last executing test programs: 4m5.472736933s ago: executing program 4 (id=1425): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000043c0)=[{{&(0x7f0000000240)=@ax25={{0x3, @null}, [@rose, @bcast, @default, @remote, @bcast, @rose, @null, @null]}, 0x80, &(0x7f0000004800)=[{&(0x7f0000002c40)=""/94, 0x5e}, {&(0x7f0000002cc0)=""/69, 0x45}, {&(0x7f0000004540)=""/123, 0x7b}, {&(0x7f00000045c0)=""/104, 0x68}, {&(0x7f0000004640)=""/213, 0xd5}, {&(0x7f0000000800)=""/44, 0x2c}, {&(0x7f0000004740)=""/7, 0x7}, {&(0x7f0000004780)=""/72, 0x48}], 0x8, &(0x7f0000000300)=""/139, 0x8b}}, {{&(0x7f00000003c0)=@l2tp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x5, &(0x7f0000002840)=""/149, 0x95}, 0x4}, {{&(0x7f0000000740)=@phonet, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000002900)=""/78, 0x4e}, 0x2}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002980)=""/233, 0xe9}, {&(0x7f00000005c0)=""/61, 0x3d}, {&(0x7f0000002a80)=""/163, 0xa3}], 0x3, &(0x7f0000002b80)=""/147, 0x93}, 0x3ff}, {{&(0x7f0000002e00)=@isdn, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002e80)=""/130, 0x82}, {&(0x7f0000002f40)=""/253, 0xfd}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000003040)=""/231, 0xe7}, {&(0x7f0000003140)=""/92, 0x5c}], 0x5, &(0x7f0000003240)=""/124, 0x7c}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/90, 0x5a}], 0x3, &(0x7f00000004c0)=""/62, 0x3e}, 0x1}], 0x6, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000043c0)=[{{&(0x7f0000000240)=@ax25={{0x3, @null}, [@rose, @bcast, @default, @remote, @bcast, @rose, @null, @null]}, 0x80, &(0x7f0000004800)=[{&(0x7f0000002c40)=""/94, 0x5e}, {&(0x7f0000002cc0)=""/69, 0x45}, {&(0x7f0000004540)=""/123, 0x7b}, {&(0x7f00000045c0)=""/104, 0x68}, {&(0x7f0000004640)=""/213, 0xd5}, {&(0x7f0000000800)=""/44, 0x2c}, {&(0x7f0000004740)=""/7, 0x7}, {&(0x7f0000004780)=""/72, 0x48}], 0x8, &(0x7f0000000300)=""/139, 0x8b}}, {{&(0x7f00000003c0)=@l2tp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000540)=""/124, 0x7c}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x5, &(0x7f0000002840)=""/149, 0x95}, 0x4}, {{&(0x7f0000000740)=@phonet, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000002900)=""/78, 0x4e}, 0x2}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002980)=""/233, 0xe9}, {&(0x7f00000005c0)=""/61, 0x3d}, {&(0x7f0000002a80)=""/163, 0xa3}], 0x3, &(0x7f0000002b80)=""/147, 0x93}, 0x3ff}, {{&(0x7f0000002e00)=@isdn, 0x80, &(0x7f00000031c0)=[{&(0x7f0000002e80)=""/130, 0x82}, {&(0x7f0000002f40)=""/253, 0xfd}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000003040)=""/231, 0xe7}, {&(0x7f0000003140)=""/92, 0x5c}], 0x5, &(0x7f0000003240)=""/124, 0x7c}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/107, 0x6b}, {&(0x7f0000004340)=""/90, 0x5a}], 0x3, &(0x7f00000004c0)=""/62, 0x3e}, 0x1}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x200000000000000}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x140, 0x1000, 0x0, 0x4, 0x0, {0x0, 0x3, 0x1002}, {0x350, 0xfffffffd, 0x1}, {0xf4ef}, {0x8000, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd618, 0x0, 0x4, 0x0, 0x205, 0x0, 0x6, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) fanotify_init(0x4000, 0x180) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', 0x0}) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') (async) syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') sendmsg$nl_route(r4, 0x0, 0x0) (async) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f00000001c0)={0x800, 0x88}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="1b00000000000000facd000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d80)=ANY=[@ANYBLOB="1b00000000000000facd000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$inet6(0xa, 0x80002, 0x0) (async) socket$inet6(0xa, 0x80002, 0x0) socket(0x11, 0x800000003, 0x0) (async) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002d40)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0x300}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x7a00}, 0x24008000) 4m5.199218275s ago: executing program 4 (id=1428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x7b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x1, 0x80}]}]}, 0x23c}}, 0x44000080) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r2, @ANYRES16=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb3c002b8008000300", @ANYRES64=r1], 0x78}, 0x1, 0x2, 0x0, 0x4000080}, 0x0) 4m5.198394156s ago: executing program 4 (id=1429): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8, 0x1b, 0x5}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048020}, 0x2000a825) (async) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) (async) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000180)={"b820b2db3aa86dcdefefef635a7106794801818b45748a29ab115eab1ac4", 0x7, 0x0, 0x0, 0x8000, 0x44, 0x4, 0x5, 0x4, [0xb, 0xffffff81, 0x9, 0x800, 0xe, 0x401, 0x2, 0x214e, 0x2, 0x19e4, 0x9, 0xfff, 0xfff, 0x5a9, 0x8, 0x7, 0x2, 0x6, 0x7]}) 4m5.173591s ago: executing program 4 (id=1430): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28010000400007012bbd7000fedbdf25037c00000400c2800c0101800801108004010000000013000000000008000b00640101020c00b2000900000000000000e1003f8004002780ffb84017de4be626085c717cd68df496d047cb5cbc438412a6bfb086c914273579dbb6ec5f516a"], 0x128}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="30f2ffff01060101000000000000000000f90003050005000a0002000000020073797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000056ab00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 4m4.191321027s ago: executing program 4 (id=1432): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) syz_emit_ethernet(0x52, &(0x7f0000001e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x100, 0x0, 0x6, {[@sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000050) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f0000001800dd8d00f9ff000000000002"], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008001800b7030000500d0000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x2d, &(0x7f00000000c0)=""/45, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 4m3.900971196s ago: executing program 4 (id=1435): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0xfffffffffffffffd) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000140)) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@v={0x93, 0xc, 0x0, 0x12, @generic, 0xfa, 0x85f}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000003c0)={'vlan0\x00', @broadcast}) r4 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7fffffffffffffff}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x6a7fc4a7, 0x1, 0x2, 0x9, r4}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200)) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r11, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000160008002bbd7000fddbdf250a7804ff", @ANYRES32=r11, @ANYBLOB="140001002001000000000000008d65000000000214000100fc000000000000000000000000000001080008002800000008000900000000000800090001ffffff"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x400c8) ioctl$SNDCTL_SEQ_TESTMIDI(r9, 0x40045108, &(0x7f0000000180)=0x5) 3m48.620973811s ago: executing program 32 (id=1435): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0xfffffffffffffffd) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x2000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000140)) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000000)=@v={0x93, 0xc, 0x0, 0x12, @generic, 0xfa, 0x85f}) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000003c0)={'vlan0\x00', @broadcast}) r4 = getpgrp(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7fffffffffffffff}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x100, 0xc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x3c}, 0xa, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0}, 0x810) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x6a7fc4a7, 0x1, 0x2, 0x9, r4}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200)) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r11, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000160008002bbd7000fddbdf250a7804ff", @ANYRES32=r11, @ANYBLOB="140001002001000000000000008d65000000000214000100fc000000000000000000000000000001080008002800000008000900000000000800090001ffffff"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x400c8) ioctl$SNDCTL_SEQ_TESTMIDI(r9, 0x40045108, &(0x7f0000000180)=0x5) 8.559028661s ago: executing program 5 (id=1765): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) (async) syz_io_uring_setup(0x890, &(0x7f0000000440)={0x0, 0xdec2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map, 0x1, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="600000002500010000000000fbdbdf2527308da2a0591788a58e856553ea76c9d67ba3271f9af613608d9d9637c18201a2a206787de1ddfc2e922a6345dfb83b90285becad00cf707217fe5ff923ef3f7d1fa01cd3581e0029f6a40b0d50b710"], 0x60}], 0x1}, 0x20000000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x40}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000780)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) (async) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000940)={'#! ', './file0', [{0x20, 'veth0_macvtap\x00'}, {0x20, 'dvmrp1\x00'}], 0xa, "ecfb2da4955bfd5861d978042a6ad22f6baf924d7bb1f5c47274d2a120e923d6033f5d05901d3dc2bb8087032f8259d85360490a4aa339abd0356bd229401537468c79ba0b2b5d465f3260ed5552d927b0a0c0907dcdbdf460f3b3268b828016289f11222b0135e68943de197f2e6c57289f0fbe7bc357b520795b5a42277a9ac3cab4d25bc9c74284f3de70249515065c8652008fc6bf105d12ec"}, 0x24) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 6.488974949s ago: executing program 0 (id=1771): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100000000000000000000003000000011"], 0x3c}}, 0x8000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x80000800, 0x1, 0x2000000000903, 0x1, 0xe, 0xfffc}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 6.477038934s ago: executing program 0 (id=1772): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000280)="d7e709134e97914c36c08652714aed2032e040ba020c8049f1bfcf8aed01fb1c2a96a76aeee894f34e4ac0b60b429f64b21cfd49810c4b1a796c28bdbb94c4cc8383c377017146ff13bdbb56159951b2d5eb32ad69c1448395c4f4a0c998ae7d49ce30ce7d9c6852b20509fdf2de442fae1123ff97a1de4c6d50486f296c7ffb4c46212252fd3f0fb10056c507c9ebcc2a2e", 0x92}, {&(0x7f0000000980)="3ecc3b467122aff45ce455916ee99a1a60102fa65fc6415f62d4a03bd3d66707274560a9f42246aece1ac3630bb85de1a8153395d932ef09b56995123ba21de6ad3c5a3919aaa222d78bceba9631275c9384e015cfffa0ac6c0838e5ac5c4c4529ae2907d7e474aaf506827c6a5d545bd35818b4c4c6d8521931025abec25d7bef7599da432e2d11f09e4da9f80b13e35c778242d1bfadabf5eb4afab4ca538b06", 0xa1}, {0x0}, {&(0x7f0000000100)="4acc7a53afdb8ce5e18d10f98104b6ace442d7f7ebc367b9", 0x18}, {&(0x7f0000000a40)="88b12ebdb3c1baec2d17288efe23802c64c9bae0a0f81e30eeb7207cfa90a5f70ff79d1490393827ff9baf8ac2042f3b75cf8507624440465e980efd9a060dd526c4ab4c2e24a08fffa2a78604a066", 0x4f}, {&(0x7f00000003c0)="14eb84d9e99a76f975a313907eacc13f1c573dfda32f16b8a582e8146cc52d4e042d56662bf09d4c14b7eb56e82f29b5926765f9fec2f167e9899979901654927fb49b79fbe4c6868a1889a409a994a8d5671bee3b2aa6d9d9575894427e7020e3d632a2433a18580a502feb9a0a6102fa0a2a1493755b8bbe680af9bfc92f60faf11b80851f78e12ea30b8b1a0c07e1", 0x90}, {&(0x7f00000004c0)="f70d20f86f8877ac67c76caaae15d8a234be452c3dd0b89653499e9fa69bc2b6ce37a68e943d87b1b68456cb8a40a98b7e71", 0x32}, {&(0x7f0000000580)="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", 0xff}], 0x8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xfce1) fchmod(r0, 0x1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000000c0)={0x40, 0x17, 0x11, "0a248c0291390e000000005e9ccddd623b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x14, &(0x7f00000001c0), 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000680)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r5, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 6.359975685s ago: executing program 5 (id=1773): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) listen(r2, 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x81, 0x202, {{0xe, 0x4, 0x1, 0x29, 0x38, 0x64, 0x0, 0xc2, 0x4, 0x0, @private=0xa010101, @loopback, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x5, 0xc, "530184dd4921893301b6"}, {0x1, 0x10, 'S\x00'/14}]}]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000010400000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="8828000000000000540012800900010069706970000000004400028008000100", @ANYRES32=r5, @ANYBLOB="08000200ac1e010106000f000062eda5e28732d5b32ff34e7e110000000600004e22000008000200ac1414bb060011004e22000008000200ffffffff51000000000000000000a5cc099690411c6f9694d3764c602d67152c05f40c46a07bcd5bd0c36946645d9ba084b797276d47cb5fe9f8a7ba3d58089480b2112d898a9a2f485ead2ccdb9c95a3708ad73d10606ffa4b270ae17fe1b2ab900abee385a71d41109c82ffb60079c9bc0701442"], 0x74}, 0x1, 0x0, 0x0, 0x20000003}, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x9, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) io_uring_setup(0x7cb8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xffffffff}) (async) r6 = accept(r0, &(0x7f0000000240)=@isdn, &(0x7f00000002c0)=0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r6], 0x80}, 0x1, 0x0, 0x0, 0x4008031}, 0x24000000) (async) socket$kcm(0x29, 0x7, 0x0) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r8 = socket(0xa, 0x3, 0xff) recvmmsg(r8, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40010022, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x66000080) (async) r10 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r12 = gettid() sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r11, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r12], 0x28}}, 0x0) 5.510293464s ago: executing program 5 (id=1778): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)=0x1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}]}}]}, 0x48}}, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) 5.353250719s ago: executing program 5 (id=1779): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigpending(0x0, 0x1000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000"], 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0fc76c9700c4c27d78c2d19db45556bab9dd10e300000001c10f233d0f01c80f01ca0f23e30f320f009f00c0ffff650f380824e3", 0x34}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a0001007175657565000000140002800800044000000010060003401b0300000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) 5.087025872s ago: executing program 1 (id=1781): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000050000000000000000000000aa3000028004003f800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a80140007"], 0xec}}, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r5, 0x2) (async) shutdown(r5, 0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x1000005e, 0x8001, 0x0, 0x4, 0xfff, 0xfffffffffffffffd, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) lsm_list_modules(&(0x7f0000000000), &(0x7f0000000200), 0x0) (async) dup(r6) (async) socket$kcm(0xa, 0x5, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) pipe(&(0x7f0000000100)) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) 5.074436981s ago: executing program 2 (id=1782): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x40, 0x1, 0x7fffc, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) (async) io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 5.063915197s ago: executing program 5 (id=1783): syz_usb_connect(0x3, 0x51, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x78, 0x5f, 0xf9, 0x20, 0x413c, 0x8138, 0x8979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0xf4, 0x8, 0x20, 0x10, [{{0x9, 0x4, 0xb0, 0x3, 0x5, 0xe4, 0x60, 0x43, 0x5, [], [{{0x9, 0x5, 0x3, 0x5dd74fbdd2902512, 0x8, 0x7, 0x80, 0x4}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x7, 0x9, 0xf9}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x1, 0x0, 0x2}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x9, 0x0, 0x2}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x3, 0x6, 0x9}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x457}}, {0x67, &(0x7f00000000c0)=@string={0x67, 0x3, "308385c3ce92e5966135ab37c45d4a2225b3dee75a2eaf3c7954f5a29a647a22a3f59d85674a857413fbc363fda01290a8af80870584a9dbed0ff7d0cc781f3d87e47216c37060ea6c19a82b9dd01fbe546420b642415a40426e24a6599196f6036cd6eb14"}}]}) io_uring_setup(0x5f99, 0x0) syz_usb_connect(0x3, 0x51, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x78, 0x5f, 0xf9, 0x20, 0x413c, 0x8138, 0x8979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0xf4, 0x8, 0x20, 0x10, [{{0x9, 0x4, 0xb0, 0x3, 0x5, 0xe4, 0x60, 0x43, 0x5, [], [{{0x9, 0x5, 0x3, 0x5dd74fbdd2902512, 0x8, 0x7, 0x80, 0x4}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0x7, 0x9, 0xf9}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x1, 0x0, 0x2}}, {{0x9, 0x5, 0xc, 0x8, 0x400, 0x9, 0x0, 0x2}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x3, 0x6, 0x9}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x457}}, {0x67, &(0x7f00000000c0)=@string={0x67, 0x3, "308385c3ce92e5966135ab37c45d4a2225b3dee75a2eaf3c7954f5a29a647a22a3f59d85674a857413fbc363fda01290a8af80870584a9dbed0ff7d0cc781f3d87e47216c37060ea6c19a82b9dd01fbe546420b642415a40426e24a6599196f6036cd6eb14"}}]}) (async) io_uring_setup(0x5f99, 0x0) (async) 4.823481325s ago: executing program 2 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0xee1d, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}], 0x68) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="7d8266b95603000066b80000000066ba000000800f300f21fabaf80c66b8c06ee58c66efbafc0cb879c2efba2100ed0f20c06635000004000f22c026640f01c2b86d000f00d8660f3adfcc22670f01c3", 0x50}], 0x1, 0x15, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.660318991s ago: executing program 2 (id=1785): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000094ba78084e080110aeed010203010902220001000000000904000001437b6a00090501", @ANYRES32], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vlan1\x00', {0x1}, 0x7fff}) 4.624835157s ago: executing program 1 (id=1786): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000140)={0x6, 0x0, 0x80, 0x9, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000ec0)="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", 0x402}, 0x38) read$FUSE(0xffffffffffffffff, &(0x7f0000005840)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = syz_open_procfs(r3, &(0x7f00000003c0)='numa_maps\x00') read$FUSE(r4, &(0x7f0000007880)={0x2020}, 0x206b) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d"], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) write$cgroup_pressure(r4, &(0x7f00000001c0)={'some', 0x20, 0x0, 0x20, 0x9}, 0x2f) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000004c0)=""/233, &(0x7f00000001c0), &(0x7f0000000240), 0x6}, 0x38) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f00000002c0)=""/133, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) unshare(0x66000080) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) epoll_create1(0x0) 4.568922035s ago: executing program 0 (id=1787): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000040)=""/4096) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f0000001040)={{0xc, 0x5, 0x3, 0x3a8, 0xd3, 0x800, 0xd4, 0x4}, "cd9f8a07e8ff1b4f48ad48e37aa263e6d01a4ddd9ad740181630aa2b980415c2bb81a8e2773fe2e53d4fc734fb5b073ba70aa91337f2ccfb95c48c20045781c8b31753235bf4602c79a910b18472fb02ae5c3e2f40eb432d7017895d", ['\x00', '\x00']}, 0x27c) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000012c0)=""/4096) setxattr$incfs_metadata(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300), &(0x7f0000002340)="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", 0x1000, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000003340), 0x42040, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000003380)=0x7) removexattr(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)=@known='system.posix_acl_access\x00') prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000003440)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e24, 0x4, @mcast2, 0x2}], 0x2c) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000003480)=0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000003500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000034c0), 0x111, 0x5}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000003540)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000003580)={0x4, 0x8, 0x8, 0x80, 0x4, 0x3}) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x8010, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0xc0, &(0x7f0000003600)=0x10, 0x0, 0x4) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r5 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000003640), 0x4) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000003780)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003740)={&(0x7f00000036c0)={0x48, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x4000880) clock_gettime(0x0, &(0x7f0000005280)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000051c0)=[{{&(0x7f00000037c0)=@ax25={{0x3, @bcast}, [@netrom, @rose, @netrom, @netrom, @remote, @netrom, @remote, @default]}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003840)=""/156, 