 5-1:0.89: probe with driver hub failed with error -5 [ 258.162510][ T24] option 5-1:0.89: GSM modem (1-port) converter detected [ 258.343571][ T5906] usb 4-1: USB disconnect, device number 17 [ 258.545504][ T5920] usb 5-1: USB disconnect, device number 12 [ 258.553140][ T5920] option 5-1:0.89: device disconnected [ 258.706643][ T8716] IPv6: Can't replace route, no match found [ 259.746868][ T8728] fuse: Bad value for 'fd' [ 261.517377][ T8756] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.524860][ T8756] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.251575][ T8756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.275967][ T5931] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 262.440058][ T8756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.626835][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 262.905046][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 262.974523][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 263.038921][ T5931] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 263.048469][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.059368][ T5931] usb 1-1: Product: syz [ 263.175458][ T5931] usb 1-1: Manufacturer: syz [ 263.180989][ T5931] usb 1-1: SerialNumber: syz [ 263.255978][ T5931] usb 1-1: config 0 descriptor?? [ 263.518327][ T3563] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.527745][ T3563] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.743567][ T3563] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.776264][ T3543] wlan0: Trigger new scan to find an IBSS to join [ 263.852753][ T3563] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.874572][ T8781] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 264.889973][ T8781] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.903117][ T8810] sctp: [Deprecated]: syz.2.794 (pid 8810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.903117][ T8810] Use struct sctp_sack_info instead [ 265.188134][ T5931] powermate 1-1:0.0: probe with driver powermate failed with error -5 [ 265.297092][ T5931] usb 1-1: USB disconnect, device number 13 [ 265.305756][ T8781] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 265.476747][ T8781] usb 3-1: Using ep0 maxpacket: 32 [ 265.483457][ T8781] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 265.497936][ T8781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.515219][ T8781] usb 3-1: config 0 has no interface number 0 [ 265.538460][ T8781] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 265.565305][ T8773] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 265.585629][ T8781] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 265.609223][ T8781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.661098][ T8781] usb 3-1: Product: syz [ 265.689589][ T8781] usb 3-1: Manufacturer: syz [ 265.694163][ T8781] usb 3-1: SerialNumber: syz [ 265.792727][ T8781] usb 3-1: config 0 descriptor?? [ 265.805255][ T8773] usb 5-1: Using ep0 maxpacket: 16 [ 265.809966][ T8781] hub 3-1:0.89: bad descriptor, ignoring hub [ 265.820824][ T8781] hub 3-1:0.89: probe with driver hub failed with error -5 [ 265.835609][ T8773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.855674][ T8773] usb 5-1: config 0 has no interfaces? [ 265.876353][ T8781] option 3-1:0.89: GSM modem (1-port) converter detected [ 265.885420][ T8773] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 265.913928][ T8773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.953259][ T8773] usb 5-1: Product: syz [ 266.086478][ T8781] usb 3-1: USB disconnect, device number 19 [ 266.118210][ T8781] option 3-1:0.89: device disconnected [ 266.124315][ T8773] usb 5-1: Manufacturer: syz [ 266.146792][ T8773] usb 5-1: SerialNumber: syz [ 266.163212][ T8773] usb 5-1: config 0 descriptor?? [ 266.834246][ T8833] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 266.855285][ T8773] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 266.925295][ T8781] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 267.058981][ T8773] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 267.085264][ T8781] usb 4-1: Using ep0 maxpacket: 16 [ 267.090950][ T8773] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.106517][ T8781] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 267.119785][ T8773] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.129616][ T8773] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 267.138195][ T8781] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.158197][ T8773] usb 2-1: Product: syz [ 267.169553][ T8773] usb 2-1: Manufacturer: syz [ 267.170276][ T8781] usb 4-1: config 0 has no interface number 0 [ 267.175133][ T8773] usb 2-1: SerialNumber: syz [ 267.216219][ T8773] usb 2-1: config 0 descriptor?? [ 267.223108][ T8781] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.245317][ T8773] usb 2-1: selecting invalid altsetting 0 [ 267.289628][ T8781] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 267.316966][ T8781] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 267.337350][ T8781] usb 4-1: Product: syz [ 267.355605][ T8781] usb 4-1: SerialNumber: syz [ 267.392474][ T8781] usb 4-1: config 0 descriptor?? [ 267.417177][ T8781] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 267.515722][ T8773] usb 2-1: USB disconnect, device number 13 [ 268.346087][ T5931] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 268.358912][ T8847] sctp: [Deprecated]: syz.2.805 (pid 8847) Use of struct sctp_assoc_value in delayed_ack socket option. [ 268.358912][ T8847] Use struct sctp_sack_info instead [ 268.366715][ T8773] usb 5-1: USB disconnect, device number 13 [ 268.437434][ T5931] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.571024][ T8853] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 268.828341][ T8858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 268.835445][ T8773] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 269.165476][ T8773] usb 3-1: Using ep0 maxpacket: 32 [ 269.172460][ T8773] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 269.181037][ T8773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.302289][ T8773] usb 3-1: config 0 has no interface number 0 [ 269.309774][ T8773] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.337333][ T8773] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 269.347141][ T8773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.355407][ T8773] usb 3-1: Product: syz [ 269.365460][ T8773] usb 3-1: Manufacturer: syz [ 269.370256][ T8773] usb 3-1: SerialNumber: syz [ 269.378002][ T8773] usb 3-1: config 0 descriptor?? [ 269.387955][ T8773] hub 3-1:0.89: bad descriptor, ignoring hub [ 269.396382][ T8773] hub 3-1:0.89: probe with driver hub failed with error -5 [ 269.429518][ T8773] option 3-1:0.89: GSM modem (1-port) converter detected [ 269.630557][ T8773] usb 4-1: USB disconnect, device number 18 [ 269.912076][ T8781] usb 3-1: USB disconnect, device number 20 [ 269.919142][ T8781] option 3-1:0.89: device disconnected [ 270.457320][ T24] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 270.474097][ T24] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.494070][ T8867] sctp: [Deprecated]: syz.0.811 (pid 8867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.494070][ T8867] Use struct sctp_sack_info instead [ 270.977720][ T8781] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 271.181405][ T8781] usb 1-1: Using ep0 maxpacket: 32 [ 271.189213][ T5931] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 271.220200][ T8781] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 271.230574][ T8781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.419987][ T5931] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 271.494877][ T5931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 271.507794][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.517096][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 271.525454][ T5931] usb 2-1: Product: syz [ 271.530253][ T5931] usb 2-1: Manufacturer: syz [ 271.535015][ T5931] usb 2-1: SerialNumber: syz [ 271.539993][ T8781] usb 1-1: config 0 has no interface number 0 [ 271.549425][ T5931] usb 2-1: config 0 descriptor?? [ 271.554535][ T8781] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.603191][ T5931] usb 2-1: selecting invalid altsetting 0 [ 271.699573][ T8781] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 271.755285][ T8781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.857366][ T8781] usb 1-1: Product: syz [ 271.861566][ T8781] usb 1-1: Manufacturer: syz [ 271.891338][ T8895] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 271.913991][ T8781] usb 1-1: SerialNumber: syz [ 271.917772][ T8889] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 271.945911][ T8781] usb 1-1: config 0 descriptor?? [ 271.953678][ T8781] hub 1-1:0.89: bad descriptor, ignoring hub [ 271.959822][ T8781] hub 1-1:0.89: probe with driver hub failed with error -5 [ 272.002676][ T5931] usb 2-1: USB disconnect, device number 14 [ 272.018988][ T8781] option 1-1:0.89: GSM modem (1-port) converter detected [ 272.177684][ T8781] usb 1-1: USB disconnect, device number 14 [ 272.185125][ T8781] option 1-1:0.89: device disconnected [ 272.200163][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.621791][ T5931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 273.641494][ T5931] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.655848][ T8915] sctp: [Deprecated]: syz.0.823 (pid 8915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.655848][ T8915] Use struct sctp_sack_info instead [ 273.962162][ T8921] loop6: detected capacity change from 0 to 7 [ 273.990642][ C0] blk_print_req_error: 10 callbacks suppressed [ 273.990665][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.007604][ C0] buffer_io_error: 10 callbacks suppressed [ 274.007615][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.026425][ T8781] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 274.045250][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.055831][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.064720][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.074587][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.085233][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.095490][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.103682][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.113334][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.124312][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.134077][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.143583][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.153195][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.161270][ T8921] ldm_validate_partition_table(): Disk read failed. [ 274.171612][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.182044][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.190678][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.200333][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.215957][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 274.225726][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 274.238675][ T8921] Dev loop6: unable to read RDB block 0 [ 274.276886][ T8781] usb 1-1: Using ep0 