0x9c}, {&(0x7f0000003900)=""/99, 0x63}, {&(0x7f0000003980)=""/229, 0xe5}], 0x3, &(0x7f0000003ac0)=""/241, 0xf1}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000003bc0)=""/164, 0xa4}, {&(0x7f0000003c80)=""/22, 0x16}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)=""/31, 0x1f}, {&(0x7f0000003d40)=""/142, 0x8e}], 0x5, &(0x7f0000003e80)=""/4, 0x4}, 0x2}, {{&(0x7f0000003ec0)=@nfc, 0x80, &(0x7f0000005140)=[{&(0x7f0000003f40)=""/215, 0xd7}, {&(0x7f0000004040)=""/192, 0xc0}, {&(0x7f0000004100)=""/38, 0x26}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x4, &(0x7f0000005180)=""/51, 0x33}, 0xe4e1}], 0x3, 0x4, &(0x7f00000052c0)={r6, r7+10000000}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_io_uring_setup(0x1826, &(0x7f0000005300)={0x0, 0xdb5e, 0x8, 0x0, 0xf1, 0x0, r3}, &(0x7f0000005380), &(0x7f00000053c0)) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005400)='/sys/kernel/address_bits', 0x185283, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000005440)={{0x1, 0x1, 0x18, r2, {0x8}}, './file1\x00'}) 3.616024538s ago: executing program 0 (id=1789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000005540)={{0x5, 0x0, 0x80, {0x1, 0x3000, 0x3000}}, "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", "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"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0dac0f0004ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 3.407204286s ago: executing program 0 (id=1790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)={0x1c, 0x15, 0x301, 0x70bd2b, 0x25dfdbfc, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048080}, 0x30) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xfdff]}}], 0xffc8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.333749832s ago: executing program 1 (id=1791): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) sendmsg$unix(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001fc0)='7', 0x1}], 0x1, 0x0, 0x0, 0x20800}, 0x20040000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, 0x0}, 0x68) (async) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280), 0x4) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000600)={0x2bc, 0x12, 0x8, 0x70bd2d, 0x25dfdbff, {0x2, 0x5a, 0x5, 0xf3, {0x4e24, 0x4e21, [0x7, 0x3, 0x3, 0x8], [0x0, 0x1, 0x5, 0xf], 0x0, [0x51, 0x7]}, 0x7, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xcd, 0x1, "890c192d7a208aa78334234dcf39ca7eb85492421fcb6373e7297f44de390c3b57eb9cb015f1b746579a5241e211de454a2a25ae4803f4df190f6ea20ee8ca110a7c4ab3ec38ccfe4f7c453406f0eb40691032c4ec1d114ab3894f9faf1f71007aa7774331964173a92948dad2d313a5219559b56b50baa873461e44f2cd8f1afec4bee5d153fc38220d1697d9725fc15a4eabd8d3dc0fb2a004780606725db546ec72b77e2d87dd341d28a4dc9fabdfcd9f6166e28830ec94532d24ad7dd8767060f7f53fb8aa1ffe"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "2b78d191a15460a6e790ff4042d323fdf57148e8834ab0d75400f56e3a23106cde5999bc728f05778ba03430a7af8c3e6614dff7684625a9f37388c2fc3a42815fa6006497"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "b9184796cf105af3c65395bb6a392fa8f7d884d23be38816f1d903449f91654ec117d0c9c8d07883bc91a1daede9635d538ea299531e7366d126e99024354054c4a6960df928f7ba8234edb3d39b46c5e671bdacc60bd68eed5b6e1c0c1ae9021cfee122145f72b54ccb637bd6e89537db8200ca581ddd"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "6d7d45d721ebdcc80af1e20f5dc5c49225a3ca9866b965c3c0b2b20aff669107e5f740e161b5ef21ff6236fd599571d7084e990d590198e791861f613157295e75e2d0a20eec9e5cf42350e0201bb530454b3654ff0fb782c2fe335ee7fa52782c3df935b2ed7a80b164af5285a25d8da7a78be2893453d033eab3fb6ad8e88ebc510e1bd79211fb4cbe9dcf86c84cdc143d320ca7b2642ffcc5b7a921bece622ddfb07273ebb1fcac5be42624a57a151b999e8be68e"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "3f794d6eb529bb08b85c9062dd2a8c934c477437a769"}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4001}, 0x40) (async) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async) io_uring_enter(r7, 0x351a, 0x100, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/129, 0x81}], 0x3, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1, 0x100004, 0x81) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fedbdf2513000000400001803c0002800800040004000000080001001700000008000300010000000800030002000000080004000000000008000300000400000800020001800000"], 0x54}, 0x1, 0x0, 0x0, 0x61f61528503ebb7e}, 0x8011) (async) r12 = io_uring_setup(0x4e0, &(0x7f0000000040)={0x0, 0x36d, 0xc010, 0x3, 0x16f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) io_uring_enter(r12, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.107664481s ago: executing program 1 (id=1792): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000e1e000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000630000/0x1000)=nil, 0x1000}, 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b000104000000090400004fd4695e00090532825b"], 0x0) 3.100919831s ago: executing program 3 (id=1793): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x4, "465ce421"}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003ac0)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xeeee0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x208000035, 0x2, 0x8000000000000, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) unshare(0x40000000) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x4, "465ce421"}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003ac0)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x2, 0xeeee0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) (async) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x208000035, 0x2, 0x8000000000000, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) (async) unshare(0x40000000) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) 3.073825573s ago: executing program 5 (id=1794): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r3, 0x32d7, 0x0, 0x46, 0x0, 0x0) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f00000002c0)={{0x1, 0x2, 0x81, 0x3}, 0x4, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0x0, 0x20000000000}) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0x1, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x1, 0x283, 0x0, r8}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x63, 0x0, 0x0) close_range(r9, r9, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000000c0)=0x7f) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000034a83bec8e5334c1d9e63f5be0bd0e6e6e676d6f42d92dbd223f2c5234dac9a8cf407efc80ac54459b1d2e07d483d8aa6e1a232830ad97d5531d31a831692cf9e21109862c4ec4209f7473b61981f9a8d046b24b6a75b50f09fc1399902b57851c2fbf27ca6107be18c9566ed6fbcb9c35e4b6d0c1df631bc605c7a7d432629e58b50a660e62fc6268732006d1e5f6ec6036d4fd59a54750bc11fc5a820d9c8f2a2dccc2bc91593065ace89cd1180b2a2b4e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r12, @ANYBLOB="000000000000000f358816fba0c7b90000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000500)="0021472577c6623bf7efa26dd4a0b4dd7d259aaf1c58", 0x16}], 0x1, 0x73a, 0x1) 2.970994408s ago: executing program 0 (id=1795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000004d00)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000540)="c95f633567fbcd151b1534a94206f5ec4cdacd75c79959c12934ec50c9e8bb9a955f690dc60407b97eade9d5821e6ffc6e6146bbfc86d9c4b57906881d9181ad056575af5865696f40a97e21e90abafbba10358b062ee8a880b6a9a717628a339e00f4244c37f3a0d0b447c3f8c944bc", 0x70}, {&(0x7f0000000640)="28f79cef0022e76f9ed5dddf6a4fbce26726382aa0b3f04294d1199b85bae91d16e8665c44a8fd625f489ac9faf4049f8c5ac4c1a282288d6fdbd1b897140b8aa7e5409ec9ad872accfa8e59a9eed817bf8c38beb1dccd3142c1fa16f2d16f1e2d85bdaa993d23802f6acfd144ddc8f7c87231483fbe4d60a4f59368a95f6c0f2d59e33bfe422d4c22d6c679f2742b811735474a30d3c74fe492915d48340601a52b6e7da1ad3a7a060cdd5f18e0fcdb4750a46d7840cc9173632660b88c", 0xbe}, {&(0x7f0000000700)="08c71f6ef665d66579cf384316df0388bd2ce2acdbbc1853739d89378b41fa9289484f9f97080dc0803485ab72a1674fbe024b24c0dde1fe2ca50fa8ccb649522856384e90f285ad5c4192f626ff8a140d98e3b7f03a4e95ac86e2ca83464e75a87fdcd2467b34b1", 0x68}, {&(0x7f0000000780)="e42ca6cae5934c328c4c9d85907c63301d05aa449b2a78d13e99e4435cea94ee150755418458b7774a6e98110d50ded14aaa5ea22875c91806d874c3c47c03a7e3b76a7bb384d0463f0d198f0446dadc947092ff52699fc5c74f0eda76307e10b6788c0428c2c3810d04d352fe00c76d7ac1f4656819afe3dca095865f8d9be10c14e5183751d3abba12c7f6b45df32c6afb83fa203e438812cb5df7abb000e37157e575df72a0ae79833ec4f262e18bf7987d32376016c0b0955532307b620d5396ee77628e565d6ab5cbb24fc77620d28640162fe918c37459ac2dabe7e83fa40735c3", 0xe4}, {&(0x7f0000000040)="0fb6fc79c808cccb3d00586dbb879be75d9931f7c36c262e34e730f8f5a6da12ee1c7bc49c1dbb42ba9ff46231d014", 0x2f}], 0x5, &(0x7f0000000140), 0x0, 0x24000084}}, {{&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000001c0)="dd180ecf3eb0d355bcb7e2200a2def2ac234e868669ef054c5383910899b1e37669e549a6f16a9324e38437942", 0x2d}, {&(0x7f0000000980)="f6838bd4b148aa7cbd81f15ec2c27271b92dfa10022e735df4b9bec9cf2b3b179cff8bc372a43a0ce03cec13052581e3e8ea54a2ef5a9f9dfa9f64489fa36ce38a5952b6c76feceb7aeacc0ecaeab09ddd2c", 0x52}, {&(0x7f0000000a00)="ba72cc67e01af16739f3f864d3cad21de37ecf0022dbadf00b64189aeaad7e35af96341d9a8bfd773c24ec069cbf665fd8f4788322934d146677b1049af2f75cca1805046d84da82b47a1a1aa2c2b90f101b2d8ed6950ef833034948575ba43bc11d585597532f32950115524869f209e268642ca6e5d8a35c4407462d3a5dddf0fb250be222dab6dfc64c9906f6948c76a8348cf8e8dc59f3a6ff9d03f5e54c6310a538dac15892296444482c7672ae95643bc0d620bc65c1c5f2f01f09b7a4d292bca66c26d8e4af6bf1532b3de7291e1e8c4ee1b90d85930e2f2036fe", 0xde}], 0x4, &(0x7f0000001080)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r1, r1, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0, r1, r1, r0, r0]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140, 0x48044}}, {{&(0x7f00000011c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001240)="68e627e787ef3f16573ca2d85601d7e379cc2b029717545d2ec3fbffa9195c633f48ffdbd6c95c9ed5a5f76290", 0x2d}, {&(0x7f0000001280)="c040deb5a1bdc464d0fa50967815581029f365446a5b20c842e7b2435b7d171ed055d8512ec68b63e1a50ce570ae4f1c66d87be7aab4cdb2cf271510549b4b50ad4bfab4ace971706c3967e60ab51f23f471281b26373819803803278913810abcaad1419446295039aba642599b0420aff6ff408420677b997d356468dfde6e82ae9c0097fa35350f26e88eb4b8402acc7bd0b9c22cce2aaebd92f414e6698fddfc85a8b9338ab4b9e7af08e78b4a58c9929ac25fb5aee60c97a3d0f966907c7bc68e969f6a2c8092354248", 0xcc}, {&(0x7f0000001380)="86f7c6fee91c349411143777baed4b20f85a34d879f0f778994c89b551521fc782e5825b818be358252f89", 0x2b}], 0x3, &(0x7f0000004c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x20048800}}], 0x3, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x10000020, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000003c0)={0x2, @sdr={0x34343452, 0x3}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r3, r3, 0x0, 0x68) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x40, 0x6, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000180)={r7}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0020020022380300140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r8, @ANYBLOB="08001f00040000004f8c158c887d4dce2d9818e3a2fe44f6f3e3a5521d2b1a3c9dbc11956a66d2059025b1dcf1a701ce7f39e601799c91"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r9, &(0x7f0000000340)=ANY=[], 0x14) syz_open_dev$char_usb(0xc, 0xb4, 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)=ANY=[@ANYBLOB="200000003e0007010000e5000000000004ef0771c300"/32], 0x20}}, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000001400)='\x00', 0x0, 0x1100) clock_gettime(0x0, &(0x7f0000000300)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r11, 0xffffffffffffffff, 0x0) 2.776070753s ago: executing program 3 (id=1796): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@getstats={0x1c, 0x5e, 0xe00, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x4}, ["", "", "", ""]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x28}}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r9, 0x4611, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x509000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0x1d}, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r8}) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r12 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r11) keyctl$set_timeout(0xf, r12, 0xfffff49f) 2.771201571s ago: executing program 2 (id=1797): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x5, &(0x7f0000001040)="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") sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000020000103000000000000000080000000000000000000000008000d"], 0x24}}, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = io_uring_setup(0xc90, &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000001580)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x0, 0x3, 0xa8, 0x800, 0xffff84d7, '\x00\x00\x00\f\x00', '\x00', '\x00\x00:\x00', '\x00', ["000d006b2c000400", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000004000000001000"]}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000400)={0x0, 0x0}) 2.638424805s ago: executing program 2 (id=1798): r0 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000940)={'filter\x00', 0x7, 0x4, 0x500, 0x2e8, 0x100, 0x2e8, 0x418, 0x418, 0x418, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @broadcast, 0xffffffff, 0xffffff00, 0x4, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, {[0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0x7, 0xcd, 0x200, 0xfff, 'wlan0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x0, 0x208}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "fcc72dabd75e0590efa34f07f8018d5b7b5405ca42053dce0f680f124d7c"}}, {{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:zero_device_t:s0\x00'}}}, {{@arp={@loopback, @private=0xa010101, 0xffffff00, 0xffffffff, 0x3, 0x7, {@mac=@random="49f377c95c3b", {[0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x2, 0x1ff, 0x4, 0x0, 'gretap0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x214}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0xa, 0x100, 0x0, 0x0, "71743bb418cebf3705dff86942961920287b0f5a1f1e6ceea23d077f7bc6a8eda898b9e0d511a88c2e4f1850bb3cd5331e2afa4071f5dbcaa567edbea1e36faf"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x550) fcntl$setflags(r0, 0x2, 0x0) 2.605178909s ago: executing program 2 (id=1799): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000140)={0x0, 0x0, 0x6, "f08039ad6674"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000000)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000740)={0x40, 0x1, 0x2, "75dd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x0, 0x30, 0x5, "dd850345c4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.879371592s ago: executing program 3 (id=1800): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x80000000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) r0 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) writev(r0, &(0x7f0000000140)=[{&(0x7f0000002240)="720e08733a245d4d89a5c41888a6cdeb07316aa2c9c12e47f60e788da5638bf22207c42671fab2b6f17b7e187cb6aa02b05ad6d1f2e618ff21d9a2e399df37abd9a6b1eb0bc6b01c63d8f31c87b2f8f08d5ea0ab80795043c222e7ec1ffdad384f11227446bbc2573a9371f20cf176373e3b17e19510ebed3d75b6c01ab0358ac2f6f5c8c41ca2ad82bf21b4bd1a920017914db1de44b01ece759c7b0449b7ccd185ad9a3cad60b40ad1461deea4dda78e50ea0fd87bdb053e61d2215aa81d031d0de6b6deb86ab1b55bd95237c7902f71424f175bd99f6e68e7fe215f1800833de1057c0a2d9db0d056f59dc6dd2ecb75bf9190407e35734790a15839563f6e3a2fc10c8c0b7caa231f2cbf4544cb16e2813a7807a0e54b772652dc8e4ed41489f91e5d8ee740f11a8402bc15e8b6c85ce8c5f380604334d366012b5f68805e9e0fbdfecee5f89446744d11c5b05db112dce671817b9ea66dd28661c4ea2cf20ad7b59461574a4ddd503f81172c0c0f098d656e640e87010000000100000079bc8ccdc4bc6e5eda196b95bdf4209c039c53fdf91c1d507f0328528687dcfb0bc3aa548e9c4b3c10831f32fdc836421e6f3804d7f3455fc67ae4bda3c015a1404873d23701d19e28cefb7a2f1c3083045335b5c7d5f7e81ca38b27a8c9fc367ffab2fdc4c1edde8f0c86d3a0dfd44aa793f3a30a25bad5114828207d5e25d8a92e16dc989020c87718399704c362114165827b2cd87c5c035afa0943776b9d0167cbfa4c0c9d9956ed3ccd60d4e28dda00e4ae80c5e92e53bc31cb1f273a8aa8a22f1cf5fbcf41e97d35e215ef0ebe48d1ad173038f342461eec39669a6b7e49b84347893a43aae69c7c4a130728751f15119bdb055b0a003e59ce58feced60fc0646436691accbc4ea7198a1ec56417ffb46fbfaad56e80b3bb4f2f9d2bcb75a94e3e08c0cd3ab358f644d93980cd89696455d508ed8eff336a0c51fb756f913091ac4a92b69c995aecd63056769fe07b60556848edbedc9d85bb94df52bb45fb49fe7ae378a46bdbc53fe4c35cfc4d104863dc08720cad04a802d7ea96a01b2d41ed758c2bed7a1ee5450e223ccc67fa1825b4146b2607d9eb5bf1ace1652f4e4b395ae4422e125e334c410b079a0e43b6e25526ab0c013deb5d2c78d565cabc0560b9ae639affa9b2ce91fd5505006833c05d73314288791f8e1b6b2e7cf87893baa43cb49d66664aab7fab658160caf2bc4e291f8e210cee58d962dc3cff19346e2ac3464c24844015e341b59633f88657e496ad4fa0224fd378f39e240326bcb33ea4a36ab4f401cd15e0fadcdd5290bfc0845e73a785df5809c46572d7601ef9b62c523a6b4f73ec237d0785781f950011591a7a5da9c55f5f57f1ef5c6c482412d6a7c7d7483342afb47c565898f9421a9733f8a8932d4bc7c1be67c0f764d7002745828fcc37a6cb0e2cb50f5431198124174de9c4a0320524c37c15dacc502685b394f502531a77222fe6b96504120f51cd5ed19d85db163e418695c1407aa343043b1888108c3c00c37cf9be5f0f86738375e327ca302db6d5fe341644cc507d3ca85ac21023527d7c6fe27bf4bf922098b8f7616f8e22ea4866e92bc53fc8ecc3767b5ed94e2dbbefb63ce3c7b43413f29a095650603c1ecb5e3962147b52b3d896ccd50464c286b1e7f5b03dedec32e7e988a02e6867805e4394219919f9032e440f24d0f35f313a8588e8fcfafe12365278c41dcbeaf1541646dc83cc6a2c26d6c805c24f7d24bc08ef11dc08cfe744277b939763dfda80f2ffa6d70103e7d2e7519fd80784478e48d1254d39dfedb544b6fad988a1417ebde5a1007cac38c1b0a7d59bd1897cc3a3f8752f349914438f327abde7f9cadd75e202637ef587f6393a96dd6a9f723b8e96de251c83154fb140c18be876d3a1dea93b4c3fc70de26458726cd8526a833cf84d3bf8e1bca44381451d02cf33e3acbe2db44ea4d54eab162aaeb199298557aaa00e1b6574f8c4b367bc06c30221ba734244806298aef143bc25e15d9124cbc66d2271ef83f66010ec6320d0f103aa60896be129a0cf4e4fd24cad14cc02bf0e87dee84319915050fe7ca9553b6d399ebc5726bd445e5bd7b9da010ca088870ecd346862177bc6f918d83a431c48bf2facc41bad7251f91b7d60ad43dab75e4490659786615b796c30f7e1cbeaba66a8ef1e04663128219329e6fc06a8c7f6dd7ba212d6c6b31e5a6c35fa287b6b1f10409a420b40db1bd866bd6d9c7520360edb457e15297f9ecc68e2a42b5edafb86fbb52543c898df7e776756f7a388b132db54ce63df5acb28f8a472fd16e79917c59d627e94509945d45f9524ff1a9c12c240c49f723420499c06c4efdab01b18ea1bb15f69af114dc4f3f9068a7e1b78d251cbf4e60d91180eec5298339059e10a3973ef2b2c5122200fb59e4d60e5255448fe02c258c7afbf606e985d33ecebd4c7a6d4068f0daf2a4da96545f2aa1d65718b3aafde67b128191620d8fec1ea2349871c3aae489cfe7d9bc1f4043e706c99b04d955cd99a4ae6c82da21e4c80dea95e9ab5a56b9d3d235712056f424fa5ea1c169d84a0e5b1f5d1ee5abf0dd360470c3efc9d7c241dbcb31fe4845b30ed4869294f6757af70c99c481c6820dce5dd4866e810d03da56f67ebbaa6ab21d3359413f90d4ed95700089875616e5333570107258f02a1c4ca2eeec1b9df0e47fa3776c224821403bc595f0274fc9f7540364b96ab6eb72607a5372a6947f93e079ec7ae1bf0d2d8ac6acda8692856c51219d9d64a650385e73fbd1c7088a61c031a2f946fae964023dfe982f91e12daa3edd3516d6ff25e71fa981eb4dd8cf9ef2c1bcdca42746b3014ab87ff66ec62e6d424e8a12224d60977a844a3c42f0d95380b129bbe34ff1f4d8cc49f64c7db4ec2511ce3acace6f8fa9530622cd35ec6ec772c05f6691ae67993803f0effa6cca76174f95c5ac0b3027276e2ceda08c8aa24bac29694fd58ffcf67a4b307f508f6dc7b4883d4101d0d77ff7bacb0417d63a9c1617d0135863b51a5214f9b3fd79cc63b1aa178c05406b15f6c3eeaf5462ec7ba43ea6ed6bef2a959e1ca20a889057752ddfce8d17058cf7f3883d7e4f4565fcb3478d79aca32041226ef43ae634b675f8d9a68392fa40d55599b03ab9475f833a2735ea8f7e455a4b5884d447f81af7f2db483f6d548df041f0be0529e435f0871b60cf82260d44839cdc8a7ab4e96cbde18066765379f2aa278393e2ddbba317aba311029a28e389d84cf688084643763bedf44b5be9bedaac4b910da5085aae4936c0d549157c81c4d019a059bf20739b420b7c34cbe862b5d737132065740dcaa8473d6d3da7038cdf1238fe4e5d2025f95129919f4d4a6151fa0a5558b3855e3cdbad84bb0954bfb8a59a018184f2dffba248c9941c1e870f4855ced394adc00526e924360716c409f3102852a643668072b89ddd72eb412b76912b354dea98d6cb26eb975379f1568b52c5b3e709c721d4701b6edaabe47c27842764474ae67f26842c8196ec4accf5bac9b9b8836443728d6e5a50f83c3cf477bf543d30242b83f50354a5301be812189ead90a7729dc139e5a8b3d90320bd04672fdb2bbb0f1b3d232df0852f83e4b5806b105977d3f1850e6be1cc144a1d283af18d3e6fafe02239f40940cbd9f5cfeada1f21ad6f1dd07ecaf0ca6a946f0c72068bd49ad2050cc6fd3beec18bf5a4556eff86300818eeb7f187d3567da865c9af78090375fb46025de93396ef16d63f7726ee501c9c6b56d7b12c21f59514518441d45971aa19d201a81cfe817c12dbe6233a736c0067004ba433f474868dc273fedfbcb665f2a59457ce1bb07bf5fee2e9d617e9d89c0e6b8f0e44f57e518d61ca0ed9da7a483535b0ef95a879a1509b25f152728476ef42785adaea215897455df73a41af61b803f87d9a46c584df24721d0eb1429981fb583d6d9a27677e8b50e824ec3a746a26cb22cd3e06f1badd28b4c23ea2157e08839a456a4d2c1513a5479f62537fca68b73a40f882053322f468869f1d44a02a460a0ed103d9f5db613a926cf143edc35e9d96f50f13f5eeb46d5501586886b9a75372657ec35008869b39411ab3096b8b60204d05b0bc0d25b3f6f7c1472fb138858f27ea34f5cac168e5cdf1e570c369860c3ba5eec381f7ed2654edeed5ca645de435949c884fe3ede2baa97d94a75f210316bd84cc1f9424c90ddff791f2dec91005cad15ea2683802f3975d4707b04eb6fa9f8fe30254a9fa8c2343dc414447eeee0e4874f538e5f6895ba8acf6694c54ce0a49ab4d88b477ad0a4d4f3aef499910d7e0ca1d1f1af3d9d82e20d5754993f8ecfd1b5585180a095c55d344d2afaef4c23e65f2280f33e8b2ce9714f4de574b1506d5cd97098b11ffc1ca2b50f37735704169706318940a841099556a51e220e992778682d3c863a6d6fc919c51be53f97643d10a6f6c704e8b86774ec6e7571aff3e70620e7f2ac6292eeb379faa4d6530b2494b8553d729fb4b3901f45f74e7c795fdbbb2df42e170a0718dd41a6b3827f54f5692bf3b61a4dc01b935e9d9e9ea0b77d623f5fb99516f1c8ab5aeab8c77344428a7aab443e2457b3675a836ec0a488590b8549f5efe350833d2345c0ef10424e6be1ba4960545745e42c95b00da3ea82fac4206e05bf4412a5db0db4bccbdaa2d357addafbfd196f90b0a05d6c6c3a3f33704cc65d689afe3ba4f025a6a6ee5546ee27441818b94247858189612d98be38a81b85f92110f6fcfc888a3bc4c33b4c15b2a83a7d5c298fb3a4cca4f65eb9d61c9d6a4161be192d7ec1988581dd86eb7c002d8110db7b4699fc545a4436c95dcae1e85cc841a11942124732002e3b80160d2aa9081d62578883c52a863a631c224711bda25913300c5535eeda2f7384e2fc086df340f0f24c9298f3e06a9bcbba41793f86e73552b9b58ad49f292130f6510bea2ccea8cbaf2a46c488459f81faf6c0b63a38df0b59d94e2da846de5b5d95674cfb1ae9e300dda4ad2730c020d12f9837bcfb9d232785df7892a22960266eb74850353622d747e6017ec51cef6334ac541a2b0501900c4e665693bec062aac29bcee49ee9aa4ee823d6cb38f5eeb05c81dd2cfdc135656611b080261ea03dd610c887a5bc48dc2d24ef9d4f82c7e5577c2d2c50c320c022d846c84f6813ba1f4c4eb813b26d0c90693ada2e078b11c58bb55e067636e5203bba67b7bc9c550dd2cd178e878df463b58eda9ed3313509464bbe2c9acbe087dbc28c6bf45dcb881b53f9fe31521aee5c66425db00b1d6a77370d060bd78c29fc31f0119292be2931a7fad4a4c82a657dbba5490923a2b39dd9df48a26f867e51e91dfef5bf6c967569ca572502a855c88d84020c508bac725414f72b8ab45f23021c9aec14874ae6f7d88efcc1c5248030100468c0e004ce3a19e0910d8f0e5945c14f969ba873d1abcd925f84ffccf3eeb09f44095899a6ec5221c22f6b3df966253619af3711b0d923102957e5720afc327beb3e0f439654db2d80cafd99f9ff9271a630a2e055959dbc0064712c8f1386fbc0b5da1888e74df4b8a392b337578f201d2fcf2add44f7a58bf7c0464dd3799f5fd7214f2fe3c3138a0f182f2879ca27b486d97087a2754ddf3e97847e3a7c638891c80ce9da6c277df2eba0703aed2dd9b1389e7a53b3549f082ce76e32fa4edc737b1af173481417b6105d6617a944357ab08f283d417104828d2c47", 0x1001}], 0x1) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usbip_server_init(0x5) r3 = syz_io_uring_setup(0x42e6, &(0x7f0000000340)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) read$hidraw(r1, &(0x7f00000003c0)=""/140, 0x8c) accept4$tipc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) io_uring_enter(r3, 0x7330, 0x0, 0x0, 0x0, 0x0) 403.061116ms ago: executing program 3 (id=1801): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=@srh={0x2b, 0x0, 0x4, 0x0, 0x8, 0x10, 0x6}, 0x8) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x93}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @mcast1, 0x10000}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="c268ea3522ff423e98e142a518c3a56cb1f6cfde3e3ee8ea6bfb1337d03c02877dd8b3851b8c827f0aa14c4ef2a6c29d26f2609519107e76c8", 0x39}, {&(0x7f00000000c0)="782cf74be98c1446b2b5e0cb78b3179929c2ad7f1b2d60002f79b09db73564e03d0c3690e065a651e1fdfdf72ddda048318fcff65396ac315eb646ece4ba30cf8f4d9ac851a4f295ca42128607746776172a56d76cd13fbf549173f0276126b49b0217375a5ed284e537251e4a7149192653303493080f3fb8287e660210a645c693ae87ac3f6dde855b94687450b33b0239a59a0bc81080d7409c9e09bf5b8b4065fe9ec329654c729c17dc73dbb76419", 0xb1}], 0x2, &(0x7f0000000240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dstopts={{0x90, 0x29, 0x37, {0x29, 0xf, '\x00', [@generic={0x7, 0x5c, "68e8364041423cc6d17ba3798d26447ffa3bb27af0990f497040c71cb23f6db748046eedbc97b85574f62c469dca07fb058dcba976c49fe9c5e2bcaf659935ee969e2c9f6fc6f2fa55c508e55908a0a4af9e9226b7eedcc84e373f6b"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x1, [0x8000000000000000, 0x5]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x2, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts={{0x140, 0x29, 0x36, {0x2b, 0x24, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x39d, [0x0]}}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x2b}, @pad1, @generic={0x86, 0xb9, "1bc6f8715770ba87a79558f1205bbb1f31cdcb0259b60230de8b0373f81ad7f65b495997f49a0bb192e9d083b13249010bbfd794291ab3c01aad51f2ec687cf8a4aa3058a6961a7dff5177c4821e2a218574eab1e2e8ff763e4dec64d0018ffb4225c68b1836388f8efaad36acbd3cd51f42568a5a94a128ac75de20724f72ea8e8870d08e2a9fe6ed3774685c07a06ebbe9353b5b7ba1261d08cbb15008762430a9f16b75c11aeebc9cfbc117d61ed478a91a6f02dabf0dd8"}, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x9, [0x10, 0x3, 0x6, 0x416, 0x7, 0xb9b, 0x1, 0x6]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x298}}], 0x1, 0x4001) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=@srh={0x2b, 0x0, 0x4, 0x0, 0x8, 0x10, 0x6}, 0x8) (async) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4008000) (async) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x93}, 0x8) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) (async) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @mcast1, 0x10000}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="c268ea3522ff423e98e142a518c3a56cb1f6cfde3e3ee8ea6bfb1337d03c02877dd8b3851b8c827f0aa14c4ef2a6c29d26f2609519107e76c8", 0x39}, {&(0x7f00000000c0)="782cf74be98c1446b2b5e0cb78b3179929c2ad7f1b2d60002f79b09db73564e03d0c3690e065a651e1fdfdf72ddda048318fcff65396ac315eb646ece4ba30cf8f4d9ac851a4f295ca42128607746776172a56d76cd13fbf549173f0276126b49b0217375a5ed284e537251e4a7149192653303493080f3fb8287e660210a645c693ae87ac3f6dde855b94687450b33b0239a59a0bc81080d7409c9e09bf5b8b4065fe9ec329654c729c17dc73dbb76419", 0xb1}], 0x2, &(0x7f0000000240)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dstopts={{0x90, 0x29, 0x37, {0x29, 0xf, '\x00', [@generic={0x7, 0x5c, "68e8364041423cc6d17ba3798d26447ffa3bb27af0990f497040c71cb23f6db748046eedbc97b85574f62c469dca07fb058dcba976c49fe9c5e2bcaf659935ee969e2c9f6fc6f2fa55c508e55908a0a4af9e9226b7eedcc84e373f6b"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x1, [0x8000000000000000, 0x5]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x0, 0xa, 0x2, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hopopts={{0x140, 0x29, 0x36, {0x2b, 0x24, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x8, 0x39d, [0x0]}}, @ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x2b}, @pad1, @generic={0x86, 0xb9, "1bc6f8715770ba87a79558f1205bbb1f31cdcb0259b60230de8b0373f81ad7f65b495997f49a0bb192e9d083b13249010bbfd794291ab3c01aad51f2ec687cf8a4aa3058a6961a7dff5177c4821e2a218574eab1e2e8ff763e4dec64d0018ffb4225c68b1836388f8efaad36acbd3cd51f42568a5a94a128ac75de20724f72ea8e8870d08e2a9fe6ed3774685c07a06ebbe9353b5b7ba1261d08cbb15008762430a9f16b75c11aeebc9cfbc117d61ed478a91a6f02dabf0dd8"}, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x9, [0x10, 0x3, 0x6, 0x416, 0x7, 0xb9b, 0x1, 0x6]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}], 0x298}}], 0x1, 0x4001) (async) 396.191602ms ago: executing program 3 (id=1802): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r1, r0}}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) getgroups(0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0, 0xee01]) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2, &(0x7f0000000480)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}], [{@uid_eq={'uid', 0x3d, r10}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/input/event#\x00'}}, {@flag='mand'}]}}) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x1, &(0x7f0000000080)=[r3, r0], 0x2, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) 338.267822ms ago: executing program 3 (id=1803): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') mq_open(&(0x7f0000000140)='s(\x00', 0x40, 0x21, &(0x7f00000001c0)={0x6, 0x7ff, 0xa4b, 0xaa}) read$FUSE(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000407900060000000000000109022400010000b003090400fc010385f4cb0c2613d23dc84947"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="fe0f0000e000030000000000000000000000000008"], 0x38}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x20}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000403810b61200000004000109022400f9ffffff64090400000103000300092100000001220700090581030002000004"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000440)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="002348000000480e67f5d10d3d3a1b192dbc769c3d36e5c8221cb23d6067a45ff5f9af270268d182b177b068ea183b5c7210a43403710179e86c5cbf44f4aabe28"], 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r4, 0x7f}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 59.270377ms ago: executing program 1 (id=1804): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3b94, &(0x7f0000000180)={0x48}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0x3, 0x19}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6a11b4dcdbf526d420000000", @ANYRES16=r5, @ANYBLOB="01002dbd700000000000220000000c00018008000100", @ANYRES32=r7, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 1 (id=1805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff34000480300001800b00010074617267657400002000028008000100534554000c00030000000000006b7e9208000240000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xc8, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x58}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "60826ba24a"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "44fb1b9905e853cc76c419fb69"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "709d8d2edf"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x48, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0x5, 0x4, "a3"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9885d91c3f"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "86cee1030e"}]}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "0d0407c20f4b288755d7"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x1) kernel console output (not intermixed with test programs): [ 577.161585][ T5928] usb 3-1: SerialNumber: syz [ 577.435674][T11686] syzkaller1: entered promiscuous mode [ 577.451193][T11686] syzkaller1: entered allmulticast mode [ 578.082498][ T5832] usb 1-1: USB disconnect, device number 106 [ 578.200907][T11683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1437'. [ 578.269133][T11683] syzkaller1: entered promiscuous mode [ 578.553973][T11683] syzkaller1: entered allmulticast mode [ 578.803301][T11699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 579.784151][T11722] hub 9-0:1.0: USB hub found [ 579.793604][T11722] hub 9-0:1.0: 1 port detected [ 579.886504][ T5928] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 579.955800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cce4400: rx timeout, send abort [ 579.966305][ T5928] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 579.981261][ T5928] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 580.000005][ T5928] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 580.059115][ T5928] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 580.111706][ T5928] usb 3-1: found format II with max.bitrate = 3, frame size=7 [ 580.125126][ T5928] usb 3-1: selecting invalid altsetting 0 [ 580.150173][ T5928] usb 3-1: selecting invalid altsetting 0 [ 580.171186][ T5920] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 580.217210][ T5928] usb 3-1: USB disconnect, device number 89 [ 580.351552][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 580.461121][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cce4800: rx timeout, send abort [ 580.471199][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cce4400: abort rx timeout. Force session deactivation [ 580.561615][ T8471] udevd[8471]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.722633][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 580.722651][ T30] audit: type=1400 audit(1766146787.622:783): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=11725 comm="syz.2.1445" [ 580.969336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807cce4800: abort rx timeout. Force session deactivation [ 582.039979][ T5832] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 582.227397][ T5832] usb 2-1: Using ep0 maxpacket: 16 [ 582.254984][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.276189][ T5832] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 582.314587][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.345093][ T5832] usb 2-1: config 0 descriptor?? [ 582.777502][ T5832] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0026/input/input56 [ 582.922129][ T5832] creative-sb0540 0003:041E:3100.0026: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 582.976330][ T5841] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 582.999400][ T5832] usb 2-1: USB disconnect, device number 75 [ 583.037695][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1449'. [ 583.502525][T11752] block device autoloading is deprecated and will be removed. [ 583.797730][T11748] fido_id[11748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 584.131425][ T5932] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 584.253319][ T5920] usb 4-1: unable to get BOS descriptor or descriptor too short [ 584.274611][ T5920] usb 4-1: no configurations [ 584.279248][ T5920] usb 4-1: can't read configurations, error -22 [ 584.343106][ T5932] usb 2-1: config 0 has an invalid interface number: 33 but max is 0 [ 584.369055][ T5932] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.380017][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1453'. [ 584.399663][ T5932] usb 2-1: config 0 has no interface number 0 [ 584.419943][ T5932] usb 2-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 584.461182][ T5932] usb 2-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.511866][ T5932] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 584.535372][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.559897][ T5932] usb 2-1: Product: syz [ 584.574422][ T5932] usb 2-1: Manufacturer: syz [ 584.579065][ T5932] usb 2-1: SerialNumber: syz [ 584.613895][ T5932] usb 2-1: config 0 descriptor?? [ 584.630580][T11755] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 584.643459][ T5932] hdpvr 2-1:0.33: Could not find bulk-in endpoint [ 584.650005][ T5932] hdpvr 2-1:0.33: probe with driver hdpvr failed with error -12 [ 584.859394][ C0] hrtimer: interrupt took 18793 ns [ 584.862890][ T30] audit: type=1326 audit(1766146791.792:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 584.922671][ T5927] usb 2-1: USB disconnect, device number 76 [ 584.970679][ T30] audit: type=1326 audit(1766146791.822:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.053898][ T30] audit: type=1326 audit(1766146791.822:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.080611][ T30] audit: type=1326 audit(1766146791.822:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.117315][ T30] audit: type=1326 audit(1766146791.822:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.164886][ T30] audit: type=1326 audit(1766146791.822:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.210044][ T30] audit: type=1326 audit(1766146791.822:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.291156][ T30] audit: type=1326 audit(1766146791.822:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.363869][ T30] audit: type=1326 audit(1766146791.822:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11754 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7b6bd8f749 code=0x7ffc0000 [ 585.722714][ T5920] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 585.740901][T11799] netlink: 'syz.3.1464': attribute type 1 has an invalid length. [ 585.851161][ T5932] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 585.892877][ T5920] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 585.901028][ T5920] usb 3-1: config 0 has no interface number 0 [ 585.917747][ T5920] usb 3-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 585.951309][ T5920] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.971431][ T5927] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 585.981462][ T5920] usb 3-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.007042][ T5920] usb 3-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 586.030764][ T5932] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 586.040172][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.041700][ T5920] usb 3-1: config 0 interface 16 has no altsetting 0 [ 586.060261][ T5932] usb 2-1: Product: syz [ 586.064759][ T5920] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 586.064787][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.068081][ T5920] usb 3-1: config 0 descriptor?? [ 586.102623][ T5932] usb 2-1: Manufacturer: syz [ 586.107513][ T5932] usb 2-1: SerialNumber: syz [ 586.127346][ T5932] usb 2-1: config 0 descriptor?? [ 586.151242][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 586.161183][ T5927] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 586.170262][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.183217][ T5932] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 586.214181][ T5927] usb 1-1: config 0 descriptor?? [ 586.424428][ T5832] usb 1-1: USB disconnect, device number 107 [ 586.557264][ T5920] uclogic 0003:5543:004D.0027: interface is invalid, ignoring [ 586.593842][ T5932] input: sonixb as /devices/platform/dummy_hcd.1/usb2/2-1/input/input57 [ 586.710466][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 586.757610][ T5832] usb 3-1: USB disconnect, device number 90 [ 586.799310][ T5920] usb 2-1: USB disconnect, device number 77 [ 587.338249][T11822] usb usb8: usbfs: process 11822 (syz.0.1470) did not claim interface 0 before use [ 587.499881][T11822] xt_connbytes: Forcing CT accounting to be enabled [ 587.506998][T11822] Cannot find del_set index 1 as target [ 587.639706][T11829] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 587.639779][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1474'. [ 587.657189][T11829] bond4: (slave lo): Enslaving as a backup interface with an up link [ 587.687244][T11829] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 587.721345][ T5832] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 588.047685][ T5832] usb 4-1: Using ep0 maxpacket: 32 [ 588.056659][ T5832] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 588.069272][ T5832] usb 4-1: config 0 has no interface number 0 [ 588.081623][ T5832] usb 4-1: config 0 interface 12 has no altsetting 0 [ 588.090570][ T5832] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 588.120204][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.140467][ T5832] usb 4-1: Product: syz [ 588.150595][ T5832] usb 4-1: Manufacturer: syz [ 588.160735][ T5832] usb 4-1: SerialNumber: syz [ 588.187992][ T5832] usb 4-1: config 0 descriptor?? [ 588.261200][ T7899] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 588.411538][ T5920] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 588.423276][ T7899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.441808][ T7899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.465838][ T7899] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 588.477574][ T7899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.488208][ T7899] usb 3-1: SerialNumber: syz [ 588.561243][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 588.569102][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.586565][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.596036][ T5920] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 588.616519][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.616767][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 588.627574][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.637005][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 588.656044][ T5920] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 588.665746][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.717796][ T7899] usb 3-1: 0:2 : does not exist [ 588.726062][ T5920] hub 2-1:1.0: bad descriptor, ignoring hub [ 588.733212][ T5832] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 588.744265][ T7899] usb 3-1: unit 5: unexpected type 0x0b [ 588.752404][ T5920] hub 2-1:1.0: probe with driver hub failed with error -5 [ 588.760099][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 588.765562][ T5832] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 588.776299][ T5832] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 588.793009][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 588.798365][ T5920] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 588.818627][ T7899] usb 3-1: USB disconnect, device number 91 [ 588.824841][ T5832] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 588.867257][ T5832] usb 4-1: USB disconnect, device number 97 [ 588.913859][T11844] netlink: 'syz.1.1477': attribute type 3 has an invalid length. [ 588.929714][ T8487] udevd[8487]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.051711][T11855] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 589.071889][ T5932] usb 2-1: USB disconnect, device number 78 [ 589.851270][ T5832] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 