maxpacket: 32 [ 274.284987][ T8921] loop6: unable to read partition table [ 274.286296][ T8781] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 274.291188][ T8921] loop6: partition table beyond EOD, truncated [ 274.328612][ T8781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.339501][ T8921] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 274.351479][ T8781] usb 1-1: config 0 has no interface number 0 [ 274.373820][ T8781] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 274.406371][ T8781] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 274.416297][ T8781] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.425506][ T8781] usb 1-1: Product: syz [ 274.433620][ T8781] usb 1-1: Manufacturer: syz [ 274.438527][ T8781] usb 1-1: SerialNumber: syz [ 274.445277][ T5931] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 274.464406][ T8781] usb 1-1: config 0 descriptor?? [ 274.478227][ T8781] hub 1-1:0.89: bad descriptor, ignoring hub [ 274.484489][ T8781] hub 1-1:0.89: probe with driver hub failed with error -5 [ 274.564893][ T8781] option 1-1:0.89: GSM modem (1-port) converter detected [ 274.616760][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.628705][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.645867][ T5931] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 274.656235][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.673749][ T5931] usb 5-1: config 0 descriptor?? [ 274.806144][ T8781] usb 1-1: USB disconnect, device number 15 [ 274.813150][ T8781] option 1-1:0.89: device disconnected [ 275.101787][ T5931] usbhid 5-1:0.0: can't add hid device: -71 [ 275.128366][ T5931] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 275.176747][ T5931] usb 5-1: USB disconnect, device number 14 [ 275.587479][ T8940] netlink: 24 bytes leftover after parsing attributes in process `syz.0.830'. [ 276.579586][ T8946] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 276.816884][ T3543] wlan0: Trigger new scan to find an IBSS to join [ 276.933408][ T8959] netlink: 388 bytes leftover after parsing attributes in process `syz.2.835'. [ 276.993898][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 277.028764][ T8962] netlink: 'syz.1.836': attribute type 5 has an invalid length. [ 277.045475][ T8962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.836'. [ 277.166646][ T8962] geneve3: entered promiscuous mode [ 277.173693][ T8962] geneve3: entered allmulticast mode [ 277.181777][ T3490] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 277.244478][ T3490] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 277.289294][ T3490] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 277.324460][ T3490] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 277.647787][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.1.837'. [ 279.149678][ T8773] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 279.170867][ T8977] sctp: [Deprecated]: syz.0.840 (pid 8977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.170867][ T8977] Use struct sctp_sack_info instead [ 279.187951][ T8773] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 279.269474][ T8981] loop6: detected capacity change from 0 to 7 [ 279.280361][ C1] blk_print_req_error: 10 callbacks suppressed [ 279.280385][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.296181][ C1] buffer_io_error: 10 callbacks suppressed [ 279.296191][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.322245][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.331874][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.345217][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.354813][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.365231][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.374836][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.385773][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.395358][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.403834][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.413491][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.421527][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.431127][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.459616][ T5832] ldm_validate_partition_table(): Disk read failed. [ 279.484958][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.494622][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.503613][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.513221][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.530207][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.539873][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 279.548932][ T5832] Dev loop6: unable to read RDB block 0 [ 279.560724][ T5832] loop6: unable to read partition table [ 279.574791][ T5832] loop6: partition table beyond EOD, truncated [ 279.583293][ T8981] ldm_validate_partition_table(): Disk read failed. [ 279.590054][ T8773] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 279.603981][ T8981] Dev loop6: unable to read RDB block 0 [ 279.623944][ T8981] loop6: unable to read partition table [ 279.662368][ T8981] loop6: partition table beyond EOD, truncated [ 279.673416][ T8981] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 279.687025][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 279.750495][ T8773] usb 1-1: Using ep0 maxpacket: 32 [ 279.758786][ T8773] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 279.767495][ T8773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.783867][ T8773] usb 1-1: config 0 has no interface number 0 [ 279.941468][ T5931] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 279.982068][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.994298][ T8773] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.009088][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.035624][ T24] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 280.053676][ T8773] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 280.064955][ T8773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.075651][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.087652][ T8773] usb 1-1: Product: syz [ 280.097445][ T8773] usb 1-1: Manufacturer: syz [ 280.107140][ T24] usb 4-1: config 0 descriptor?? [ 280.123515][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 280.125204][ T8773] usb 1-1: SerialNumber: syz [ 280.147803][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 280.196026][ T8773] usb 1-1: config 0 descriptor?? [ 280.203929][ T5931] usb 2-1: config 4 interface 0 has no altsetting 0 [ 280.209600][ T8773] hub 1-1:0.89: bad descriptor, ignoring hub [ 280.213964][ T5931] usb 2-1: string descriptor 0 read error: -22 [ 280.217194][ T8773] hub 1-1:0.89: probe with driver hub failed with error -5 [ 280.223423][ T5931] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 280.246168][ T8773] option 1-1:0.89: GSM modem (1-port) converter detected [ 280.277031][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.327753][ T5931] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 280.350916][ T5931] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 280.370196][ T5931] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 280.385305][ T5931] usb 2-1: media controller created [ 280.453195][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.525547][ T8781] usb 1-1: USB disconnect, device number 16 [ 280.533706][ T8781] option 1-1:0.89: device disconnected [ 280.546213][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 280.552244][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 280.574078][ T24] usb 4-1: USB disconnect, device number 19 [ 280.735542][ T3467] wlan0: Trigger new scan to find an IBSS to join [ 281.357719][ T9008] syzkaller0: entered promiscuous mode [ 281.382578][ T9008] syzkaller0: entered allmulticast mode [ 281.536210][ T5931] zl10353_read_register: readreg error (reg=127, ret==0) [ 281.555267][ T5920] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 281.555359][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 281.666072][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.705252][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 281.717247][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.725737][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 281.734018][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 281.744440][ T24] usb 1-1: config 8 has an invalid interface number: 79 but max is 0 [ 281.755144][ T24] usb 1-1: config 8 has no interface number 0 [ 281.763761][ T5920] usb 3-1: config 8 has an invalid interface number: 79 but max is 0 [ 281.772098][ T24] usb 1-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 281.792495][ T5920] usb 3-1: config 8 has no interface number 0 [ 281.795301][ T24] usb 1-1: config 8 interface 79 has no altsetting 0 [ 281.812102][ T5920] usb 3-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 281.824611][ T5920] usb 3-1: config 8 interface 79 has no altsetting 0 [ 281.836821][ T24] usb 1-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 281.851567][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.856566][ T5920] usb 3-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 281.873768][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.883200][ T5920] usb 3-1: Product: syz [ 281.887800][ T5920] usb 3-1: Manufacturer: syz [ 281.892484][ T5920] usb 3-1: SerialNumber: syz [ 281.901703][ T24] usb 1-1: Product: syz [ 281.915381][ T24] usb 1-1: Manufacturer: syz [ 281.937558][ T24] usb 1-1: SerialNumber: syz [ 282.680549][ T5931] usb 2-1: USB disconnect, device number 15 [ 284.151671][ T24] usb 1-1: bad CDC descriptors [ 284.237000][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.520569][ T24] snd-usb-audio 1-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 284.535511][ T24] usb 1-1: USB disconnect, device number 17 [ 284.567966][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.670820][ T5920] usb 3-1: bad CDC descriptors [ 284.720917][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.613757][ T5920] snd-usb-audio 3-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 285.666348][ T5920] usb 3-1: USB disconnect, device number 21 [ 285.847732][ T9052] syzkaller0: entered promiscuous mode [ 285.865576][ T9052] syzkaller0: entered allmulticast mode [ 285.893092][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.946107][ T5931] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 287.138013][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 287.146195][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 287.156592][ T5931] usb 4-1: config 4 interface 0 has no altsetting 0 [ 287.175850][ T5931] usb 4-1: string descriptor 0 read error: -22 [ 287.182109][ T5931] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 287.191503][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.247499][ T5931] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 287.276644][ T5931] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.299069][ T5931] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 287.405339][ T5931] usb 4-1: media controller created [ 287.536478][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.278251][ T9091] IPv6: Can't replace route, no match found [ 288.502986][ T5931] zl10353_read_register: readreg error (reg=127, ret==0) [ 288.558041][ T5931] usb 4-1: USB disconnect, device number 20 [ 288.575359][ T5920] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 288.766171][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 288.776483][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 288.793470][ T5920] usb 3-1: config 8 has an invalid interface number: 79 but max is 0 [ 288.809890][ T5920] usb 3-1: config 8 has no interface number 0 [ 288.835220][ T5920] usb 3-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 288.866740][ T5920] usb 3-1: config 8 interface 79 has no altsetting 0 [ 288.888737][ T5920] usb 3-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 288.902167][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.911116][ T5920] usb 3-1: Product: syz [ 288.915358][ T5920] usb 3-1: Manufacturer: syz [ 288.920180][ T5920] usb 3-1: SerialNumber: syz [ 289.382168][ T9100] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 291.115284][ T5931] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 291.326082][ T5931] usb 5-1: Using ep0 maxpacket: 8 [ 291.339552][ T5920] usb 3-1: bad CDC descriptors [ 291.346211][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.358443][ T5931] usb 5-1: unable to get BOS descriptor or descriptor too short [ 291.370387][ T5931] usb 5-1: config 4 interface 0 has no altsetting 0 [ 291.424455][ T5920] snd-usb-audio 3-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 291.437397][ T5931] usb 5-1: string descriptor 0 read error: -22 [ 291.445447][ T5920] usb 3-1: USB disconnect, device number 22 [ 291.451505][ T5931] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 291.465474][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.477754][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 291.499468][ T5931] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 291.550554][ T5931] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 291.561664][ T5931] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 291.569283][ T5931] usb 5-1: media controller created [ 291.656742][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.833855][ T9142] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 292.112564][ T9142] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.926436][ T5931] zl10353_read_register: readreg error (reg=127, ret==0) [ 293.149783][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 293.174854][ T9164] netlink: 'syz.3.890': attribute type 5 has an invalid length. [ 293.186479][ T9164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.890'. [ 293.223237][ T24] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 293.269803][ T9164] geneve3: entered promiscuous mode [ 293.276132][ T9164] geneve3: entered allmulticast mode [ 293.289136][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 293.299009][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 293.312720][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 293.335892][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 293.399505][ T24] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 293.409667][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 293.421926][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 293.431353][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 293.590525][ T24] usb 2-1: Product: syz [ 293.594770][ T24] usb 2-1: Manufacturer: syz [ 293.600050][ T24] usb 2-1: SerialNumber: syz [ 293.656861][ T24] usb 2-1: config 0 descriptor?? [ 293.731956][ T24] usb 2-1: selecting invalid altsetting 0 [ 293.900555][ T5931] usb 5-1: USB disconnect, device number 15 [ 293.984691][ T9173] loop6: detected capacity change from 0 to 7 [ 294.030787][ C1] blk_print_req_error: 25 callbacks suppressed [ 294.030800][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.046602][ C1] buffer_io_error: 25 callbacks suppressed [ 294.046613][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.072535][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.082214][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.155260][ T24] usb 2-1: USB disconnect, device number 16 [ 294.164184][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.173840][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.182928][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.192605][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.201815][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.211570][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.234950][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.244570][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.252677][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.262271][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.271137][ T9173] ldm_validate_partition_table(): Disk read failed. [ 294.329092][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.338776][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.351138][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.360779][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.370289][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 294.379933][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 294.405273][ T1729] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 294.433536][ T9173] Dev loop6: unable to read RDB block 0 [ 294.576521][ T9173] loop6: unable to read partition table [ 294.582317][ T9173] loop6: partition table beyond EOD, truncated [ 294.590925][ T9173] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 294.840063][ T1729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.857788][ T1729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.938938][ T1729] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 294.978138][ T1729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.021947][ T1729] usb 3-1: config 0 descriptor?? [ 295.468950][ T1729] usbhid 3-1:0.0: can't add hid device: -71 [ 295.481812][ T1729] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 295.516964][ T1729] usb 3-1: USB disconnect, device number 23 [ 297.655787][ T9213] fuse: Bad value for 'group_id' [ 297.660794][ T9213] fuse: Bad value for 'group_id' [ 297.740071][ T9219] IPv6: Can't replace route, no match found [ 298.377280][ T8765] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 298.565357][ T8765] usb 3-1: Using ep0 maxpacket: 8 [ 298.596287][ T8765] usb 3-1: unable to get BOS descriptor or descriptor too short [ 298.877526][ T3543] wlan0: Trigger new scan to find an IBSS to join [ 298.890999][ T8765] usb 3-1: config 4 interface 0 has no altsetting 0 [ 298.984334][ T8765] usb 3-1: string descriptor 0 read error: -22 [ 299.028684][ T8765] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 299.038083][ T8765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.226527][ T8765] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 299.247652][ T8765] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 299.258184][ T8765] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 299.293542][ T8765] usb 3-1: media controller created [ 299.332887][ T8765] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.444679][ T8765] zl10353_read_register: readreg error (reg=127, ret==0) [ 299.715534][ T8765] usb 3-1: USB disconnect, device number 24 [ 299.855397][ T9248] loop6: detected capacity change from 0 to 7 [ 299.882863][ C0] blk_print_req_error: 10 callbacks suppressed [ 299.882880][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.898748][ C0] buffer_io_error: 10 callbacks suppressed [ 299.898760][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.925482][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.935099][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.945193][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.954785][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.963197][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.972847][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 299.981920][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 299.991580][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.006951][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.016637][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.044584][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.054211][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.073599][ T9248] ldm_validate_partition_table(): Disk read failed. [ 300.118339][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.128003][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.161891][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.171517][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.179741][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 300.189316][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 300.199566][ T9248] Dev loop6: unable to read RDB block 0 [ 300.206313][ T9248] loop6: unable to read partition table [ 300.212687][ T9248] loop6: partition table beyond EOD, truncated [ 300.220307][ T8765] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 300.227999][ T9248] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 300.418255][ T8765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.431393][ T8765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.468121][ T8765] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 300.478588][ T8765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.585590][ T8765] usb 5-1: config 0 descriptor?? [ 301.385254][ T8765] usbhid 5-1:0.0: can't add hid device: -71 [ 301.394925][ T8765] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 301.499540][ T8765] usb 5-1: USB disconnect, device number 16 [ 302.202997][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.915'. [ 302.326271][ T5920] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 302.618056][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 302.679460][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 302.695447][ T5920] usb 1-1: config 8 has an invalid interface number: 79 but max is 0 [ 302.713851][ T5920] usb 1-1: config 8 has no interface number 0 [ 302.745635][ T5920] usb 1-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 302.842094][ T3490] wlan0: Trigger new scan to find an IBSS to join [ 302.850668][ T58] wlan0: Trigger new scan to find an IBSS to join [ 302.874052][ T5920] usb 1-1: config 8 interface 79 has no altsetting 0 [ 302.887310][ T5920] usb 1-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 302.898278][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.907537][ T5920] usb 1-1: Product: syz [ 302.913408][ T5920] usb 1-1: Manufacturer: syz [ 302.919277][ T5920] usb 1-1: SerialNumber: syz [ 304.106428][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.473450][ T9311] IPv6: Can't replace route, no match found [ 304.768280][ T9316] netlink: 156 bytes leftover after parsing attributes in process `syz.4.922'. [ 304.782152][ T9316] tipc: Started in network mode [ 304.789685][ T9316] tipc: Node identity 000000005f003a000000000000000001, cluster identity 4711 [ 304.800806][ T9316] tipc: Enabling of bearer rejected, failed to enable media [ 304.860152][ T9321] IPv6: Can't replace route, no match found [ 305.271063][ T9326] loop6: detected capacity change from 0 to 7 [ 305.277895][ C1] blk_print_req_error: 10 callbacks suppressed [ 305.277912][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.293700][ C1] buffer_io_error: 10 callbacks suppressed [ 305.293711][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.317472][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.327145][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.350026][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.359676][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.375217][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.384864][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.402995][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.412652][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.423847][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.433491][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.444050][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.450245][ T5920] usb 1-1: bad CDC descriptors [ 305.453692][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.467587][ T9326] ldm_validate_partition_table(): Disk read failed. [ 305.477649][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.487257][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.505581][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.515216][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.523232][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 305.532862][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 305.555326][ T9326] Dev loop6: unable to read RDB block 0 [ 305.563514][ T9326] loop6: unable to read partition table [ 305.612972][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.625695][ T9326] loop6: partition table beyond EOD, truncated [ 305.657116][ T9326] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 305.665356][ T1729] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 305.990904][ T5920] snd-usb-audio 1-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 306.062816][ T5920] usb 1-1: USB disconnect, device number 18 [ 306.114426][ T1729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.135770][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.161058][ T1729] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.190427][ T1729] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 306.225353][ T1729] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.256099][ T1729] usb 5-1: config 0 descriptor?? [ 306.597114][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 306.640001][ T9334] netlink: 'syz.1.928': attribute type 5 has an invalid length. [ 306.655346][ T9334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.928'. [ 306.722773][ T1729] usbhid 5-1:0.0: can't add hid device: -71 [ 306.752472][ T1729] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 306.799204][ T1729] usb 5-1: USB disconnect, device number 17 [ 306.817651][ T3467] wlan0: Trigger new scan to find an IBSS to join [ 307.569428][ T9366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.949387][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.963016][ T1729] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 308.970122][ T9375] sctp: [Deprecated]: syz.2.938 (pid 9375) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.970122][ T9375] Use struct sctp_sack_info instead [ 309.028297][ T1729] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.112673][ T9383] sctp: [Deprecated]: syz.1.939 (pid 9383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.112673][ T9383] Use struct sctp_sack_info instead [ 309.136020][ T1729] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 309.161498][ T1729] hid-generic 0000:0000:0000.0014: hidraw1: HID v0.00 Device [syz1] on syz0 [ 309.257729][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 309.298446][ T9394] netlink: 'syz.0.940': attribute type 5 has an invalid length. [ 309.334495][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.940'. [ 309.460365][ T9401] IPv6: Can't replace route, no match found [ 309.495261][ T1729] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 309.555354][ T8765] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 309.685726][ T1729] usb 3-1: Using ep0 maxpacket: 32 [ 309.700721][ T1729] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 309.747273][ T1729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.757991][ T8765] usb 2-1: Using ep0 maxpacket: 32 [ 309.762353][ T1729] usb 3-1: config 0 has no interface number 0 [ 309.772520][ T8765] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 309.783714][ T8765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.794455][ T8765] usb 2-1: config 0 has no interface number 0 [ 309.800647][ T8765] usb 2-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.828032][ T1729] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.830052][ T8765] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 309.863494][ T8765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.881926][ T8765] usb 2-1: Product: syz [ 309.888215][ T8765] usb 2-1: Manufacturer: syz [ 309.892970][ T8765] usb 2-1: SerialNumber: syz [ 309.899637][ T1729] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 309.902772][ T8765] usb 2-1: config 0 descriptor?? [ 309.916141][ T1729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.925334][ T8765] hub 2-1:0.89: bad descriptor, ignoring hub [ 309.934373][ T8765] hub 2-1:0.89: probe with driver hub failed with error -5 [ 309.946539][ T8765] option 2-1:0.89: GSM modem (1-port) converter detected [ 309.954688][ T1729] usb 3-1: Product: syz [ 309.961750][ T1729] usb 3-1: Manufacturer: syz [ 309.970522][ T1729] usb 3-1: SerialNumber: syz [ 309.995740][ T1729] usb 3-1: config 0 descriptor?? [ 310.015560][ T5920] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 310.029880][ T1729] hub 3-1:0.89: bad descriptor, ignoring hub [ 310.045847][ T1729] hub 3-1:0.89: probe with driver hub failed with error -5 [ 310.067427][ T1729] option 3-1:0.89: GSM modem (1-port) converter detected [ 310.175721][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 310.189021][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 310.200095][ T5920] usb 1-1: config 8 has an invalid interface number: 79 but max is 0 [ 310.208514][ T5920] usb 1-1: config 8 has no interface number 0 [ 310.215028][ T5920] usb 1-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 310.260338][ T5920] usb 1-1: config 8 interface 79 has no altsetting 0 [ 310.268948][ T1729] usb 2-1: USB disconnect, device number 17 [ 310.277682][ T1729] option 2-1:0.89: device disconnected [ 310.305446][ T5920] usb 1-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 310.317965][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.345290][ T5920] usb 1-1: Product: syz [ 310.364222][ T5920] usb 1-1: Manufacturer: syz [ 310.380413][ T5920] usb 1-1: SerialNumber: syz [ 310.455539][ T8765] usb 3-1: USB disconnect, device number 25 [ 310.462639][ T8765] option 3-1:0.89: device disconnected [ 311.017772][ T9414] loop6: detected capacity change from 0 to 7 [ 311.025699][ C1] blk_print_req_error: 10 callbacks suppressed [ 311.025717][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.041538][ C1] buffer_io_error: 10 callbacks suppressed [ 311.041556][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.056854][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.066530][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.147101][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.156747][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.213179][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.222804][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.233383][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.243017][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.266208][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.275871][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.284930][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.294545][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.302692][ T5832] ldm_validate_partition_table(): Disk read failed. [ 311.310373][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.319996][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.328379][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.338083][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.364226][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 311.373892][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 311.387375][ T5832] Dev loop6: unable to read RDB block 0 [ 311.397729][ T5832] loop6: unable to read partition table [ 311.405105][ T5832] loop6: partition table beyond EOD, truncated [ 311.424390][ T9414] ldm_validate_partition_table(): Disk read failed. [ 311.432303][ T9414] Dev loop6: unable to read RDB block 0 [ 311.439662][ T9414] loop6: unable to read partition table [ 311.445471][ T8765] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 311.453555][ T9414] loop6: partition table beyond EOD, truncated [ 311.460399][ T9414] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 311.627167][ T8765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.638337][ T8765] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.652978][ T8765] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 311.663403][ T8765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.696148][ T8765] usb 4-1: config 0 descriptor?? [ 312.121963][ T8765] usbhid 4-1:0.0: can't add hid device: -71 [ 312.128987][ T8765] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 312.300361][ T5931] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 312.536027][ T8765] usb 4-1: USB disconnect, device number 21 [ 312.677038][ T5931] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.686889][ T5931] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.705326][ T5931] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.749947][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.930558][ T5920] usb 1-1: bad CDC descriptors [ 312.972121][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.018451][ T5931] usb 2-1: usb_control_msg returned -32 [ 313.024074][ T5931] usbtmc 2-1:16.0: can't read capabilities [ 313.155291][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 313.465409][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 313.472846][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 313.491924][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 313.598518][ T5920] snd-usb-audio 1-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 313.630494][ T5920] usb 1-1: USB disconnect, device number 19 [ 313.694721][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.736721][ T24] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 313.766184][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.797715][ T24] usb 5-1: Product: syz [ 313.811267][ T24] usb 5-1: Manufacturer: syz [ 313.845022][ T24] usb 5-1: SerialNumber: syz [ 313.855282][ T3490] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 313.906107][ T24] usb 5-1: config 0 descriptor?? [ 314.839762][ T9455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.952'. [ 315.020090][ T5920] usb 2-1: USB disconnect, device number 18 [ 315.727680][ T8773] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 315.737694][ T9460] sctp: [Deprecated]: syz.1.957 (pid 9460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.737694][ T9460] Use struct sctp_sack_info instead [ 315.756893][ T8773] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 316.183494][ T24] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 316.338284][ T5931] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 316.655904][ T24] usb 5-1: USB disconnect, device number 18 [ 316.795500][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 316.816681][ T5931] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 316.842041][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.869728][ T5931] usb 2-1: config 0 has no interface number 0 [ 316.935913][ T5931] usb 2-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.047416][ T9485] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 317.095640][ T5931] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 317.104939][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.116946][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.123306][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.148108][ T5931] usb 2-1: Product: syz [ 317.152304][ T5931] usb 2-1: Manufacturer: syz [ 317.165927][ T5931] usb 2-1: SerialNumber: syz [ 317.193874][ T5931] usb 2-1: config 0 descriptor?? [ 317.218389][ T5931] hub 2-1:0.89: bad descriptor, ignoring hub [ 317.233928][ T5931] hub 2-1:0.89: probe with driver hub failed with error -5 [ 317.255837][ T5931] option 2-1:0.89: GSM modem (1-port) converter detected [ 317.526593][ T5931] usb 2-1: USB disconnect, device number 19 [ 317.541713][ T5931] option 2-1:0.89: device disconnected [ 318.655383][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 318.908695][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 318.933629][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 319.001020][ T24] usb 2-1: config 8 has an invalid interface number: 79 but max is 0 [ 319.037976][ T24] usb 2-1: config 8 has no interface number 0 [ 319.061729][ T24] usb 2-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 319.115832][ T24] usb 2-1: config 8 interface 79 has no altsetting 0 [ 319.215397][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 319.275235][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.317417][ T24] usb 2-1: Product: syz [ 319.321591][ T24] usb 2-1: Manufacturer: syz [ 319.389856][ T24] usb 2-1: SerialNumber: syz [ 319.425351][ T8781] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 319.585279][ T8781] usb 3-1: Using ep0 maxpacket: 16 [ 319.593539][ T8781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 319.606319][ T8781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 319.622211][ T8781] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 319.631859][ T8781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.644611][ T8781] usb 3-1: Product: syz [ 319.649315][ T8781] usb 3-1: Manufacturer: syz [ 319.654031][ T8781] usb 3-1: SerialNumber: syz [ 319.682487][ T8781] usb 3-1: config 0 descriptor?? [ 319.949540][ T9537] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 320.299016][ T9545] IPv6: Can't replace route, no match found [ 321.885771][ T9561] syzkaller0: left promiscuous mode [ 321.919860][ T9561] syzkaller0: left allmulticast mode [ 321.927680][ T24] usb 2-1: bad CDC descriptors [ 321.950030][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.810852][ T24] snd-usb-audio 2-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 323.189878][ T24] usb 2-1: USB disconnect, device number 20 [ 323.213351][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.172736][ T8781] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 324.213464][ T8781] usb 3-1: USB disconnect, device number 26 [ 324.759564][ T9593] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 325.178193][ T5920] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 325.495217][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 325.603819][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.835291][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 325.953358][ T5920] usb 3-1: config 8 has an invalid interface number: 79 but max is 0 [ 325.962938][ T5920] usb 3-1: config 8 has no interface number 0 [ 325.997317][ T5920] usb 3-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 326.023621][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 326.045050][ T5920] usb 3-1: config 8 interface 79 has no altsetting 0 [ 326.057658][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 326.067945][ T24] usb 2-1: config 8 has an invalid interface number: 79 but max is 0 [ 326.077479][ T24] usb 2-1: config 8 has no interface number 0 [ 326.083602][ T24] usb 2-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 326.098982][ T5920] usb 3-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 326.117381][ T24] usb 2-1: config 8 interface 79 has no altsetting 0 [ 326.163533][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 326.173163][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.181583][ T24] usb 2-1: Product: syz [ 326.181650][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.198076][ T24] usb 2-1: Manufacturer: syz [ 326.203314][ T24] usb 2-1: SerialNumber: syz [ 326.208621][ T5920] usb 3-1: Product: syz [ 326.215546][ T5920] usb 3-1: Manufacturer: syz [ 326.232335][ T5920] usb 3-1: SerialNumber: syz [ 326.273565][ T9621] netlink: 156 bytes leftover after parsing attributes in process `syz.4.993'. [ 326.296785][ T9621] tipc: Enabling of bearer rejected, failed to enable media [ 327.263967][ T8773] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 327.625312][ T8773] usb 5-1: Using ep0 maxpacket: 16 [ 327.639476][ T8773] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 327.649164][ T8773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.700150][ T8773] usb 5-1: config 0 has no interface number 0 [ 327.718763][ T8773] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.859443][ T8773] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 327.873728][ T8773] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 327.925831][ T8773] usb 5-1: Product: syz [ 327.982616][ T8773] usb 5-1: SerialNumber: syz [ 328.020399][ T8773] usb 5-1: config 0 descriptor?? [ 328.033323][ T8773] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 329.053668][ T5920] usb 3-1: bad CDC descriptors [ 329.126242][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.375572][ T5920] snd-usb-audio 3-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 329.401571][ T5920] usb 3-1: USB disconnect, device number 27 [ 329.429422][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.598172][ T24] usb 2-1: bad CDC descriptors [ 329.620870][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.803962][ T24] snd-usb-audio 2-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 329.839970][ T24] usb 2-1: USB disconnect, device number 21 [ 329.884496][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 330.055515][ T8781] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 330.231002][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 330.239272][ T9649] sctp: [Deprecated]: syz.1.1001 (pid 9649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.239272][ T9649] Use struct sctp_sack_info instead [ 330.276415][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 330.298065][ T8781] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 330.317026][ T8781] usb 1-1: config 0 interface 0 has no altsetting 0 [ 330.355943][ T8781] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 330.365930][ T8781] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 330.378159][ T8781] usb 1-1: Product: syz [ 330.383631][ T8781] usb 1-1: Manufacturer: syz [ 330.420319][ T8781] usb 1-1: SerialNumber: syz [ 330.448371][ T8781] usb 1-1: config 0 descriptor?? [ 330.495795][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 330.504116][ T8781] usb 1-1: selecting invalid altsetting 0 [ 330.660192][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 330.684684][ T5931] usb 5-1: USB disconnect, device number 19 [ 330.764273][ T24] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 330.776240][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.795252][ T24] usb 2-1: config 0 has no interface number 0 [ 330.808296][ T24] usb 2-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.848119][ T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 330.900637][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.941582][ T24] usb 2-1: Product: syz [ 330.946643][ T8781] usb 1-1: USB disconnect, device number 20 [ 330.952033][ T24] usb 2-1: Manufacturer: syz [ 330.985039][ T24] usb 2-1: SerialNumber: syz [ 331.007934][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.047303][ T24] usb 2-1: config 0 descriptor?? [ 331.089458][ T24] hub 2-1:0.89: bad descriptor, ignoring hub [ 331.098432][ T24] hub 2-1:0.89: probe with driver hub failed with error -5 [ 331.134505][ T24] option 2-1:0.89: GSM modem (1-port) converter detected [ 331.556405][ T8773] usb 2-1: USB disconnect, device number 22 [ 331.563305][ T8773] option 2-1:0.89: device disconnected [ 332.279858][ T9679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1008'. [ 333.790054][ T9711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.968788][ T24] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 335.978063][ T9740] sctp: [Deprecated]: syz.4.1019 (pid 9740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.978063][ T9740] Use struct sctp_sack_info instead [ 336.161564][ T24] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.209353][ T9749] loop6: detected capacity change from 0 to 7 [ 336.222125][ T9751] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 336.251348][ C1] blk_print_req_error: 25 callbacks suppressed [ 336.251370][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.267135][ C1] buffer_io_error: 25 callbacks suppressed [ 336.267145][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.282662][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.292287][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.305256][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.314913][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.341459][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.351120][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.365245][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.374902][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.383356][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.392967][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.431453][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.441096][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.455227][ T9749] ldm_validate_partition_table(): Disk read failed. [ 336.462095][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 336.472812][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.482454][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.490748][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.500322][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.509845][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 336.519448][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 