590.091308][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 590.099990][ T5832] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 590.393305][ T5832] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 590.443496][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 590.455076][ T5832] usb 2-1: config 1 has no interface number 0 [ 590.466605][ T5832] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.486869][ T5832] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 590.508472][ T5832] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 590.531036][ T5832] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 590.546732][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.581705][ T7899] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 590.595807][T11874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.628189][ T5832] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 590.866959][T11874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 590.926529][ T5832] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 591.321183][ T1168] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 591.496449][ T1168] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 591.514654][ T1168] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 591.546605][ T1168] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 591.589062][ T5932] usb 2-1: USB disconnect, device number 79 [ 591.603832][ T1168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.622015][ T5932] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 591.650811][ T1168] usb 1-1: Product: syz [ 591.674510][ T1168] usb 1-1: Manufacturer: syz [ 591.694435][ T1168] usb 1-1: SerialNumber: syz [ 591.712147][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 591.723617][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 591.726626][ T1168] usb 1-1: config 0 descriptor?? [ 591.738079][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.748003][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.758769][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.797053][T11889] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 591.817764][T11889] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 591.847459][ T1168] option 1-1:0.0: GSM modem (1-port) converter detected [ 591.889060][ T1168] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 592.266034][ T1168] usb 1-1: USB disconnect, device number 108 [ 592.307823][ T1168] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 592.332807][T11898] netlink: 'syz.1.1494': attribute type 11 has an invalid length. [ 592.338517][T11894] chnl_net:caif_netlink_parms(): no params data found [ 592.357538][ T1168] option 1-1:0.0: device disconnected [ 592.689699][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.709611][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.722855][T11894] bridge_slave_0: entered allmulticast mode [ 592.742958][T11894] bridge_slave_0: entered promiscuous mode [ 592.760514][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.795335][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.821840][T11894] bridge_slave_1: entered allmulticast mode [ 592.838549][T11894] bridge_slave_1: entered promiscuous mode [ 593.020268][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.064169][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.328773][T11923] fuse: Unknown parameter '' [ 593.334592][T11923] fuse: Unknown parameter 'rool' [ 593.413958][T11894] team0: Port device team_slave_0 added [ 593.434600][T11894] team0: Port device team_slave_1 added [ 593.737047][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.759363][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.801151][ T5841] Bluetooth: hci5: command tx timeout [ 594.008376][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.082564][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.103953][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 594.162016][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.557925][T11894] hsr_slave_0: entered promiscuous mode [ 594.583108][T11894] hsr_slave_1: entered promiscuous mode [ 594.597354][T11894] debugfs: 'hsr0' already exists in 'hsr' [ 594.616347][T11894] Cannot create hsr debugfs directory [ 594.651325][ T5832] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 594.811218][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 594.817990][ T5832] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.852305][ T5832] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.882523][ T5832] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 594.901917][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.911372][ T5832] usb 1-1: Product: syz [ 594.922284][ T5832] usb 1-1: Manufacturer: syz [ 594.936689][ T5832] usb 1-1: SerialNumber: syz [ 594.976004][ T5832] usb 1-1: config 0 descriptor?? [ 595.025878][ T5832] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 595.236200][T11946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 595.263654][ T5832] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 595.318816][ T5832] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 595.366035][ T5832] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 595.439277][T11947] fuse: Bad value for 'fd' [ 595.450097][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1503'. [ 595.492238][ T5832] usb 1-1: USB disconnect, device number 109 [ 595.747116][T11894] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 595.780916][T11894] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 595.813769][T11894] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 595.830245][T11894] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.883427][ T5841] Bluetooth: hci5: command tx timeout [ 596.661395][ T1168] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 596.736250][T11894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.844381][ T1168] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 596.853853][ T1168] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 596.862638][T11894] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.888163][ T1168] usb 1-1: config 0 has no interface number 0 [ 596.914786][ T1168] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 596.916249][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.932008][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.961115][ T1168] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 597.022208][ T1168] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 597.064294][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.071505][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.102370][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.229947][ T1168] usb 1-1: config 0 descriptor?? [ 597.363534][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.502413][ T1168] usb 1-1: USB disconnect, device number 110 [ 597.538891][T11894] veth0_vlan: entered promiscuous mode [ 597.570086][T11894] veth1_vlan: entered promiscuous mode [ 597.659561][T11894] veth0_macvtap: entered promiscuous mode [ 597.683749][T11894] veth1_macvtap: entered promiscuous mode [ 597.731710][ T5920] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 597.748982][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.761651][ T5832] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 597.789677][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.831544][T11357] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.842132][T11357] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.853002][T11357] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.877289][T11357] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.921266][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 597.931381][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 597.939556][ T5920] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 597.949868][ T5832] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 597.970305][ T5920] usb 3-1: config 0 has no interface number 0 [ 597.976848][ T5841] Bluetooth: hci5: command tx timeout [ 597.991164][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.012946][ T5920] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 598.026783][ T5832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.042057][ T5920] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 598.077523][ T5832] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.093267][ T5920] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 598.111371][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.134250][ T5920] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 598.152554][ T5832] usb 4-1: Product: syz [ 598.165721][ T5832] usb 4-1: Manufacturer: syz [ 598.177883][ T5920] usb 3-1: Product: syz [ 598.199954][ T5832] usb 4-1: SerialNumber: syz [ 598.213046][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.221267][ T5920] usb 3-1: Manufacturer: syz [ 598.244678][ T5920] usb 3-1: SerialNumber: syz [ 598.266393][ T5920] usb 3-1: config 0 descriptor?? [ 598.283842][ T5920] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 598.291600][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.333538][T11357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.344710][ T5920] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 598.368692][T11357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.386842][ T5920] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 598.430958][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 598.462889][ T5832] usb 4-1: 0:2 : does not exist [ 598.486548][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.511503][ T5920] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 598.523436][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.541453][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 598.562698][ T5920] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 598.591313][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 598.627913][ T5920] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 598.661465][ T5920] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 598.672319][T11968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.711666][T11968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.728426][ T5920] usb 3-1: USB disconnect, device number 93 [ 598.742416][ T5920] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 598.921759][ T5920] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 599.022388][ T5832] usb 4-1: USB disconnect, device number 98 [ 599.034586][ T5920] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 599.144686][ T5920] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 599.235490][ T8592] udevd[8592]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.235890][ T5920] keyspan 3-1:0.107: device disconnected [ 599.380512][T11997] loop8: detected capacity change from 0 to 7 [ 599.393269][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.402879][ C1] buffer_io_error: 23 callbacks suppressed [ 599.402889][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.426769][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.436468][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.445864][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.455538][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.481265][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.490910][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.564207][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.573945][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.619003][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.628682][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.671963][T12004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1517'. [ 599.701134][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.710871][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.718834][T11997] ldm_validate_partition_table(): Disk read failed. [ 599.732841][T12006] usb usb8: usbfs: interface 0 claimed by usbfs while 'syz.0.1517' sets config #1 [ 599.790482][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.800167][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.811129][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.820756][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.829881][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 599.839531][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 599.861418][T11997] Dev loop8: unable to read RDB block 0 [ 599.905594][T12010] FAULT_INJECTION: forcing a failure. [ 599.905594][T12010] name failslab, interval 1, probability 0, space 0, times 0 [ 599.922911][T11997] loop8: unable to read partition table [ 599.931562][T11997] loop8: partition table beyond EOD, truncated [ 599.953396][T11997] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 599.973491][T12010] CPU: 1 UID: 0 PID: 12010 Comm: syz.2.1519 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.973521][T12010] Tainted: [L]=SOFTLOCKUP [ 599.973528][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.973539][T12010] Call Trace: [ 599.973547][T12010] [ 599.973555][T12010] dump_stack_lvl+0x189/0x250 [ 599.973589][T12010] ? __pfx____ratelimit+0x10/0x10 [ 599.973607][T12010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.973628][T12010] ? __pfx__printk+0x10/0x10 [ 599.973652][T12010] ? __lock_acquire+0x6b6/0x2cf0 [ 599.973681][T12010] should_fail_ex+0x414/0x560 [ 599.973712][T12010] should_failslab+0xa8/0x100 [ 599.973735][T12010] kmem_cache_alloc_noprof+0x88/0x710 [ 599.973758][T12010] ? __netlink_lookup+0xbd/0x8a0 [ 599.973781][T12010] ? skb_clone+0x212/0x3a0 [ 599.973807][T12010] skb_clone+0x212/0x3a0 [ 599.973832][T12010] __netlink_deliver_tap+0x404/0x850 [ 599.973866][T12010] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.973889][T12010] netlink_deliver_tap+0x19c/0x1b0 [ 599.973912][T12010] netlink_unicast+0x7fa/0x9e0 [ 599.973941][T12010] ? __pfx_netlink_unicast+0x10/0x10 [ 599.973963][T12010] ? netlink_sendmsg+0x642/0xb30 [ 599.973982][T12010] ? skb_put+0x11b/0x210 [ 599.974005][T12010] netlink_sendmsg+0x805/0xb30 [ 599.974036][T12010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.974061][T12010] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.974085][T12010] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.974102][T12010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.974125][T12010] __sock_sendmsg+0x21c/0x270 [ 599.974153][T12010] ____sys_sendmsg+0x505/0x820 [ 599.974180][T12010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.974211][T12010] ? import_iovec+0x74/0xa0 [ 599.974235][T12010] ___sys_sendmsg+0x21f/0x2a0 [ 599.974259][T12010] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.974287][T12010] ? rcu_read_lock_any_held+0xb3/0x120 [ 599.974334][T12010] ? __fget_files+0x2a/0x420 [ 599.974355][T12010] ? __fget_files+0x3a0/0x420 [ 599.974386][T12010] __x64_sys_sendmsg+0x19b/0x260 [ 599.974409][T12010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.974439][T12010] ? __pfx_ksys_write+0x10/0x10 [ 599.974461][T12010] ? do_syscall_64+0xbe/0xf80 [ 599.974483][T12010] do_syscall_64+0xfa/0xf80 [ 599.974502][T12010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.974525][T12010] ? clear_bhb_loop+0x60/0xb0 [ 599.974547][T12010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.974569][T12010] RIP: 0033:0x7fa4bad8f749 [ 599.974586][T12010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.974601][T12010] RSP: 002b:00007fa4bbb56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.974620][T12010] RAX: ffffffffffffffda RBX: 00007fa4bafe5fa0 RCX: 00007fa4bad8f749 [ 599.974634][T12010] RDX: 0000000000008084 RSI: 0000200000000080 RDI: 0000000000000003 [ 599.974646][T12010] RBP: 00007fa4bbb56090 R08: 0000000000000000 R09: 0000000000000000 [ 599.974657][T12010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.974669][T12010] R13: 00007fa4bafe6038 R14: 00007fa4bafe5fa0 R15: 00007fa4bb10fa28 [ 599.974699][T12010] [ 600.328191][ T5841] Bluetooth: hci5: command tx timeout [ 600.468221][T12013] syzkaller0: entered promiscuous mode [ 600.561438][T12013] syzkaller0: entered allmulticast mode [ 601.011243][T10952] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 601.273061][T10952] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 601.321193][ T5927] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 601.341878][T10952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.371281][T10952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.381114][T10952] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 601.417887][T10952] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.521287][T10952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.567589][T10952] usb 3-1: config 0 descriptor?? [ 601.571144][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 601.620286][ T5927] usb 2-1: config 0 has no interfaces? [ 601.953063][ T5927] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00ab, bcdDevice=93.85 [ 601.964119][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.990906][ T5927] usb 2-1: Product: syz [ 602.019134][ T5927] usb 2-1: Manufacturer: syz [ 602.059561][ T5927] usb 2-1: SerialNumber: syz [ 602.108108][T10952] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 602.141555][ T5927] usb 2-1: config 0 descriptor?? [ 602.293076][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.341593][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.431984][ T5927] usb 3-1: USB disconnect, device number 94 [ 603.134629][T12042] fido_id[12042]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 603.770754][T12060] FAULT_INJECTION: forcing a failure. [ 603.770754][T12060] name failslab, interval 1, probability 0, space 0, times 0 [ 603.792642][T12060] CPU: 0 UID: 0 PID: 12060 Comm: syz.2.1532 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.792671][T12060] Tainted: [L]=SOFTLOCKUP [ 603.792678][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.792687][T12060] Call Trace: [ 603.792695][T12060] [ 603.792703][T12060] dump_stack_lvl+0x189/0x250 [ 603.792727][T12060] ? __pfx____ratelimit+0x10/0x10 [ 603.792745][T12060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.792765][T12060] ? __pfx__printk+0x10/0x10 [ 603.792788][T12060] ? __lock_acquire+0x6b6/0x2cf0 [ 603.792816][T12060] should_fail_ex+0x414/0x560 [ 603.792846][T12060] should_failslab+0xa8/0x100 [ 603.792870][T12060] kmem_cache_alloc_noprof+0x88/0x710 [ 603.792893][T12060] ? __netlink_lookup+0xbd/0x8a0 [ 603.792914][T12060] ? skb_clone+0x212/0x3a0 [ 603.792938][T12060] skb_clone+0x212/0x3a0 [ 603.792963][T12060] __netlink_deliver_tap+0x404/0x850 [ 603.792995][T12060] ? netlink_deliver_tap+0x2e/0x1b0 [ 603.793019][T12060] netlink_deliver_tap+0x19c/0x1b0 [ 603.793042][T12060] netlink_unicast+0x7fa/0x9e0 [ 603.793071][T12060] ? __pfx_netlink_unicast+0x10/0x10 [ 603.793089][T12060] ? netlink_sendmsg+0x642/0xb30 [ 603.793118][T12060] ? skb_put+0x11b/0x210 [ 603.793140][T12060] netlink_sendmsg+0x805/0xb30 [ 603.793168][T12060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.793191][T12060] ? aa_sock_msg_perm+0xf1/0x1b0 [ 603.793215][T12060] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.793232][T12060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.793253][T12060] __sock_sendmsg+0x21c/0x270 [ 603.793278][T12060] ____sys_sendmsg+0x505/0x820 [ 603.793304][T12060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.793332][T12060] ? import_iovec+0x74/0xa0 [ 603.793355][T12060] ___sys_sendmsg+0x21f/0x2a0 [ 603.793378][T12060] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.793404][T12060] ? rcu_read_lock_any_held+0xb3/0x120 [ 603.793449][T12060] ? __fget_files+0x2a/0x420 [ 603.793470][T12060] ? __fget_files+0x3a0/0x420 [ 603.793502][T12060] __x64_sys_sendmsg+0x19b/0x260 [ 603.793530][T12060] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.793567][T12060] ? do_syscall_64+0xbe/0xf80 [ 603.793590][T12060] do_syscall_64+0xfa/0xf80 [ 603.793609][T12060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.793627][T12060] ? clear_bhb_loop+0x60/0xb0 [ 603.793649][T12060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.793667][T12060] RIP: 0033:0x7fa4bad8f749 [ 603.793683][T12060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.793699][T12060] RSP: 002b:00007fa4bbb56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.793718][T12060] RAX: ffffffffffffffda RBX: 00007fa4bafe5fa0 RCX: 00007fa4bad8f749 [ 603.793732][T12060] RDX: 0000000000008084 RSI: 0000200000000080 RDI: 0000000000000003 [ 603.793744][T12060] RBP: 00007fa4bbb56090 R08: 0000000000000000 R09: 0000000000000000 [ 603.793755][T12060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.793767][T12060] R13: 00007fa4bafe6038 R14: 00007fa4bafe5fa0 R15: 00007fa4bb10fa28 [ 603.793797][T12060] [ 604.467896][T12059] syzkaller0: entered promiscuous mode [ 604.558694][T12059] syzkaller0: entered allmulticast mode [ 604.716108][T12063] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 604.942330][ T5920] usb 2-1: USB disconnect, device number 80 [ 605.021291][ T1168] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 605.191299][ T1168] usb 3-1: device descriptor read/64, error -71 [ 605.278517][T12070] netlink: 'syz.0.1536': attribute type 39 has an invalid length. [ 605.456117][ T1168] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 605.543108][ T5920] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 605.621213][ T1168] usb 3-1: device descriptor read/64, error -71 [ 605.711206][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 605.739092][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.748197][ T1168] usb usb3-port1: attempt power cycle [ 605.775947][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.806315][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 605.850061][ T5920] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 605.880591][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.914478][ T5920] usb 2-1: config 0 descriptor?? [ 606.001245][ T5927] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 606.101446][ T1168] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 606.122618][ T1168] usb 3-1: device descriptor read/8, error -71 [ 606.161365][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 606.169720][ T5927] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 606.208792][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 606.231853][ T5927] usb 4-1: config 0 has no interface number 0 [ 606.238008][ T5927] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 606.271868][ T5927] usb 4-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.354647][ T5920] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0029/input/input59 [ 606.361341][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 606.385295][ T5927] usb 4-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=7e.46 [ 606.394841][ T1168] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 606.427267][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.435876][ T1168] usb 3-1: device descriptor read/8, error -71 [ 606.477995][ T5927] usb 4-1: Product: syz [ 606.522762][ T5927] usb 4-1: Manufacturer: syz [ 606.527407][ T5927] usb 4-1: SerialNumber: syz [ 606.561465][ T5920] appleir 0003:05AC:8241.0029: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 606.562850][ T5927] usb 4-1: config 0 descriptor?? [ 606.591595][ T1168] usb usb3-port1: unable to enumerate USB device [ 606.623025][ T5920] usb 2-1: USB disconnect, device number 81 [ 606.644267][ T5927] HFC-S_USB 4-1:0.4: probe with driver HFC-S_USB failed with error -5 [ 606.868865][ T5927] usb 4-1: USB disconnect, device number 99 [ 607.047862][T12087] fido_id[12087]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 607.257752][T12084] syz.0.1538 (12084) used greatest stack depth: 17456 bytes left [ 608.729065][T12114] vim2m vim2m.0: vidioc_s_fmt queue busy [ 609.131182][ T5920] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 609.353161][ T5920] usb 3-1: Using ep0 maxpacket: 16 [ 609.403268][ T5920] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 609.411691][ T5920] usb 3-1: config 0 has no interface number 0 [ 609.451166][ T5920] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 609.491591][ T5920] usb 3-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 609.526136][ T5920] usb 3-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 609.561184][ T5920] usb 3-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 609.622734][ T5920] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 609.671176][ T5920] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 609.700344][ T5920] usb 3-1: Product: syz [ 609.754961][ T5920] usb 3-1: Manufacturer: syz [ 609.771190][ T5920] usb 3-1: SerialNumber: syz [ 609.787035][ T5920] usb 3-1: config 0 descriptor?? [ 609.810725][T12116] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 610.085069][ T5920] usb 3-1: USB disconnect, device number 99 [ 610.111705][T11973] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 610.271648][T11973] usb 4-1: device descriptor read/64, error -71 [ 610.541219][T11973] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 610.625477][T12135] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 610.671174][ T5832] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 610.741396][T11973] usb 4-1: device descriptor read/64, error -71 [ 610.767088][T12138] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 610.807589][T12138] netlink: 'syz.1.1549': attribute type 4 has an invalid length. [ 610.871229][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 610.877935][ T5832] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 610.901577][T11973] usb usb4-port1: attempt power cycle [ 611.061238][ T5832] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 611.069166][ T5832] usb 1-1: can't read configurations, error -61 [ 611.211406][ T5832] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 611.395296][T11973] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 611.448037][T11973] usb 4-1: device descriptor read/8, error -71 [ 611.491134][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 611.497333][ T5832] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 611.510724][ T5832] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 611.548125][ T5832] usb 1-1: can't read configurations, error -61 [ 611.606239][ T5832] usb usb1-port1: attempt power cycle [ 611.761193][T11973] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 611.828914][T11973] usb 4-1: device descriptor read/8, error -71 [ 611.951822][T11973] usb usb4-port1: unable to enumerate USB device [ 611.984016][ T5832] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 612.061798][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 612.075712][ T5832] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 612.144892][ T5832] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 612.181551][ T5832] usb 1-1: can't read configurations, error -61 [ 612.352059][ T5832] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 612.386105][ T5832] usb 1-1: Using ep0 maxpacket: 32 [ 612.402099][ T5832] usb 1-1: too many configurations: 216, using maximum allowed: 8 [ 612.427420][ T5832] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 612.452617][ T5832] usb 1-1: can't read configurations, error -61 [ 612.473273][ T5832] usb usb1-port1: unable to enumerate USB device [ 612.481168][ T1168] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 612.656276][T12154] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1559'. [ 612.668031][ T1168] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 612.686567][ T1168] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.712131][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 612.743586][ T1168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 612.771191][ T5832] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 612.827623][ T1168] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.851945][ T1168] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.879486][ T1168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.912712][ T1168] usb 2-1: config 0 descriptor?? [ 612.918566][T12148] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 612.942698][T12160] loop3: detected capacity change from 0 to 7 [ 612.951374][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 612.958711][ T5832] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 612.962396][T12160] Dev loop3: unable to read RDB block 7 [ 612.979897][ T5832] usb 3-1: config 0 has no interface number 0 [ 612.993698][T12157] loop5: detected capacity change from 0 to 7 [ 613.018650][ T5832] usb 3-1: config 0 interface 196 has no altsetting 0 [ 613.042437][ T5832] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 613.043961][ C1] blk_print_req_error: 10 callbacks suppressed [ 613.043978][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.069108][ T5832] usb 3-1: config 0 has no interface number 0 [ 613.081725][ T5832] usb 3-1: config 0 interface 196 has no altsetting 0 [ 613.103026][ T5832] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 613.121826][ T5832] usb 3-1: config 0 has no interface number 0 [ 613.127976][ T5832] usb 3-1: config 0 interface 196 has no altsetting 0 [ 613.133604][T12160] loop3: AHDI p1 p2 [ 613.139234][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.148939][ C1] buffer_io_error: 10 callbacks suppressed [ 613.148956][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.155485][ T5832] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 613.181457][ T5832] usb 3-1: config 0 has no interface number 0 [ 613.187626][ T5832] usb 3-1: config 0 interface 196 has no altsetting 0 [ 613.199393][T12160] loop3: partition table partially beyond EOD, truncated [ 613.211424][ T5832] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 613.219917][ T5832] usb 3-1: config 0 has no interface number 0 [ 613.226574][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.236289][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.241576][T12160] loop3: p1 start 1702000233 is beyond EOD, truncated [ 613.244673][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.251715][ T5832] usb 3-1: config 0 interface 196 has no altsetting 0 [ 613.260593][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.277682][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.279006][ T5832] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 613.287340][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.287935][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.301137][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 613.304338][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.333216][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.342869][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.351374][T12157] ldm_validate_partition_table(): Disk read failed. [ 613.351570][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.367611][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.375952][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.385641][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.395663][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 613.399150][ T5203] Dev loop3: unable to read RDB block 7 [ 613.405317][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.419127][ T5832] usb 3-1: Product: syz [ 613.423557][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 613.425146][ T1168] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 613.439407][T12157] Dev loop5: unable to read RDB block 0 [ 613.439546][ T5832] usb 3-1: Manufacturer: syz [ 613.472705][T12157] loop5: unable to read partition table [ 613.485629][ T1168] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 613.498259][ T5832] usb 3-1: SerialNumber: syz [ 613.506665][ T5203] loop3: AHDI p1 p2 [ 613.510608][ T5203] loop3: partition table partially beyond EOD, truncated [ 613.510878][T12157] loop5: partition table beyond EOD, truncated [ 613.544043][ T5832] usb 3-1: config 0 descriptor?? [ 613.551683][T12157] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 613.554250][ T5203] loop3: p1 start 1702000233 is beyond EOD, truncated [ 613.741893][T10952] usb 2-1: USB disconnect, device number 82 [ 613.901199][ T5928] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 614.016094][T12172] openvswitch: netlink: IP tunnel dst address not specified [ 614.040055][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1564'. [ 614.101699][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 614.125962][T12167] fido_id[12167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 614.210399][ T5928] usb 1-1: config 1 interface 0 has no altsetting 0 [ 614.227437][ T5928] usb 1-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 614.282346][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=245, SerialNumber=2 [ 614.313970][ T5928] usb 1-1: Product: syz [ 614.332354][ T5928] usb 1-1: Manufacturer: ф [ 614.355481][ T5928] usb 1-1: SerialNumber: syz [ 615.112503][ T5832] ipheth 3-1:0.196: Unable to find endpoints [ 615.231560][ T5832] usb 3-1: USB disconnect, device number 100 [ 615.634566][ T5832] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 615.822497][ T5832] usb 2-1: Using ep0 maxpacket: 32 [ 615.865045][ T5832] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 615.882977][T12192] bridge4: entered promiscuous mode [ 615.888228][T12192] bridge4: entered allmulticast mode [ 615.898227][ T5832] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 615.926063][ T5832] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 615.948447][T12192] team0: Port device bridge4 added [ 615.959987][ T5832] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 615.977388][T12193] bridge0: port 3(team0) entered blocking state [ 615.997788][ T5832] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 616.013536][T12193] bridge0: port 3(team0) entered disabled state [ 616.031732][T12193] team0: entered allmulticast mode [ 616.038096][ T5832] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 616.058908][T12193] team_slave_0: entered allmulticast mode [ 616.094475][ T5832] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 616.109417][T12193] team_slave_1: entered allmulticast mode [ 616.134417][T12193] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 616.144039][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.169489][ T5832] usb 2-1: config 0 descriptor?? [ 616.182304][T12193] team0: entered promiscuous mode [ 616.187776][T12193] team_slave_0: entered promiscuous mode [ 616.199188][T12193] team_slave_1: entered promiscuous mode [ 616.224771][T12193] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 616.240976][T12193] bridge0: port 3(team0) entered blocking state [ 616.247893][T12193] bridge0: port 3(team0) entered forwarding state [ 616.401731][ T5832] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 616.625755][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.642826][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.705262][ T5928] usbhid 1-1:1.0: can't add hid device: -71 [ 616.737339][ T5928] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 616.778307][ T5928] usb 1-1: USB disconnect, device number 115 [ 616.793712][ T5832] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 616.861256][T10952] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 616.961155][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 616.969062][ T5832] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 616.981250][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.034246][T10952] usb 6-1: config 0 has an invalid interface number: 10 but max is 0 [ 617.043057][ T5832] usb 3-1: config 0 descriptor?? [ 617.064604][T10952] usb 6-1: config 0 has no interface number 0 [ 617.082847][T10952] usb 6-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=1d.a7 [ 617.093707][T10952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.103590][T10952] usb 6-1: Product: syz [ 617.107952][T10952] usb 6-1: Manufacturer: syz [ 617.112812][T10952] usb 6-1: SerialNumber: syz [ 617.128861][T10952] usb 6-1: config 0 descriptor?? [ 617.141880][T10952] usb 6-1: Expected 3 endpoints, found: 0 [ 617.241233][ T5928] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 617.250392][T10952] usb 2-1: USB disconnect, device number 83 [ 617.275792][ T5832] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 617.300004][T10952] usblp0: removed [ 617.335527][ T5832] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 617.357840][ T5920] usb 6-1: USB disconnect, device number 2 [ 617.382923][ T5832] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 617.416444][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.456662][ T5928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 617.487184][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.521404][ T5928] usb 1-1: Product: syz [ 617.525618][ T5928] usb 1-1: Manufacturer: syz [ 617.527650][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.530222][ T5928] usb 1-1: SerialNumber: syz [ 617.611695][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.718397][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.782466][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.183157][ T5928] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 618.189256][ T5928] cdc_ncm 1-1:1.0: bind() failure [ 618.240283][ T5928] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 618.294912][ T5928] cdc_ncm 1-1:1.1: bind() failure [ 618.348399][ T5928] usb 1-1: USB disconnect, device number 116 [ 618.479687][T12235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.838129][T12247] syzkaller0: entered promiscuous mode [ 618.854525][T12247] syzkaller0: entered allmulticast mode [ 619.000581][T12249] loop4: detected capacity change from 0 to 8 [ 619.242395][T12249] Dev loop4: unable to read RDB block 8 [ 619.277292][ C1] blk_print_req_error: 11 callbacks suppressed [ 619.277312][ C1] invalid error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 619.293617][ C1] buffer_io_error: 10 callbacks suppressed [ 619.293635][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 619.425046][T12249] loop4: unable to read partition table [ 619.478492][T12249] loop4: partition table beyond EOD, truncated [ 619.492554][T12249] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 619.571186][T11973] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 619.815855][T11973] usb 1-1: Using ep0 maxpacket: 8 [ 619.892342][T11973] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 619.951981][T11973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 620.007074][T11973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 620.029316][T11973] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.048983][T11973] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 620.058551][T11973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.294416][T11973] usb 1-1: GET_CAPABILITIES returned 0 [ 620.320217][T11973] usbtmc 1-1:16.0: can't read capabilities [ 620.483472][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 620.517832][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.527283][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.527921][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1594'. [ 620.536389][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.546478][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.563852][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.572974][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.582083][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.595035][T12277] openvswitch: netlink: IPv4 tunnel dst address is zero [ 620.632359][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.641459][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.650521][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.659588][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.668652][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.795710][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.804837][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.813911][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.822974][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 620.964157][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.975906][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.017988][T11973] usb 1-1: USB disconnect, device number 117 [ 621.024209][ T5920] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 621.181746][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 621.189153][ T5920] usb 4-1: descriptor type invalid, skip [ 621.195995][ T5920] usb 4-1: descriptor type invalid, skip [ 621.204141][ T5920] usb 4-1: descriptor type invalid, skip [ 621.210037][ T5920] usb 4-1: descriptor type invalid, skip [ 621.218709][ T5920] usb 4-1: config 8 has an invalid interface number: 4 but max is 0 [ 621.236681][ T5920] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 621.249669][ T5920] usb 4-1: config 8 has no interface number 0 [ 621.256257][ T5920] usb 4-1: config 8 interface 4 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 621.267930][ T5920] usb 4-1: config 8 interface 4 altsetting 3 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 621.289248][ T5920] usb 4-1: config 8 interface 4 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 621.303006][ T5920] usb 4-1: config 8 interface 4 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 621.325095][ T5920] usb 4-1: config 8 interface 4 has no altsetting 0 [ 621.349555][ T5920] usb 4-1: New USB device found, idVendor=04da, idProduct=3904, bcdDevice=85.7c [ 621.361230][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.379506][ T5920] usb 4-1: Product: 㭽ൃ傳襨ຘ掅숦∎醓૟䒤똒亀硫崙ꬷ哷硆㎶쵾綶▁ᶟ뺠䏯珸䲢潯먲糝⌑뫱䁃⨪暁鲒‒桱ⷔ梇캕욼﫡腡䦇簆গ辳匋Ὥҵ᪆ၣ₦輡㉫ຝ껝ꗗ탼囆壓鏀넷섪跟⯲ὰ運녣垵▾䅨됔싸￵侐ࣔᄽ宱㽍緁㱙醙寒脂ꐑ哦暥쑯阻욫㷒橳欰䌊Ꝩ⹍㻻崕࢐ [ 621.448748][ T5920] usb 4-1: Manufacturer: ᐁ [ 621.461285][ T5920] usb 4-1: SerialNumber: 㐉 [ 621.480640][T12281] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 621.493125][ T5920] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 621.708509][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.737010][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.838784][T12299] blkio.reset_stats