336.527718][ T9749] Dev loop6: unable to read RDB block 0 [ 336.533400][ T8773] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 336.543833][ T9749] loop6: unable to read partition table [ 336.550906][ T9749] loop6: partition table beyond EOD, truncated [ 336.583694][ T9749] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 336.615573][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 336.625709][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 336.644074][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.759017][ T24] usb 5-1: config 0 has no interface number 0 [ 336.765487][ T24] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 336.782714][ T8773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.803958][ T8773] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.821468][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 336.834341][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.870666][ T8773] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 336.879804][ T24] usb 5-1: Product: syz [ 336.890110][ T24] usb 5-1: Manufacturer: syz [ 336.896570][ T6321] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.908432][ T8773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.916602][ T24] usb 5-1: SerialNumber: syz [ 336.926510][ T24] usb 5-1: config 0 descriptor?? [ 336.933086][ T8773] usb 4-1: config 0 descriptor?? [ 336.954755][ T24] hub 5-1:0.89: bad descriptor, ignoring hub [ 336.975866][ T24] hub 5-1:0.89: probe with driver hub failed with error -5 [ 336.986983][ T24] option 5-1:0.89: GSM modem (1-port) converter detected [ 337.350278][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 337.360861][ T9764] netlink: 'syz.2.1026': attribute type 5 has an invalid length. [ 337.369088][ T24] usb 5-1: USB disconnect, device number 20 [ 337.377702][ T24] option 5-1:0.89: device disconnected [ 337.385964][ T9764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1026'. [ 337.441526][ T8773] usbhid 4-1:0.0: can't add hid device: -71 [ 337.450237][ T8773] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 337.458138][ T9764] geneve3: entered promiscuous mode [ 337.467608][ T9764] geneve3: entered allmulticast mode [ 337.492628][ T8773] usb 4-1: USB disconnect, device number 22 [ 337.504838][ T9766] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1025'. [ 337.514168][ T6321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 337.538508][ T6321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 337.575909][ T6321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 337.594893][ T6321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 338.775268][ T8773] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 339.152261][ T8773] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 339.162378][ T8773] usb 3-1: config 0 interface 0 has no altsetting 0 [ 339.170215][ T6317] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 339.185238][ T6317] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 339.227336][ T8773] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.236954][ T8773] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 339.245140][ T8773] usb 3-1: Product: syz [ 339.255237][ T6317] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 339.274292][ T6317] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 339.283225][ T8773] usb 3-1: Manufacturer: syz [ 339.304749][ T8773] usb 3-1: SerialNumber: syz [ 339.305001][ T9790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.360929][ T8773] usb 3-1: config 0 descriptor?? [ 339.384659][ T8773] usb 3-1: selecting invalid altsetting 0 [ 339.557389][ T9798] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 339.600833][ T5931] usb 3-1: USB disconnect, device number 28 [ 342.140195][ T5931] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 342.156575][ T5931] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 342.169316][ T9817] sctp: [Deprecated]: syz.0.1038 (pid 9817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.169316][ T9817] Use struct sctp_sack_info instead [ 342.358128][ T9825] syzkaller0: entered promiscuous mode [ 342.393883][ T9825] syzkaller0: entered allmulticast mode [ 342.515258][ T8773] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 342.715632][ T8773] usb 1-1: Using ep0 maxpacket: 32 [ 342.723910][ T8773] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 342.732943][ T8773] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.744971][ T8773] usb 1-1: config 0 has no interface number 0 [ 342.755275][ T8773] usb 1-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 342.840783][ T8773] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 342.850093][ T8773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.859073][ T8773] usb 1-1: Product: syz [ 342.865444][ T8773] usb 1-1: Manufacturer: syz [ 342.870102][ T8773] usb 1-1: SerialNumber: syz [ 342.881794][ T8773] usb 1-1: config 0 descriptor?? [ 342.896745][ T8773] hub 1-1:0.89: bad descriptor, ignoring hub [ 342.903145][ T8773] hub 1-1:0.89: probe with driver hub failed with error -5 [ 342.913830][ T8773] option 1-1:0.89: GSM modem (1-port) converter detected [ 343.447768][ T24] usb 1-1: USB disconnect, device number 21 [ 343.455749][ T24] option 1-1:0.89: device disconnected [ 343.905582][ T9842] IPv6: Can't replace route, no match found [ 344.402480][ T9849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.437200][ T9853] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 345.795416][ T5931] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 345.866338][ T3490] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 346.034548][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 346.243712][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 346.256275][ T5931] usb 1-1: config 8 has an invalid interface number: 79 but max is 0 [ 346.264567][ T5931] usb 1-1: config 8 has no interface number 0 [ 346.270785][ T5931] usb 1-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 346.287904][ T5931] usb 1-1: config 8 interface 79 has no altsetting 0 [ 346.310587][ T5931] usb 1-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 346.320879][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.329500][ T5931] usb 1-1: Product: syz [ 346.333866][ T5931] usb 1-1: Manufacturer: syz [ 346.341063][ T5931] usb 1-1: SerialNumber: syz [ 346.948299][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.955687][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.371987][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.421724][ T9834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.465856][ T8769] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 347.476630][ T9871] sctp: [Deprecated]: syz.1.1050 (pid 9871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.476630][ T9871] Use struct sctp_sack_info instead [ 347.504631][ T8769] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 347.875306][ T8769] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 348.022721][ T3563] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.054834][ T8769] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 348.091146][ T8769] usb 4-1: config 0 interface 0 has no altsetting 0 [ 348.143566][ T3563] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 348.159667][ T8769] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 348.183816][ T8769] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 348.183854][ T3563] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.192300][ T8769] usb 4-1: Product: syz [ 348.235564][ T8769] usb 4-1: Manufacturer: syz [ 348.240283][ T8769] usb 4-1: SerialNumber: syz [ 348.247754][ T8769] usb 4-1: config 0 descriptor?? [ 348.298904][ T8769] usb 4-1: selecting invalid altsetting 0 [ 348.352763][ T3563] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 348.372916][ T3563] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.406479][ T3563] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 348.436937][ T3563] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.482262][ T3563] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 348.655956][ T8769] usb 4-1: USB disconnect, device number 23 [ 348.837677][ T8900] udevd[8900]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.125821][ T5931] usb 1-1: bad CDC descriptors [ 349.185074][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.618069][ T5931] snd-usb-audio 1-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 349.644148][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.661862][ T5931] usb 1-1: USB disconnect, device number 22 [ 350.469714][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1060'. [ 350.490479][ T9911] netlink: 'syz.2.1060': attribute type 7 has an invalid length. [ 350.507106][ T9911] netlink: 'syz.2.1060': attribute type 8 has an invalid length. [ 350.528290][ T9911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 350.632807][ T9913] syzkaller0: entered promiscuous mode [ 350.665470][ T9913] syzkaller0: entered allmulticast mode [ 350.818605][ T9917] fuse: Bad value for 'fd' [ 351.255475][ T8773] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 351.415322][ T8773] usb 3-1: Using ep0 maxpacket: 8 [ 351.422859][ T8773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 351.433966][ T8773] usb 3-1: config 4 interface 0 has no altsetting 0 [ 351.444914][ T8773] usb 3-1: string descriptor 0 read error: -22 [ 351.455928][ T8773] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 351.466457][ T8773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.542650][ T8773] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 351.560412][ T8773] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 351.632956][ T8773] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 351.707717][ T8773] usb 3-1: media controller created [ 351.752724][ T8773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.757092][ T9936] usb 3-1: dvb_usb_au6610: wlen=26, aborting [ 352.771643][ T8773] zl10353_read_register: readreg error (reg=127, ret==0) [ 353.236256][ T9955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1072'. [ 355.025638][ T8773] usb 3-1: USB disconnect, device number 29 [ 355.826362][ T9983] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 356.640958][T10003] fuse: Bad value for 'fd' [ 356.985329][ T8773] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 357.228223][ T8773] usb 3-1: Using ep0 maxpacket: 8 [ 357.247148][ T8773] usb 3-1: unable to get BOS descriptor or descriptor too short [ 357.256130][ T8773] usb 3-1: config 4 interface 0 has no altsetting 0 [ 357.268661][ T8773] usb 3-1: string descriptor 0 read error: -22 [ 357.278242][ T8773] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 357.294925][ T8773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.396559][ T8773] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 357.530395][ T8773] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 357.554899][ T8773] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 357.575556][ T8773] usb 3-1: media controller created [ 357.671344][ T8773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 358.661292][ T8773] zl10353_read_register: readreg error (reg=127, ret==0) [ 358.742691][ T8773] usb 3-1: USB disconnect, device number 30 [ 358.761117][T10042] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1088'. [ 359.162425][T10048] loop6: detected capacity change from 0 to 7 [ 359.203879][ C0] blk_print_req_error: 10 callbacks suppressed [ 359.204003][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.219867][ C0] buffer_io_error: 10 callbacks suppressed [ 359.219886][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.241525][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.251182][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.330359][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.340049][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.357329][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.366990][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.453529][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.463150][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.502066][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.511710][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.520080][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.529743][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.537721][T10048] ldm_validate_partition_table(): Disk read failed. [ 359.565313][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.574987][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.583814][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.593485][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.603403][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 359.613047][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 359.641059][T10048] Dev loop6: unable to read RDB block 0 [ 359.695415][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 359.716611][T10048] loop6: unable to read partition table [ 359.722814][T10048] loop6: partition table beyond EOD, truncated [ 359.750082][T10048] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 359.868509][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.886091][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.924977][ T24] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 359.944341][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.979995][ T24] usb 4-1: config 0 descriptor?? [ 360.672451][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 360.679870][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 360.754058][ T24] usb 4-1: USB disconnect, device number 24 [ 360.999657][T10079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.481425][T10130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.153954][T10146] loop6: detected capacity change from 0 to 7 [ 365.173322][ C0] blk_print_req_error: 10 callbacks suppressed [ 365.173352][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.189224][ C0] buffer_io_error: 10 callbacks suppressed [ 365.189240][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.203249][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.212889][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.225223][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.234817][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.245196][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.254828][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.279996][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.289913][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.315227][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.324881][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.335311][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.344936][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.353214][ T5837] ldm_validate_partition_table(): Disk read failed. [ 365.360080][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.369713][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.383684][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.393283][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.401426][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 365.410990][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.420795][ T5837] Dev loop6: unable to read RDB block 0 [ 365.427605][ T5837] loop6: unable to read partition table [ 365.433396][ T5837] loop6: partition table beyond EOD, truncated [ 365.451773][T10146] ldm_validate_partition_table(): Disk read failed. [ 365.480349][T10146] Dev loop6: unable to read RDB block 0 [ 365.490279][T10146] loop6: unable to read partition table [ 365.505413][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 365.526412][T10146] loop6: partition table beyond EOD, truncated [ 365.562529][T10146] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 365.667431][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.701956][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.915348][ T24] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 365.950733][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.969017][ T24] usb 3-1: config 0 descriptor?? [ 366.392965][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 366.399080][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 366.408510][ T24] usb 3-1: USB disconnect, device number 31 [ 366.477547][ T8773] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 366.735480][ T8773] usb 4-1: Using ep0 maxpacket: 16 [ 366.840667][ T8773] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 366.869943][ T8773] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.895275][ T8773] usb 4-1: config 0 has no interface number 0 [ 366.924092][ T8773] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.231837][ T8773] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 367.244369][ T8773] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 367.689097][ T8773] usb 4-1: Product: syz [ 367.693310][ T8773] usb 4-1: SerialNumber: syz [ 367.700807][ T8773] usb 4-1: config 0 descriptor?? [ 367.716170][ T8773] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 368.255635][ T3563] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.560562][ T5931] usb 4-1: USB disconnect, device number 25 [ 371.065506][ T5931] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 371.088330][T10225] IPv6: Can't replace route, no match found [ 371.245355][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 371.254978][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.271980][ T5931] usb 1-1: config 8 has an invalid interface number: 79 but max is 0 [ 371.292019][ T5931] usb 1-1: config 8 has no interface number 0 [ 371.351791][T10239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1124'. [ 371.802400][ T5931] usb 1-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 371.904031][ T5931] usb 1-1: config 8 interface 79 has no altsetting 0 [ 371.946182][ T5920] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 371.976854][ T5931] usb 1-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 371.994529][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.029661][ T5931] usb 1-1: Product: syz [ 372.047467][ T5931] usb 1-1: Manufacturer: syz [ 372.060416][ T5931] usb 1-1: SerialNumber: syz [ 372.457721][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 372.585375][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 372.622364][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 372.724336][ T5920] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 372.734895][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.818299][ T5920] usb 2-1: Product: syz [ 372.911511][ T5920] usb 2-1: Manufacturer: syz [ 372.930525][ T5920] usb 2-1: SerialNumber: syz [ 372.999222][ T5920] usb 2-1: config 0 descriptor?? [ 373.375368][ T8773] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 373.536109][ T8773] usb 5-1: Using ep0 maxpacket: 8 [ 373.551259][ T8773] usb 5-1: unable to get BOS descriptor or descriptor too short [ 373.575272][ T8773] usb 5-1: config 8 has an invalid interface number: 79 but max is 0 [ 373.584039][ T8773] usb 5-1: config 8 has no interface number 0 [ 373.602409][ T8773] usb 5-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 373.636930][ T8773] usb 5-1: config 8 interface 79 has no altsetting 0 [ 373.668635][ T8773] usb 5-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05 [ 373.679302][ T8773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.687581][ T8773] usb 5-1: Product: syz [ 373.707610][ T8773] usb 5-1: Manufacturer: syz [ 373.725256][ T8773] usb 5-1: SerialNumber: syz [ 374.198903][ T5931] usb 1-1: bad CDC descriptors [ 374.208221][ T5931] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 374.394781][ T5931] snd-usb-audio 1-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 374.698381][ T5931] usb 1-1: USB disconnect, device number 23 [ 374.845124][ T5837] udevd[5837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.877063][ T5920] powermate 2-1:0.0: probe with driver powermate failed with error -5 [ 374.921280][ T5920] usb 2-1: USB disconnect, device number 23 [ 375.731926][ T5920] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 375.742280][ T5920] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.756460][T10272] sctp: [Deprecated]: syz.2.1134 (pid 10272) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.756460][T10272] Use struct sctp_sack_info instead [ 376.245273][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 376.535518][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 376.570197][ T8773] usb 5-1: bad CDC descriptors [ 376.587123][ T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 376.639153][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.657473][ T8773] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 376.667901][ T24] usb 3-1: config 0 has no interface number 0 [ 376.727642][ T24] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.762426][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 376.776960][T10282] syzkaller0: entered promiscuous mode [ 376.783681][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.797777][ T8773] snd-usb-audio 5-1:8.79: probe with driver snd-usb-audio failed with error -2 [ 376.808213][ T24] usb 3-1: Product: syz [ 376.812497][T10282] syzkaller0: entered allmulticast mode [ 376.820935][ T24] usb 3-1: Manufacturer: syz [ 376.828533][ T8773] usb 5-1: USB disconnect, device number 21 [ 376.834621][ T24] usb 3-1: SerialNumber: syz [ 376.858571][ T24] usb 3-1: config 0 descriptor?? [ 376.877245][ T24] hub 3-1:0.89: bad descriptor, ignoring hub [ 376.885325][ T24] hub 3-1:0.89: probe with driver hub failed with error -5 [ 376.913186][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.914145][ T24] option 3-1:0.89: GSM modem (1-port) converter detected [ 377.215441][ T3563] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 377.287930][ T5920] usb 3-1: USB disconnect, device number 32 [ 377.303864][ T5920] option 3-1:0.89: device disconnected [ 377.795328][ T3467] wlan0: Trigger new scan to find an IBSS to join [ 378.505733][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.512045][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.534861][ T24] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 378.557364][ T24] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 378.904619][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 379.087913][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 379.101379][ T24] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 379.109873][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.343087][ T24] usb 3-1: config 0 has no interface number 0 [ 379.481737][ T24] usb 3-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 379.655461][ T24] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 379.725377][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.749239][ T24] usb 3-1: Product: syz [ 379.759344][ T24] usb 3-1: Manufacturer: syz [ 379.773099][ T24] usb 3-1: SerialNumber: syz [ 379.810868][ T24] usb 3-1: config 0 descriptor?? [ 379.823742][ T24] hub 3-1:0.89: bad descriptor, ignoring hub [ 379.829891][ T8773] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 379.845459][ T24] hub 3-1:0.89: probe with driver hub failed with error -5 [ 379.861496][ T24] option 3-1:0.89: GSM modem (1-port) converter detected [ 380.065366][ T8773] usb 4-1: Using ep0 maxpacket: 16 [ 380.074015][ T8773] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 380.083375][ T8773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.106805][ T8773] usb 4-1: Product: syz [ 380.127758][ T8773] usb 4-1: Manufacturer: syz [ 380.132383][ T8773] usb 4-1: SerialNumber: syz [ 380.159567][ T8773] usb 4-1: config 0 descriptor?? [ 380.275782][ T24] usb 3-1: USB disconnect, device number 33 [ 380.283808][ T24] option 3-1:0.89: device disconnected [ 380.501191][ T5931] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 380.513807][ T5931] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.526452][T10336] sctp: [Deprecated]: syz.4.1151 (pid 10336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 380.526452][T10336] Use struct sctp_sack_info instead [ 380.565287][ T5920] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 380.589325][ T8773] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 380.600126][ T8773] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.625630][ T8773] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 380.635037][ T8773] usb 4-1: media controller created [ 380.657618][ T8773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.715297][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 380.727596][ T5920] usb 1-1: unable to get BOS descriptor or descriptor too short [ 380.745576][ T3563] wlan0: Trigger new scan to find an IBSS to join [ 380.756052][ T5920] usb 1-1: config 4 interface 0 has no altsetting 0 [ 380.766067][ T5920] usb 1-1: string descriptor 0 read error: -22 [ 380.951415][ T5920] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 380.968891][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.986279][ T5920] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 380.995333][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 380.999107][ T5920] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 381.130441][ T5920] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 381.138110][ T5920] usb 1-1: media controller created [ 381.155504][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.195245][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 381.202756][ T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 381.211416][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.224112][ T24] usb 5-1: config 0 has no interface number 0 [ 381.234516][ T24] usb 5-1: config 0 interface 89 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.248771][ T8773] zl10353_read_register: readreg error (reg=127, ret==0) [ 381.256135][T10330] dtv5100: wlen = 0, aborting. [ 381.263990][ T8773] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 381.275095][ T8773] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 381.275494][T10334] ------------[ cut here ]------------ [ 381.289820][T10334] usb 4-1: BOGUS control dir, pipe 80001a80 doesn't match bRequestType c0 [ 381.298452][T10334] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.0.1150/10334 [ 381.308955][T10334] Modules linked in: [ 381.313121][T10334] CPU: 0 UID: 0 PID: 10334 Comm: syz.0.1150 Not tainted syzkaller #0 PREEMPT(full) [ 381.322586][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.332862][T10334] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 381.338563][T10334] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 381.358337][T10334] RSP: 0018:ffffc90003a97928 EFLAGS: 00010246 [ 381.364573][T10334] RAX: 0000000000000000 RBX: ffff8880338bcf00 RCX: 0000000080001a80 [ 381.372681][T10334] RDX: ffff888025b53e20 RSI: ffffffff8c7eef80 RDI: ffffffff901ebbb0 [ 381.380826][T10334] RBP: 1ffff1100a0f88c4 R08: 00000000000000c0 R09: 0000000000000000 [ 381.388831][T10334] R10: ffffc90003a97a20 R11: fffff52000752f50 R12: ffff888029c2d100 [ 381.396915][T10334] R13: ffff8880507c4620 R14: 0000000080001a80 R15: ffff888025b53e20 [ 381.404907][T10334] FS: 00007f08420e36c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 381.414049][T10334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.420736][T10334] CR2: 0000001b30922ff8 CR3: 0000000051168000 CR4: 00000000003526f0 [ 381.428756][T10334] Call Trace: [ 381.432040][T10334] [ 381.434976][T10334] ? __init_swait_queue_head+0xa9/0x150 [ 381.440602][T10334] usb_start_wait_urb+0x12b/0x510 [ 381.445670][T10334] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 381.451316][T10334] usb_control_msg+0x232/0x3e0 [ 381.456149][T10334] dtv5100_i2c_msg+0x231/0x2f0 [ 381.460928][T10334] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 381.465807][T10334] __i2c_transfer+0x79a/0x2020 [ 381.470580][T10334] ? i2c_transfer+0xc8/0x2d0 [ 381.475228][T10334] i2c_transfer+0x1cc/0x2d0 [ 381.479750][T10334] i2cdev_ioctl_rdwr+0x460/0x740 [ 381.484697][T10334] i2cdev_ioctl+0x6a5/0x880 [ 381.489243][T10334] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 381.494283][T10334] ? __fget_files+0x3a0/0x420 [ 381.498999][T10334] ? __fget_files+0x2a/0x420 [ 381.503593][T10334] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.508573][T10334] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 381.513606][T10334] __se_sys_ioctl+0xfc/0x170 [ 381.518238][T10334] do_syscall_64+0x14d/0xf80 [ 381.522846][T10334] ? trace_irq_disable+0x3b/0x150 [ 381.527917][T10334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.533989][T10334] ? clear_bhb_loop+0x40/0x90 [ 381.538734][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.544654][T10334] RIP: 0033:0x7f084119c799 [ 381.549138][T10334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.568895][T10334] RSP: 002b:00007f08420e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.577413][T10334] RAX: ffffffffffffffda RBX: 00007f0841415fa0 RCX: 00007f084119c799 [ 381.585446][T10334] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007 [ 381.593477][T10334] RBP: 00007f0841232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 381.601766][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.609841][T10334] R13: 00007f0841416038 R14: 00007f0841415fa0 R15: 00007f084153fa48 [ 381.612949][ T24] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 381.617914][T10334] [ 381.630040][T10334] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 381.637332][T10334] CPU: 0 UID: 0 PID: 10334 Comm: syz.0.1150 Not tainted syzkaller #0 PREEMPT(full) [ 381.646699][T10334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.656744][T10334] Call Trace: [ 381.660009][T10334] [ 381.662926][T10334] vpanic+0x56c/0xa60 [ 381.666905][T10334] ? __pfx__printk+0x10/0x10 [ 381.671481][T10334] ? __pfx_vpanic+0x10/0x10 [ 381.675986][T10334] ? irqentry_exit+0x59e/0x620 [ 381.680750][T10334] panic+0xc5/0xd0 [ 381.684465][T10334] ? __pfx_panic+0x10/0x10 [ 381.688886][T10334] __warn+0x315/0x4f0 [ 381.692861][T10334] ? usb_submit_urb+0x1052/0x18b0 [ 381.697881][T10334] ? usb_submit_urb+0x1052/0x18b0 [ 381.702895][T10334] __report_bug+0x29a/0x540 [ 381.707393][T10334] ? unwind_get_return_address+0x4d/0x90 [ 381.713027][T10334] ? usb_submit_urb+0x1052/0x18b0 [ 381.718041][T10334] ? __pfx___report_bug+0x10/0x10 [ 381.723062][T10334] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.728873][T10334] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.734068][T10334] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.739873][T10334] ? stack_depot_save_flags+0x3f3/0x810 [ 381.745414][T10334] report_bug_entry+0x19a/0x290 [ 381.750263][T10334] ? usb_submit_urb+0x1114/0x18b0 [ 381.755278][T10334] ? usb_submit_urb+0x1119/0x18b0 [ 381.760293][T10334] handle_bug+0xca/0x200 [ 381.764529][T10334] exc_invalid_op+0x1a/0x50 [ 381.769019][T10334] asm_exc_invalid_op+0x1a/0x20 [ 381.773857][T10334] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 381.779483][T10334] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 381.799085][T10334] RSP: 0018:ffffc90003a97928 EFLAGS: 00010246 [ 381.805143][T10334] RAX: 0000000000000000 RBX: ffff8880338bcf00 RCX: 0000000080001a80 [ 381.813105][T10334] RDX: ffff888025b53e20 RSI: ffffffff8c7eef80 RDI: ffffffff901ebbb0 [ 381.821065][T10334] RBP: 1ffff1100a0f88c4 R08: 00000000000000c0 R09: 0000000000000000 [ 381.829033][T10334] R10: ffffc90003a97a20 R11: fffff52000752f50 R12: ffff888029c2d100 [ 381.836992][T10334] R13: ffff8880507c4620 R14: 0000000080001a80 R15: ffff888025b53e20 [ 381.844965][T10334] ? usb_submit_urb+0x10a3/0x18b0 [ 381.849988][T10334] ? __init_swait_queue_head+0xa9/0x150 [ 381.855547][T10334] usb_start_wait_urb+0x12b/0x510 [ 381.860569][T10334] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 381.866122][T10334] usb_control_msg+0x232/0x3e0 [ 381.870884][T10334] dtv5100_i2c_msg+0x231/0x2f0 [ 381.875645][T10334] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 381.880496][T10334] __i2c_transfer+0x79a/0x2020 [ 381.885260][T10334] ? i2c_transfer+0xc8/0x2d0 [ 381.889844][T10334] i2c_transfer+0x1cc/0x2d0 [ 381.894343][T10334] i2cdev_ioctl_rdwr+0x460/0x740 [ 381.899279][T10334] i2cdev_ioctl+0x6a5/0x880 [ 381.903769][T10334] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 381.908786][T10334] ? __fget_files+0x3a0/0x420 [ 381.913453][T10334] ? __fget_files+0x2a/0x420 [ 381.918043][T10334] ? bpf_lsm_file_ioctl+0x9/0x20 [ 381.922970][T10334] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 381.927983][T10334] __se_sys_ioctl+0xfc/0x170 [ 381.932566][T10334] do_syscall_64+0x14d/0xf80 [ 381.937150][T10334] ? trace_irq_disable+0x3b/0x150 [ 381.942172][T10334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.948229][T10334] ? clear_bhb_loop+0x40/0x90 [ 381.952899][T10334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.958781][T10334] RIP: 0033:0x7f084119c799 [ 381.963187][T10334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.982782][T10334] RSP: 002b:00007f08420e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.991188][T10334] RAX: ffffffffffffffda RBX: 00007f0841415fa0 RCX: 00007f084119c799 [ 381.999148][T10334] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000007 [ 382.007106][T10334] RBP: 00007f0841232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 382.015064][T10334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.023022][T10334] R13: 00007f0841416038 R14: 00007f0841415fa0 R15: 00007f084153fa48 [ 382.030993][T10334] [ 382.034451][T10334] Kernel Offset: disabled [ 382.038763][T10334] Rebooting in 86400 seconds..