is deprecated [ 621.955521][T12275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.978823][T12275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.029026][ T1168] usb 4-1: USB disconnect, device number 104 [ 622.183141][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 622.183153][ T30] audit: type=1326 audit(1766146829.122:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.5.1603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eb038f749 code=0x0 [ 622.481199][ T5920] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 622.651269][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 622.692265][ T5920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.719689][T12308] loop5: detected capacity change from 0 to 7 [ 622.729469][ T5920] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 622.752029][T12308] Dev loop5: unable to read RDB block 7 [ 622.763897][ T5920] usb 6-1: config 1 has no interface number 1 [ 622.770055][ T5920] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.821251][T12308] loop5: unable to read partition table [ 622.837592][ T5920] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.861417][T12308] loop5: partition table beyond EOD, truncated [ 622.884558][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.897811][T12308] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 622.926192][ T5920] usb 6-1: Product: syz [ 622.942154][ T5920] usb 6-1: Manufacturer: syz [ 622.960903][ T5920] usb 6-1: SerialNumber: syz [ 623.031540][T11973] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 623.190674][T12321] loop9: detected capacity change from 0 to 7 [ 623.210283][T12321] Dev loop9: unable to read RDB block 7 [ 623.231426][T11973] usb 1-1: Using ep0 maxpacket: 32 [ 623.241382][T11973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.264160][T12306] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1603'. [ 623.274615][T12321] loop9: unable to read partition table [ 623.284704][T11973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.299860][T12321] loop9: partition table beyond EOD, truncated [ 623.314352][T11973] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.328921][T12321] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 623.356517][T11973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.387845][ T30] audit: type=1326 audit(1766146830.322:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12304 comm="syz.5.1603" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8eb038f749 code=0x0 [ 623.398368][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.488468][T11973] usb 1-1: config 0 descriptor?? [ 623.491611][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.541396][T11973] hub 1-1:0.0: USB hub found [ 623.698570][ T5920] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 623.744198][ T5920] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 623.774113][ T5920] usb 6-1: 2:1 : sample bitwidth 243 in over sample bytes 3 [ 623.799833][T11973] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 623.821243][ T5920] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 623.855482][T11973] usbhid 1-1:0.0: can't add hid device: -71 [ 623.886088][T11973] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 623.894232][ T5920] usb 6-1: USB disconnect, device number 3 [ 623.938547][T11973] usb 1-1: USB disconnect, device number 118 [ 624.092968][ T8487] udevd[8487]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.351195][ T1168] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 624.454206][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.460835][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.531306][ T1168] usb 4-1: Using ep0 maxpacket: 32 [ 624.544779][ T1168] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 624.581132][ T1168] usb 4-1: config 0 has no interface number 0 [ 624.631638][ T1168] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 624.699520][ T1168] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 624.720971][ T1168] usb 4-1: config 0 interface 85 has no altsetting 0 [ 624.743366][ T1168] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 624.801193][ T1168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.841194][ T1168] usb 4-1: Product: syz [ 624.847481][ T1168] usb 4-1: Manufacturer: syz [ 624.866505][ T1168] usb 4-1: SerialNumber: syz [ 624.898556][ T1168] usb 4-1: config 0 descriptor?? [ 625.152020][ T1168] appletouch 4-1:0.85: Failed to read mode from device. [ 625.175842][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.192971][ T1168] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 625.229419][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.273734][ T1168] usb 4-1: USB disconnect, device number 105 [ 625.297368][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.348660][T12347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.409971][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.451529][ T5927] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 625.490384][T12347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.723296][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 625.742902][ T5927] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 625.792894][ T5927] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 625.824841][ T5927] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 625.833724][ T1168] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 625.861633][ T5927] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 625.893366][ T5927] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 625.926823][ T5927] usb 6-1: config 0 has no interface number 0 [ 625.949015][ T5927] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 626.002275][ T5927] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 626.034530][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 626.058017][ T5927] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.077678][ T1168] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 626.112099][ T5927] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.126051][ T5928] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 626.150563][ T1168] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 626.175397][ T5927] usb 6-1: config 0 interface 125 has no altsetting 0 [ 626.187463][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.208844][ T5927] usb 6-1: config 0 interface 125 has no altsetting 2 [ 626.240262][ T1168] usb 1-1: config 0 descriptor?? [ 626.249319][ T5927] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 626.275388][T12354] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 626.284631][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.330065][ T5927] usb 6-1: Product: syz [ 626.348132][ T5927] usb 6-1: Manufacturer: syz [ 626.373474][ T5927] usb 6-1: SerialNumber: syz [ 626.413370][ T5927] usb 6-1: config 0 descriptor?? [ 626.468494][ T5927] usb 6-1: selecting invalid altsetting 2 [ 626.595180][T12354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.642221][T12354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.666398][ C1] usb 6-1: async_complete: urb error -71 [ 626.672178][ C1] usb 6-1: async_complete: urb error -71 [ 626.677856][ C1] usb 6-1: async_complete: urb error -71 [ 626.683525][ C1] usb 6-1: async_complete: urb error -71 [ 626.751291][ T5927] get_1284_register: usb error -71 [ 626.763155][ T5927] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 626.771507][ T1168] usbhid 1-1:0.0: can't add hid device: -71 [ 626.792823][ T1168] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 626.813842][ T5927] usb 6-1: USB disconnect, device number 4 [ 626.830994][ T1168] usb 1-1: USB disconnect, device number 119 [ 626.921351][ T2980] wlan0: Trigger new scan to find an IBSS to join [ 626.961813][T12355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.015214][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.030707][T12355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.066578][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.261207][ T1168] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 628.352146][ T1168] usb 1-1: device descriptor read/64, error -71 [ 628.621256][ T1168] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 628.889690][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.020086][ T1168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.094286][ T1168] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 629.180038][ T1168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.224338][ T1168] usb 1-1: config 0 descriptor?? [ 629.733489][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 629.834730][ T5927] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 629.965821][ T1165] wlan0: Trigger new scan to find an IBSS to join [ 630.070186][ T5927] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 630.135202][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.174295][ T5927] usb 4-1: Product: syz [ 630.202756][T12399] mmap: syz.0.1624 (12399): VmData 37838848 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 630.254057][ T5927] usb 4-1: Manufacturer: syz [ 630.277483][ T5927] usb 4-1: SerialNumber: syz [ 630.299873][ T5927] usb 4-1: config 0 descriptor?? [ 630.336079][ T5927] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 630.473684][ T1168] usbhid 1-1:0.0: can't add hid device: -71 [ 630.497569][ T1168] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 630.652564][ T1168] usb 1-1: USB disconnect, device number 121 [ 630.747307][ T5927] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 630.846136][ T5927] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 630.919610][ T5927] usb 4-1: USB disconnect, device number 107 [ 631.374240][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 631.383836][ T5927] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 631.412485][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 631.500672][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 631.511970][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 631.555051][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 631.631327][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 631.639595][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 631.662953][ T5927] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 631.690643][ T5927] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 631.758392][ T5927] usb 4-1: Product: syz [ 631.775612][ T5927] usb 4-1: Manufacturer: syz [ 631.790940][ T5927] usb 4-1: SerialNumber: syz [ 632.026136][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.035948][ T5927] usb 4-1: Invalid connection information received from device [ 632.082978][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.229305][ T7899] usb 4-1: USB disconnect, device number 108 [ 632.753048][ T30] audit: type=1326 audit(1766146839.682:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 632.825281][ T30] audit: type=1326 audit(1766146839.682:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 632.878494][ T30] audit: type=1326 audit(1766146839.682:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 632.930457][ T30] audit: type=1326 audit(1766146839.682:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 632.976272][ T30] audit: type=1326 audit(1766146839.692:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 633.001975][ T1325] wlan0: Trigger new scan to find an IBSS to join [ 633.026243][ T30] audit: type=1326 audit(1766146839.692:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 633.096006][ T30] audit: type=1326 audit(1766146839.692:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 633.179658][ T30] audit: type=1326 audit(1766146839.692:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 633.230555][ T30] audit: type=1326 audit(1766146839.722:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 633.278634][ T30] audit: type=1326 audit(1766146839.722:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz.0.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f321538f749 code=0x7ffc0000 [ 633.613755][T12507] netlink: 'syz.0.1646': attribute type 5 has an invalid length. [ 634.589324][ T2137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.321680][ T3461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.392117][ T3461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.455029][ T3461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.490517][ T3461] bridge0: port 3(netdevsim0) entered disabled state [ 638.509102][ T3461] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 638.518124][ T3461] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 638.530674][ T3461] bridge0: port 3(netdevsim0) entered disabled state [ 638.541897][ T3461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.666463][ T3461] bridge_slave_1: left allmulticast mode [ 638.673854][ T3461] bridge_slave_1: left promiscuous mode [ 638.681503][ T3461] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.693231][ T3461] bridge_slave_0: left allmulticast mode [ 638.698903][ T3461] bridge_slave_0: left promiscuous mode [ 638.705038][ T3461] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.009581][ T3461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.020286][ T3461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.030413][ T3461] bond0 (unregistering): Released all slaves [ 639.043311][ T3461] bond1 (unregistering): Released all slaves [ 639.285807][ T3461] hsr_slave_0: left promiscuous mode [ 639.292175][ T3461] hsr_slave_1: left promiscuous mode [ 639.298001][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.307664][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.315968][ T3461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.323479][ T3461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.350019][ T3461] veth1_macvtap: left promiscuous mode [ 639.355827][ T3461] veth0_macvtap: left promiscuous mode [ 639.362388][ T3461] veth1_vlan: left promiscuous mode [ 639.367769][ T3461] veth0_vlan: left promiscuous mode [ 639.949821][ T3461] team0 (unregistering): Port device team_slave_1 removed [ 639.990362][ T3461] team0 (unregistering): Port device team_slave_0 removed [ 640.620206][ T3461] IPVS: stop unused estimator thread 0... [ 667.321457][ T1325] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 667.481257][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 680.780414][ T5832] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 680.804079][ T5832] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 680.818072][ T5832] usb 3-1: USB disconnect, device number 101 [ 685.884717][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.897317][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.323262][ T1325] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 718.681382][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 731.321699][ T1325] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.324726][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.334710][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 762.681527][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 763.321323][ T1165] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 786.651774][T12662] netlink: 'syz.5.1653': attribute type 10 has an invalid length. [ 786.664157][T12669] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1651'. [ 786.678587][T12662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.699665][T12662] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 786.792557][T12675] trusted_key: encrypted_key: insufficient parameters specified [ 786.875363][T12679] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 788.481286][ T5928] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 788.638487][ T5928] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 788.836605][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.856193][ T5928] usb 4-1: Product: syz [ 788.898928][ T5928] usb 4-1: Manufacturer: syz [ 788.921160][ T5928] usb 4-1: SerialNumber: syz [ 788.934351][ T5928] usb 4-1: config 0 descriptor?? [ 788.952423][ T5928] ch341 4-1:0.0: ch341-uart converter detected [ 789.145004][T12711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.177774][T12711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.206624][ T5928] usb 4-1: failed to receive control message: -71 [ 789.228953][ T5928] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 789.253080][ T5928] usb 4-1: USB disconnect, device number 109 [ 789.271461][ T5928] ch341 4-1:0.0: device disconnected [ 789.421267][T11973] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 789.594736][T11973] usb 3-1: unable to get BOS descriptor or descriptor too short [ 789.615351][T11973] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 789.635505][T11973] usb 3-1: string descriptor 0 read error: -22 [ 789.649652][T11973] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=a2.36 [ 789.660281][T11973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.106716][T12752] fuse: Unknown parameter 'rooY#mtmode' [ 790.250587][T12754] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1664'. [ 790.260564][T12754] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1664'. [ 790.641232][ T5928] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 790.801761][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 790.810033][ T5928] usb 2-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 790.822469][ T5932] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 790.840506][ T5928] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 246, changing to 11 [ 790.863515][ T5928] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x2 has invalid maxpacket 16757, setting to 1024 [ 790.889916][ T5928] usb 2-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 790.911985][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 790.922121][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=0a87, bcdDevice= 0.00 [ 790.933339][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.948575][ T5928] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 790.967865][ T5928] usb 2-1: no configuration chosen from 1 choice [ 790.993032][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 791.011550][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 791.029296][ T5932] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 791.038966][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 791.051208][ T5932] usb 1-1: SerialNumber: syz [ 791.280791][ T5932] usb 1-1: 0:2 : does not exist [ 791.411150][ T7899] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 791.490338][ T5932] usb 1-1: USB disconnect, device number 122 [ 791.556201][T12714] udevd[12714]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.814056][T12772] ipip0: entered promiscuous mode [ 791.819412][T12772] ipip0: entered allmulticast mode [ 791.844353][T12772] netlink: 'syz.3.1676': attribute type 1 has an invalid length. [ 791.909078][T12772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.930036][ T5920] usb 3-1: USB disconnect, device number 102 [ 792.103820][T12783] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 792.221207][ T5932] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 792.461179][ T5920] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 792.519895][ T6330] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 792.532098][ T5932] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 792.560855][ T5932] usb 1-1: config 0 has no interface number 0 [ 792.572288][ T5932] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 792.697711][ T5932] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 792.839815][ T6330] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 792.873116][ T6330] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 792.894143][ T5932] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 792.911979][ T6330] usb 6-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 792.925963][ T5932] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 792.935198][ T6330] usb 6-1: config 220 has no interface number 2 [ 792.943169][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.951917][ T6330] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 792.969528][ T5932] usb 1-1: config 0 descriptor?? [ 793.011260][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 793.011266][ T6330] usb 6-1: config 220 interface 0 has no altsetting 0 [ 793.011287][ T6330] usb 6-1: config 220 interface 76 has no altsetting 0 [ 793.030749][ T5932] gspca_main: spca561-2.14.0 probing abcd:cdee [ 793.038540][ T6330] usb 6-1: config 220 interface 1 has no altsetting 0 [ 793.046054][ T5920] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 793.075461][ T6330] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 793.085717][ T6330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.098589][ T6330] usb 6-1: Product: syz [ 793.132631][ T6330] usb 6-1: Manufacturer: syz [ 793.136779][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 793.178993][ T5920] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.40 [ 793.193231][ T5932] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 793.208754][ T6330] usb 6-1: SerialNumber: syz [ 793.216464][ T5932] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 793.232481][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.242319][ T5932] usb 1-1: MIDIStreaming interface descriptor not found [ 793.257842][ T5920] usb 3-1: Product: syz [ 793.301241][ T5920] usb 3-1: Manufacturer: syz [ 793.346303][ T5932] usb 1-1: USB disconnect, device number 123 [ 793.357793][ T5920] usb 3-1: SerialNumber: syz [ 793.548274][ T7899] usb 2-1: USB disconnect, device number 84 [ 794.026035][T12813] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=960 (61440 ns) > initial count (640 ns). Using initial count to start timer. [ 795.202393][ T5920] usbhid 3-1:1.0: can't add hid device: -71 [ 795.220001][ T5920] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 795.270925][ T5920] usb 3-1: USB disconnect, device number 103 [ 795.321496][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 795.576898][ T6330] usb 6-1: selecting invalid altsetting 0 [ 795.614782][ T6330] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 795.651365][ T6330] uvcvideo 6-1:220.0: No valid video chain found. [ 795.705958][ T6330] usb 6-1: selecting invalid altsetting 0 [ 795.728474][ T6330] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 795.779036][ T6330] usb 6-1: USB disconnect, device number 6 [ 795.785278][ T5932] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 795.895216][T12837] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 795.991476][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 796.064133][ T5932] usb 2-1: unable to get BOS descriptor or descriptor too short [ 796.117146][T12842] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1694'. [ 796.123171][ T5932] usb 2-1: config 244 has an invalid interface number: 68 but max is 0 [ 796.138972][ T5932] usb 2-1: config 244 has no interface number 0 [ 796.159127][T12837] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 796.190438][ T5932] usb 2-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 796.212886][ T5932] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 796.231502][ T5932] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 796.258145][ T5932] usb 2-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 796.271174][ T5920] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 796.308621][ T5932] usb 2-1: config 244 interface 68 has no altsetting 0 [ 796.345756][ T5932] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 796.363837][T11973] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 796.366694][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.399455][ T5932] usb 2-1: Product: syz [ 796.417094][ T5932] usb 2-1: Manufacturer: syz [ 796.432479][ T5932] usb 2-1: SerialNumber: syz [ 796.466069][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 796.480075][ T5920] usb 3-1: not running at top speed; connect to a high speed hub [ 796.491310][ T5920] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 796.502958][ T5920] usb 3-1: config 1 interface 0 has no altsetting 0 [ 796.520974][ T5920] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 796.535862][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.548473][ T5920] usb 3-1: Product: syz [ 796.553046][T11973] usb 1-1: Using ep0 maxpacket: 16 [ 796.561733][T11973] usb 1-1: config 252 has an invalid interface number: 165 but max is 0 [ 796.572352][ T5920] usb 3-1: Manufacturer: syz [ 796.580287][ T5920] usb 3-1: SerialNumber: syz [ 796.586983][T11973] usb 1-1: config 252 has no interface number 0 [ 796.601895][T11973] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 796.622071][T12839] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 796.634882][T11973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.676434][ T5932] comedi comedi5: Endpoint has wrong direction [ 796.678648][T11973] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 796.686058][ T5932] dt9812 2-1:244.68: driver 'dt9812' failed to auto-configure device. [ 796.741548][ T5912] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 796.749663][ T5932] usb 2-1: USB disconnect, device number 85 [ 796.819950][T11973] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 796.891670][T11973] usb 1-1: USB disconnect, device number 124 [ 796.912756][ T5920] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input64 [ 796.945867][ T5188] bcm5974 3-1:1.0: could not read from device [ 796.955467][ T5920] usb 3-1: USB disconnect, device number 104 [ 796.963340][ T5188] bcm5974 3-1:1.0: could not read from device [ 796.977343][ T5188] bcm5974 3-1:1.0: could not read from device [ 796.992860][ T5912] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 797.013264][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.034544][ T5912] usb 4-1: Product: syz [ 797.038759][ T5912] usb 4-1: Manufacturer: syz [ 797.051576][ T5912] usb 4-1: SerialNumber: syz [ 797.066120][ T5912] usb 4-1: config 0 descriptor?? [ 797.105505][ T5833] Bluetooth: hci0: urb ffff888145efe000 submission failed (2) [ 797.292836][ T5932] usb 4-1: USB disconnect, device number 111 [ 797.741297][ T5932] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 797.879957][T12863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1701'. [ 797.911205][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 797.918882][ T5932] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 797.953705][ T5932] usb 3-1: config 0 interface 0 has no altsetting 0 [ 797.960393][ T5932] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 797.994630][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.016758][ T5932] usb 3-1: config 0 descriptor?? [ 798.227251][T12873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1705'. [ 798.358174][T12883] batadv1: entered promiscuous mode [ 798.541473][ T5912] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 798.549246][ T5920] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 798.661283][ T5927] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 798.691869][ T5912] usb 2-1: device descriptor read/64, error -71 [ 798.711196][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 798.723892][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.741921][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.755400][ T5920] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 798.765261][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.776345][ T5920] usb 6-1: config 0 descriptor?? [ 798.818994][ T5932] corsair-cpro 0003:1B1C:0C10.002B: unknown main item tag 0x0 [ 798.833013][ T5927] usb 1-1: Using ep0 maxpacket: 16 [ 798.846258][ T5932] corsair-cpro 0003:1B1C:0C10.002B: unknown main item tag 0x0 [ 798.857395][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.881184][ T5932] corsair-cpro 0003:1B1C:0C10.002B: unknown main item tag 0x0 [ 798.888792][ T5932] corsair-cpro 0003:1B1C:0C10.002B: unknown main item tag 0x0 [ 798.899346][ T5927] usb 1-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 798.914622][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.922931][ T5932] corsair-cpro 0003:1B1C:0C10.002B: unknown main item tag 0x0 [ 798.931474][ T5912] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 798.935961][ T5927] usb 1-1: config 0 descriptor?? [ 798.947122][ T5932] corsair-cpro 0003:1B1C:0C10.002B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 799.082040][ T5912] usb 2-1: device descriptor read/64, error -71 [ 799.189796][ T5920] kye 0003:0458:500F.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 799.200998][ T5912] usb usb2-port1: attempt power cycle [ 799.210055][ T5920] kye 0003:0458:500F.002C: unknown main item tag 0x0 [ 799.217980][ T5920] kye 0003:0458:500F.002C: unknown main item tag 0x0 [ 799.225075][ T5920] kye 0003:0458:500F.002C: unknown main item tag 0x0 [ 799.232064][ T5920] kye 0003:0458:500F.002C: unknown main item tag 0x0 [ 799.238948][ T5920] kye 0003:0458:500F.002C: unknown main item tag 0x0 [ 799.255828][ T5920] kye 0003:0458:500F.002C: hidraw1: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0 [ 799.267123][ T5920] kye 0003:0458:500F.002C: tablet-enabling feature report not found [ 799.275445][ T5920] kye 0003:0458:500F.002C: tablet enabling failed [ 799.334654][ T5932] corsair-cpro 0003:1B1C:0C10.002B: probe with driver corsair-cpro failed with error -110 [ 799.379185][ T5932] usb 3-1: USB disconnect, device number 105 [ 799.389797][ T5920] usb 6-1: USB disconnect, device number 7 [ 799.551240][ T5912] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 799.574005][ T5912] usb 2-1: device descriptor read/8, error -71 [ 799.585739][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 799.592607][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 799.604202][ T5927] usb 1-1: USB disconnect, device number 125 [ 799.831523][ T5912] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 799.851911][ T5912] usb 2-1: device descriptor read/8, error -71 [ 799.892560][ T5932] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 799.968530][ T5912] usb usb2-port1: unable to enumerate USB device [ 800.061236][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 800.070288][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 800.079327][ T5932] usb 3-1: can't read configurations, error -61 [ 800.191402][ T5928] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 800.211215][ T5932] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 800.351559][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 800.358432][ T5928] usb 6-1: config 7 has an invalid interface number: 148 but max is 0 [ 800.367804][T12921] sctp: [Deprecated]: syz.0.1718 (pid 12921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.367804][T12921] Use struct sctp_sack_info instead [ 800.371589][ T5928] usb 6-1: config 7 has no interface number 0 [ 800.391291][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 800.401772][ T5928] usb 6-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 800.414782][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 800.444699][ T5932] usb 3-1: can't read configurations, error -61 [ 800.492124][ T5928] usb 6-1: config 7 interface 148 has no altsetting 0 [ 800.500309][ T5932] usb usb3-port1: attempt power cycle [ 800.508431][ T5928] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61 [ 800.518092][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.526755][ T5928] usb 6-1: Product: syz [ 800.531724][ T5928] usb 6-1: Manufacturer: syz [ 800.536428][ T5928] usb 6-1: SerialNumber: syz [ 800.761184][ T5912] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 800.894041][ T5928] usb 6-1: probing VID:PID(0424:012C) [ 800.901383][ T5932] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 800.912432][ T5927] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 800.924851][ T5928] usb 6-1: vub300 testing UNKNOWN EndPoint(0) 01 [ 800.933038][ T5928] usb 6-1: vub300 ignoring EndPoint(0) 01 [ 800.938907][ T5928] usb 6-1: vub300 testing UNKNOWN EndPoint(1) 05 [ 800.946882][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 800.952785][ T5928] usb 6-1: vub300 ignoring EndPoint(1) 05 [ 800.962261][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 800.970329][ T5928] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 800.978626][ T5932] usb 3-1: can't read configurations, error -61 [ 800.986314][ T5928] vub300 6-1:7.148: probe with driver vub300 failed with error -22 [ 801.000275][ T5928] usb 6-1: USB disconnect, device number 8 [ 801.093223][ T5927] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 801.106206][ T5927] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 801.118199][ T5932] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 801.126089][ T5927] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 801.140129][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.170421][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 801.180453][ T5932] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 801.188623][ T5932] usb 3-1: can't read configurations, error -61 [ 801.196376][ T5932] usb usb3-port1: unable to enumerate USB device [ 801.216726][T12920] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 801.224630][T12920] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 801.246125][ T5927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 803.168185][T12922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.187071][T12922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.687878][T12935] fuse: Unknown parameter 'group_-i00000000000000000000' [ 803.726293][T12935] fuse: Unknown parameter 'group_-i00000000000000000000' [ 803.776307][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 803.776324][ T30] audit: type=1800 audit(1766147010.712:852): pid=12939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1722" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 804.081442][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 804.221218][ T5932] usb 6-1: device descriptor read/64, error -71 [ 804.271370][ T5912] usb 1-1: device descriptor read/64, error -71 [ 804.472856][ T5932] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 804.521200][ T5912] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 804.613464][ T5932] usb 6-1: device descriptor read/64, error -71 [ 804.704260][ T5912] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 804.713005][ T5912] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 804.721487][ T5932] usb usb6-port1: attempt power cycle [ 804.724202][ T5912] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 804.763600][ T5912] usb 1-1: config 220 has no interface number 2 [ 805.024084][ T5912] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 805.037691][ T5912] usb 1-1: config 220 interface 0 has no altsetting 0 [ 805.044802][ T5912] usb 1-1: config 220 interface 76 has no altsetting 0 [ 805.052214][ T5912] usb 1-1: config 220 interface 1 has no altsetting 0 [ 805.063003][ T5912] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 805.077474][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.091146][ T5912] usb 1-1: Product: syz [ 805.095354][ T5912] usb 1-1: Manufacturer: syz [ 805.106946][ T5928] usb 4-1: USB disconnect, device number 112 [ 805.121690][ T5912] usb 1-1: SerialNumber: syz [ 805.251211][ T5932] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 805.274107][ T5932] usb 6-1: device descriptor read/8, error -71 [ 805.531925][ T5932] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 805.552798][ T5928] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 805.592735][ T5932] usb 6-1: device descriptor read/8, error -71 [ 805.608805][T12966] netlink: 'syz.3.1733': attribute type 6 has an invalid length. [ 805.706751][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1733'. [ 805.711651][ T5932] usb usb6-port1: unable to enumerate USB device [ 805.722773][T12967] openvswitch: netlink: Flow key attr not present in new flow. [ 805.740665][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.762938][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 805.774963][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 805.786195][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 805.804216][ T5928] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.814321][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.827408][ T5928] usb 3-1: config 0 descriptor?? [ 805.907808][ T5912] usb 1-1: selecting invalid altsetting 0 [ 805.934346][ T5912] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 805.948772][ T5912] uvcvideo 1-1:220.0: No valid video chain found. [ 805.989561][ T5912] usb 1-1: selecting invalid altsetting 0 [ 806.003408][ T5912] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 806.025930][ T5912] usb 1-1: USB disconnect, device number 127 [ 806.043299][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.059585][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.287988][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.306353][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.813497][T12993] binder: 12992:12993 ioctl c0306201 2000000003c0 returned -14 [ 806.946476][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 806.972321][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 807.034258][ T5928] usb 3-1: USB disconnect, device number 110 [ 807.971456][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 808.163585][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 808.183857][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 808.205635][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 808.233145][ T5912] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 808.248060][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.260658][ T5912] usb 1-1: Product: syz [ 808.274662][ T5912] usb 1-1: Manufacturer: syz [ 808.279449][ T5912] usb 1-1: SerialNumber: syz [ 808.322082][T13034] netlink: 'syz.3.1751': attribute type 16 has an invalid length. [ 808.341776][ T5912] usb 1-1: config 0 descriptor?? [ 808.356705][ T5912] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 808.367013][T13034] netlink: 'syz.3.1751': attribute type 17 has an invalid length. [ 808.388009][ T5912] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 808.651238][ T1168] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 808.841174][ T1168] usb 3-1: device descriptor read/64, error -71 [ 808.852067][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.870582][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.052896][ T5912] em28xx 1-1:0.0: chip ID is em2874 [ 809.089784][ T1168] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 809.251191][ T1168] usb 3-1: device descriptor read/64, error -71 [ 809.375794][ T1168] usb usb3-port1: attempt power cycle [ 809.731171][ T1168] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 809.763178][ T1168] usb 3-1: device descriptor read/8, error -71 [ 810.031938][ T1168] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 810.058428][T13065] sctp: [Deprecated]: syz.1.1761 (pid 13065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 810.058428][T13065] Use struct sctp_sack_info instead [ 810.060520][ T1168] usb 3-1: device descriptor read/8, error -71 [ 810.084494][ T2980] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 810.093091][ T2980] bridge0 (unregistering): left promiscuous mode [ 810.191768][ T1168] usb usb3-port1: unable to enumerate USB device [ 810.323271][T13078] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 810.380863][ T2980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.392538][ T2980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.403239][ T2980] bond0 (unregistering): Released all slaves [ 810.540826][ T2980] bond1 (unregistering): Released all slaves [ 810.555948][ T2980] bond2 (unregistering): Released all slaves [ 810.569543][ T2980] bond3 (unregistering): Released all slaves [ 810.644087][ T5912] usb 1-1: USB disconnect, device number 2 [ 810.663026][ T5912] em28xx 1-1:0.0: Disconnecting em28xx [ 810.674672][ T2980] tipc: Disabling bearer [ 810.684022][ T5912] em28xx 1-1:0.0: Freeing device [ 810.690351][ T2980] tipc: Left network mode [ 810.740183][ T2980] IPVS: stopping master sync thread 10878 ... [ 810.951850][ T2980] macvlan1: left promiscuous mode [ 810.958290][ T2980] batadv0: left promiscuous mode [ 810.966943][ T2980] hsr_slave_0: left promiscuous mode [ 810.973182][ T2980] hsr_slave_1: left promiscuous mode [ 810.979320][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.989027][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.997307][ T2980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.005845][ T2980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.028577][T13081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.034696][ T2980] veth0_macvtap: left promiscuous mode [ 811.041872][T13081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.045094][ T2980] veth1_vlan: left promiscuous mode [ 811.056088][ T2980] veth0_vlan: left promiscuous mode [ 811.131809][ T1168] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 811.451284][T13092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1766'. [ 812.135269][ T2980] team0 (unregistering): Port device team_slave_1 removed [ 812.204170][ T2980] team0 (unregistering): Port device team_slave_0 removed [ 813.029256][T13081] 8021q: VLANs not supported on wg0 [ 813.050160][T13086] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1765'. [ 813.219333][T13109] netlink: 'syz.0.1771': attribute type 12 has an invalid length. [ 813.656709][ T2980] IPVS: stop unused estimator thread 0... [ 813.811449][ T5928] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 813.829788][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 813.957788][T13123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 813.965136][T13123] IPv6: NLM_F_CREATE should be set when creating new route [ 813.972633][T13123] IPv6: NLM_F_CREATE should be set when creating new route [ 814.027301][ T5928] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 814.041626][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.060536][ T5928] usb 1-1: Product: syz [ 814.078406][ T5928] usb 1-1: Manufacturer: syz [ 814.087525][ T5928] usb 1-1: SerialNumber: syz [ 814.102196][ T5928] usb 1-1: config 0 descriptor?? [ 814.132075][ T5932] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 814.255871][T13128] loop5: detected capacity change from 0 to 7 [ 814.264487][T12682] Dev loop5: unable to read RDB block 7 [ 814.270234][T12682] loop5: unable to read partition table [ 814.276366][T12682] loop5: partition table beyond EOD, truncated [ 814.284549][T13128] Dev loop5: unable to read RDB block 7 [ 814.292097][T13128] loop5: unable to read partition table [ 814.297980][T13128] loop5: partition table beyond EOD, truncated [ 814.306115][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 814.311634][T13128] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 814.316458][ T5932] usb 4-1: config 1 has an invalid interface number: 43 but max is 1 [ 814.363831][ T5932] usb 4-1: config 1 has no interface number 1 [ 814.375476][ T5928] hso 1-1:0.0: Failed to find BULK IN ep [ 814.393418][ T5932] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 814.411887][ T5928] usb-storage 1-1:0.0: USB Mass Storage device detected [ 814.429292][ T5932] usb 4-1: config 1 interface 0 has no altsetting 0 [ 814.450217][T13135] loop9: detected capacity change from 0 to 7 [ 814.452755][ T5932] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 814.460171][T13135] Dev loop9: unable to read RDB block 7 [ 814.471491][T13135] loop9: unable to read partition table [ 814.477706][T13135] loop9: partition table beyond EOD, truncated [ 814.489452][T13135] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 814.490044][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.507587][ T5932] usb 4-1: Product: syz [ 814.524386][ T5932] usb 4-1: Manufacturer: syz [ 814.529811][ T5932] usb 4-1: SerialNumber: syz [ 814.609172][ T5912] usb 1-1: USB disconnect, device number 3 [ 814.703181][T13142] openvswitch: netlink: IPv4 tunnel dst address is zero [ 814.774121][ T5932] smsusb:smsusb_probe: board id=8, interface number 0 [ 814.793738][ T5932] smsusb:smsusb_probe: board id=8, interface number 43 [ 814.819251][ T5932] usb 4-1: USB disconnect, device number 113 [ 814.951172][ T5912] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 815.121310][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 815.136477][ T5912] usb 6-1: unable to get BOS descriptor or descriptor too short [ 815.161830][ T5912] usb 6-1: config 244 has an invalid interface number: 176 but max is 0 [ 815.170484][ T5912] usb 6-1: config 244 has no interface number 0 [ 815.177528][ T5912] usb 6-1: config 244 interface 176 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 815.237236][ T5912] usb 6-1: config 244 interface 176 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 815.513579][ T5912] usb 6-1: config 244 interface 176 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 815.543084][ T5912] usb 6-1: config 244 interface 176 has no altsetting 0 [ 815.601243][ T5932] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 815.618637][ T5912] usb 6-1: New USB device found, idVendor=413c, idProduct=8138, bcdDevice=89.79 [ 815.639291][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.711209][ T5912] usb 6-1: Product: syz [ 815.717604][ T5912] usb 6-1: Manufacturer: 茰쎅鋎雥㕡㞫巄≊댥⹚㲯呹ꋵ撚≺薝䩧璅ﬓ揃ꃽ递꾨螀萅࿭탷磌㴟ᙲ烃ᥬ⮨킝븟摔똠䅂䁚湂꘤酙氃 [ 815.763339][ T5912] usb 6-1: SerialNumber: syz [ 815.775662][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 815.786842][T13145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 815.799361][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 815.828059][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 815.855246][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 815.889876][ T5932] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 815.911638][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.929587][ T5932] usb 3-1: Product: syz [ 815.937645][ T5932] usb 3-1: Manufacturer: syz [ 815.947477][ T5932] usb 3-1: SerialNumber: syz [ 816.063932][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.096259][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.128608][ T5912] option 6-1:244.176: GSM modem (1-port) converter detected [ 816.143940][ T5932] usb 3-1: config 0 descriptor?? [ 816.159290][ T5912] usb 6-1: USB disconnect, device number 13 [ 816.169359][T13153] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 816.204899][ T5912] option 6-1:244.176: device disconnected [ 816.435610][ T5932] usb 3-1: USB disconnect, device number 115 [ 816.921495][ T5928] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 817.018797][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 817.028469][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1796'. [ 817.075570][ T5928] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 817.108636][ T5928] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 817.124853][T13207] tipc: Started in network mode [ 817.132294][ T5928] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 817.142423][ T5928] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 817.166837][ T5928] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 817.171926][ T5912] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 817.176637][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.193897][T13207] tipc: Node identity , cluster identity 4711 [ 817.203512][T13183] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 817.214523][T13207] tipc: Failed to obtain node identity [ 817.214558][T13207] tipc: Enabling of bearer rejected, failed to enable media [ 817.353926][ T5912] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 817.364309][ T5912] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 817.375430][ T5912] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 817.388592][ T5912] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 817.397735][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.419044][ T1168] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 817.432514][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 817.440860][ T5912] usb 1-1: invalid MIDI out EP 0 [ 817.536722][ T5912] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 817.593724][ T1168] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 817.603520][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.615955][ T1168] usb 3-1: config 0 descriptor?? [ 817.648868][T13196] netlink: 'syz.0.1795': attribute type 10 has an invalid length. [ 817.669036][ T5912] usb 1-1: USB disconnect, device number 4 [ 817.874965][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 817.881599][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 817.900133][T13216] vhci_hcd vhci_hcd.0: Device attached [ 817.910813][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 817.917661][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 817.928828][T13216] vhci_hcd vhci_hcd.0: Device attached [ 817.937675][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(15) [ 817.944475][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 817.952641][T13216] vhci_hcd vhci_hcd.0: Device attached [ 817.963458][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 817.970076][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 817.978729][T13216] vhci_hcd vhci_hcd.0: Device attached [ 817.994427][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 818.001070][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 818.018823][T13216] vhci_hcd vhci_hcd.0: Device attached [ 818.033388][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 818.040027][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 818.049199][T13216] vhci_hcd vhci_hcd.0: Device attached [ 818.057601][T13216] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 818.070389][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(25) [ 818.077013][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 818.086711][T13216] vhci_hcd vhci_hcd.0: Device attached [ 818.104157][T13216] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 818.117686][T13216] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(32) [ 818.124344][T13216] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 818.132736][T13216] vhci_hcd vhci_hcd.0: Device attached [ 818.141843][ T5932] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 818.281782][ T5928] ath6kl: Failed to submit usb control message: -110 [ 818.289114][ T5928] ath6kl: unable to send the bmi data to the device: -110 [ 818.296743][ T5928] ath6kl: Unable to send get target info: -110 [ 818.312022][ T5928] ath6kl: Failed to init ath6kl core: -110 [ 818.319156][ T5928] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 818.702361][T13229] vhci_hcd: connection closed [ 818.704359][T13227] vhci_hcd: connection closed [ 818.706458][T13217] vhci_hcd: connection reset by peer [ 818.709185][T13225] vhci_hcd: connection closed [ 818.714215][T13221] vhci_hcd: connection closed [ 818.720982][T13223] vhci_hcd: connection closed [ 818.728853][T13219] vhci_hcd: connection closed [ 818.736618][T11357] vhci_hcd vhci_hcd.3: stop threads [ 818.747527][T11357] vhci_hcd vhci_hcd.3: release socket [ 818.753304][T11357] vhci_hcd vhci_hcd.3: disconnect device [ 818.762920][T11357] vhci_hcd vhci_hcd.3: stop threads [ 818.768224][T11357] vhci_hcd vhci_hcd.3: release socket [ 818.775789][T11357] vhci_hcd vhci_hcd.3: disconnect device [ 818.782105][T11357] vhci_hcd vhci_hcd.3: stop threads [ 818.787493][T11357] vhci_hcd vhci_hcd.3: release socket [ 818.793075][T11357] vhci_hcd vhci_hcd.3: disconnect device [ 818.799381][T11357] vhci_hcd vhci_hcd.3: stop threads [ 818.805231][T11357] vhci_hcd vhci_hcd.3: release socket [ 818.811291][T11357] vhci_hcd vhci_hcd.3: disconnect device [ 818.817549][T11357] vhci_hcd vhci_hcd.3: stop threads [ 818.824099][T11357] vhci_hcd vhci_hcd.3: release socket [ 818.829844][T11357] vhci_hcd vhci_hcd.3: disconnect device [ 818.839542][T11357] vhci_hcd vhci_hcd.3: stop threads [ 818.848064][T11357] vhci_hcd vhci_hcd.3: release socket [ 818.854059][T11357] vhci_hcd vhci_hcd.3: disconnect device [ 818.860099][T11357] vhci_hcd vhci_hcd.3: stop threads [ 818.866298][T11357] vhci_hcd vhci_hcd.3: release socket [ 818.871863][T11357] vhci_hcd vhci_hcd.3: disconnect device [ 819.268427][T13231] vhci_hcd: connection closed [ 819.268773][ T2137] vhci_hcd vhci_hcd.3: stop threads [ 819.279785][ T2137] vhci_hcd vhci_hcd.3: release socket [ 819.286209][ T2137] vhci_hcd vhci_hcd.3: disconnect device [ 819.613785][ T5912] usb 2-1: USB disconnect, device number 91 [ 819.653459][ T7899] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 819.757483][T13248] [ 819.759859][T13248] ====================================================== [ 819.766898][T13248] WARNING: possible circular locking dependency detected [ 819.774045][T13248] syzkaller #0 Tainted: G L [ 819.780023][T13248] ------------------------------------------------------ [ 819.789132][T13248] syz.1.1805/13248 is trying to acquire lock: [ 819.795720][T13248] ffffffff99dcd2b8 (nfnl_subsys_ipset){+.+.}-{4:4}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 819.805918][T13248] [ 819.805918][T13248] but task is already holding lock: [ 819.813460][T13248] ffff888079ec60d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 819.823736][T13248] [ 819.823736][T13248] which lock already depends on the new lock. [ 819.823736][T13248] [ 819.834298][T13248] [ 819.834298][T13248] the existing dependency chain (in reverse order) is: [ 819.843303][T13248] [ 819.843303][T13248] -> #2 (&nft_net->commit_mutex){+.+.}-{4:4}: [ 819.851552][T13248] __mutex_lock+0x187/0x1350 [ 819.856668][T13248] nf_tables_dumpreset_set+0xc5/0x290 [ 819.862558][T13248] netlink_dump+0x6e4/0xe90 [ 819.867577][T13248] __netlink_dump_start+0x5cb/0x7e0 [ 819.873290][T13248] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 819.879433][T13248] nf_tables_getsetelem_reset+0x2b2/0xa60 [ 819.885669][T13248] nfnetlink_rcv_msg+0x80e/0x1130 [ 819.891221][T13248] netlink_rcv_skb+0x208/0x470 [ 819.896508][T13248] nfnetlink_rcv+0x282/0x2590 [ 819.901697][T13248] netlink_unicast+0x82f/0x9e0 [ 819.906983][T13248] netlink_sendmsg+0x805/0xb30 [ 819.912267][T13248] __sock_sendmsg+0x21c/0x270 [ 819.917460][T13248] ____sys_sendmsg+0x505/0x820 [ 819.922741][T13248] ___sys_sendmsg+0x21f/0x2a0 [ 819.928018][T13248] __x64_sys_sendmsg+0x19b/0x260 [ 819.933475][T13248] do_syscall_64+0xfa/0xf80 [ 819.938502][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.944904][T13248] [ 819.944904][T13248] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}: [ 819.953201][T13248] __mutex_lock+0x187/0x1350 [ 819.958305][T13248] __netlink_dump_start+0xfe/0x7e0 [ 819.963933][T13248] ip_set_dump+0x13e/0x1c0 [ 819.968869][T13248] nfnetlink_rcv_msg+0xb4d/0x1130 [ 819.974406][T13248] netlink_rcv_skb+0x208/0x470 [ 819.979697][T13248] nfnetlink_rcv+0x282/0x2590 [ 819.984906][T13248] netlink_unicast+0x82f/0x9e0 [ 819.990190][T13248] netlink_sendmsg+0x805/0xb30 [ 819.995470][T13248] __sock_sendmsg+0x21c/0x270 [ 820.000671][T13248] ____sys_sendmsg+0x505/0x820 [ 820.005954][T13248] ___sys_sendmsg+0x21f/0x2a0 [ 820.011142][T13248] __x64_sys_sendmsg+0x19b/0x260 [ 820.016598][T13248] do_syscall_64+0xfa/0xf80 [ 820.021715][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.028133][T13248] [ 820.028133][T13248] -> #0 (nfnl_subsys_ipset){+.+.}-{4:4}: [ 820.035948][T13248] __lock_acquire+0x15a6/0x2cf0 [ 820.041323][T13248] lock_acquire+0x117/0x340 [ 820.046434][T13248] __mutex_lock+0x187/0x1350 [ 820.051549][T13248] ip_set_nfnl_get_byindex+0x67/0x230 [ 820.057447][T13248] set_target_v1_checkentry+0x8c/0x500 [ 820.063440][T13248] xt_check_target+0x3c3/0xa90 [ 820.068724][T13248] nft_target_init+0x672/0x9c0 [ 820.074004][T13248] nf_tables_newrule+0x1794/0x28a0 [ 820.079630][T13248] nfnetlink_rcv+0x11d9/0x2590 [ 820.084908][T13248] netlink_unicast+0x82f/0x9e0 [ 820.090190][T13248] netlink_sendmsg+0x805/0xb30 [ 820.095475][T13248] __sock_sendmsg+0x21c/0x270 [ 820.100699][T13248] ____sys_sendmsg+0x505/0x820 [ 820.105987][T13248] ___sys_sendmsg+0x21f/0x2a0 [ 820.111174][T13248] __x64_sys_sendmsg+0x19b/0x260 [ 820.116625][T13248] do_syscall_64+0xfa/0xf80 [ 820.121638][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.128043][T13248] [ 820.128043][T13248] other info that might help us debug this: [ 820.128043][T13248] [ 820.138256][T13248] Chain exists of: [ 820.138256][T13248] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 820.138256][T13248] [ 820.152678][T13248] Possible unsafe locking scenario: [ 820.152678][T13248] [ 820.160114][T13248] CPU0 CPU1 [ 820.165465][T13248] ---- ---- [ 820.170816][T13248] lock(&nft_net->commit_mutex); [ 820.175843][T13248] lock(nlk_cb_mutex-NETFILTER); [ 820.183376][T13248] lock(&nft_net->commit_mutex); [ 820.190951][T13248] lock(nfnl_subsys_ipset); [ 820.195555][T13248] [ 820.195555][T13248] *** DEADLOCK *** [ 820.195555][T13248] [ 820.203693][T13248] 1 lock held by syz.1.1805/13248: [ 820.208821][T13248] #0: ffff888079ec60d8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 820.219536][T13248] [ 820.219536][T13248] stack backtrace: [ 820.225450][T13248] CPU: 0 UID: 0 PID: 13248 Comm: syz.1.1805 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.225472][T13248] Tainted: [L]=SOFTLOCKUP [ 820.225477][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.225487][T13248] Call Trace: [ 820.225496][T13248] [ 820.225504][T13248] dump_stack_lvl+0x189/0x250 [ 820.225526][T13248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.225542][T13248] ? __pfx__printk+0x10/0x10 [ 820.225565][T13248] ? print_lock_name+0xde/0x100 [ 820.225584][T13248] print_circular_bug+0x2e2/0x300 [ 820.225603][T13248] check_noncircular+0x12e/0x150 [ 820.225628][T13248] __lock_acquire+0x15a6/0x2cf0 [ 820.225649][T13248] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 820.225665][T13248] lock_acquire+0x117/0x340 [ 820.225679][T13248] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 820.225701][T13248] __mutex_lock+0x187/0x1350 [ 820.225716][T13248] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 820.225733][T13248] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 820.225749][T13248] ? __pfx___mutex_lock+0x10/0x10 [ 820.225766][T13248] ? ip_set_pernet+0x23/0x240 [ 820.225780][T13248] ? ip_set_pernet+0x23/0x240 [ 820.225795][T13248] ip_set_nfnl_get_byindex+0x67/0x230 [ 820.225812][T13248] set_target_v1_checkentry+0x8c/0x500 [ 820.225842][T13248] xt_check_target+0x3c3/0xa90 [ 820.225861][T13248] ? __pfx_xt_check_target+0x10/0x10 [ 820.225881][T13248] ? __pfx___might_resched+0x10/0x10 [ 820.225898][T13248] ? nft_pernet+0x23/0x240 [ 820.225916][T13248] ? nft_pernet+0x23/0x240 [ 820.225928][T13248] ? nft_pernet+0x23/0x240 [ 820.225941][T13248] ? flush_work+0xd/0x30 [ 820.225962][T13248] nft_target_init+0x672/0x9c0 [ 820.225977][T13248] ? __x64_sys_sendmsg+0x19b/0x260 [ 820.225994][T13248] ? do_syscall_64+0xfa/0xf80 [ 820.226010][T13248] ? __pfx_nft_target_init+0x10/0x10 [ 820.226035][T13248] ? rcu_is_watching+0x15/0xb0 [ 820.226051][T13248] ? trace_kmalloc+0x1f/0xb0 [ 820.226064][T13248] ? __kmalloc_noprof+0x43e/0x800 [ 820.226076][T13248] ? nf_tables_newrule+0x150b/0x28a0 [ 820.226100][T13248] nf_tables_newrule+0x1794/0x28a0 [ 820.226117][T13248] ? __pfx_nf_tables_newrule+0x10/0x10 [ 820.226130][T13248] ? nfnl_pernet+0x23/0x240 [ 820.226152][T13248] ? __nla_parse+0x40/0x60 [ 820.226168][T13248] nfnetlink_rcv+0x11d9/0x2590 [ 820.226193][T13248] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 820.226212][T13248] ? ref_tracker_free+0x63a/0x7d0 [ 820.226237][T13248] ? __netlink_deliver_tap+0x807/0x850 [ 820.226254][T13248] ? netlink_deliver_tap+0x2e/0x1b0 [ 820.226275][T13248] netlink_unicast+0x82f/0x9e0 [ 820.226293][T13248] ? __pfx_netlink_unicast+0x10/0x10 [ 820.226308][T13248] ? netlink_sendmsg+0x642/0xb30 [ 820.226324][T13248] ? skb_put+0x11b/0x210 [ 820.226339][T13248] netlink_sendmsg+0x805/0xb30 [ 820.226361][T13248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.226380][T13248] ? aa_sock_msg_perm+0xf1/0x1b0 [ 820.226396][T13248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 820.226410][T13248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.226426][T13248] __sock_sendmsg+0x21c/0x270 [ 820.226446][T13248] ____sys_sendmsg+0x505/0x820 [ 820.226463][T13248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.226487][T13248] ? import_iovec+0x74/0xa0 [ 820.226518][T13248] ___sys_sendmsg+0x21f/0x2a0 [ 820.226546][T13248] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.226563][T13248] ? futex_wait+0x285/0x360 [ 820.226600][T13248] ? __fget_files+0x2a/0x420 [ 820.226618][T13248] ? __fget_files+0x3a0/0x420 [ 820.226648][T13248] __x64_sys_sendmsg+0x19b/0x260 [ 820.226665][T13248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 820.226686][T13248] ? do_syscall_64+0xbe/0xf80 [ 820.226700][T13248] do_syscall_64+0xfa/0xf80 [ 820.226714][T13248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.226728][T13248] ? clear_bhb_loop+0x60/0xb0 [ 820.226743][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.226759][T13248] RIP: 0033:0x7f7b6bd8f749 [ 820.226790][T13248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.226803][T13248] RSP: 002b:00007f7b6cc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.226819][T13248] RAX: ffffffffffffffda RBX: 00007f7b6bfe5fa0 RCX: 00007f7b6bd8f749 [ 820.226831][T13248] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 820.226841][T13248] RBP: 00007f7b6be13f91 R08: 0000000000000000 R09: 0000000000000000 [ 820.226850][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.226859][T13248] R13: 00007f7b6bfe6038 R14: 00007f7b6bfe5fa0 R15: 00007f7b6c10fa28 [ 820.226875][T13248] [ 820.691721][ T1168] usb 3-1: Cannot set autoneg [ 820.701548][T13248] Cannot find del_set index 27392 as target [ 820.712544][ T7899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.722974][ T7899] usb 4-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 820.736599][ T7899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 820.739821][ T1168] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 820.743522][ T7899] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 820.743546][ T7899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.785131][ T7899] usb 4-1: config 0 descriptor?? [ 820.880141][ T1168] usb 3-1: USB disconnect, device number 116 [ 821.015331][T13243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.024107][T13243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.133704][ T7899] usb 4-1: string descriptor 0 read error: -71 [ 821.141351][ T7899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 821.149819][ T7899] usb 4-1: USB disconnect, device number 114 [ 823.233232][ T5932] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 824.491927][ T5927] usb usb40-port1: attempt power cycle [ 825.052501][ T5927] usb usb40-port1: unable to enumerate USB device [ 827.332049][ T7983] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)