last executing test programs: 3m21.318442446s ago: executing program 1 (id=90): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0x6, 0x6}, @timestamp, @sack_perm, @window={0x3, 0x0, 0xfffb}, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3m20.373500445s ago: executing program 1 (id=91): syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) 3m19.534490813s ago: executing program 1 (id=98): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00"], 0x24}}, 0x4000000) 3m19.340880137s ago: executing program 1 (id=100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x39, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000300)={r2, 0x8, 0x2}) 3m19.100104362s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m19.027122853s ago: executing program 1 (id=104): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000003c00)='net/ptype\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f0000003f00)=""/54, 0x36}, {&(0x7f0000000000)=""/39, 0x27}, {0x0}], 0x3, 0x1, 0x9) 3m11.654284128s ago: executing program 0 (id=156): openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0) r0 = syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0xc95c, 0x100, 0x1, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39) 3m11.579313639s ago: executing program 0 (id=157): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1ff, 0x40) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/151) 3m11.478471882s ago: executing program 0 (id=158): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) 3m9.772750277s ago: executing program 0 (id=173): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f0000000440)={[{@fmask={'fmask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r0) close(r0) umount2(&(0x7f0000000040)='./file0\x00', 0x9) 3m9.428451085s ago: executing program 0 (id=176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=@newlink={0x5c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f24c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xddd, 0x9, 0x8100}}]}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 3m8.946138585s ago: executing program 0 (id=180): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/377, 0x179) 3m8.541228703s ago: executing program 32 (id=180): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000740)=""/377, 0x179) 3m3.755904513s ago: executing program 33 (id=104): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETAF(r0, 0x5408, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000003c00)='net/ptype\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f0000003f00)=""/54, 0x36}, {&(0x7f0000000000)=""/39, 0x27}, {0x0}], 0x3, 0x1, 0x9) 2m13.646426291s ago: executing program 5 (id=504): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x401) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2m12.550193264s ago: executing program 5 (id=511): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 2m12.374272527s ago: executing program 5 (id=513): setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000400)) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) 2m12.145209132s ago: executing program 5 (id=516): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 2m11.868466898s ago: executing program 5 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 2m11.75847678s ago: executing program 5 (id=518): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r0, 0x0, 0x0) 1m56.676417685s ago: executing program 34 (id=518): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$uinput_user_dev(r0, 0x0, 0x0) 1m21.374118904s ago: executing program 6 (id=953): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1108, 0x1}, @fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0xa, 0x2}}, &(0x7f0000000200)={0x0, 0xfffffffffffffc19, 0x30}}}], 0x0, 0x0, 0x0}) 1m21.119242129s ago: executing program 6 (id=955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) 1m19.994802062s ago: executing program 6 (id=967): r0 = socket(0x22, 0xa, 0x4000000) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02010000000000142bbd70000200000005000a004e221c244cf400dbd78b03600000000000000000010400000000000000030006000400000100000000e000000100080000eae8d288eccd9ea0e9da5be0a1c290bcf87d37220959b3429247ee4ad8943b41d81f7ffe7cd1"], 0x50}}, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[], 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000180), 0x4001) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="1201f500396d0940fd101315ce7e0deebeb109026100010000000009040001"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x442) preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, 0x6, 0x4) syz_usb_control_io$printer(r5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x21c, 0x10, 0x713, 0x0, 0x800, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x11}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0x0, 0x33}, @in6=@local, {0x200000000000000, 0x0, 0x3, 0x2}, {}, {}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x33}, [@policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in=@loopback, 0x4e24, 0x40, 0x4e23, 0x0, 0xa, 0x0, 0x30, 0x6}, {0xff, 0x8, 0x7, 0xef, 0x8, 0xd, 0x3, 0x80000001}, {0x3, 0x0, 0x4, 0x1}, 0x8000, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}}, @algo_crypt={0x7d, 0x2, {{'ctr(camellia)\x00'}, 0x1a8, "49ad0c8b88c0558cfb12fa7c673ccf6b951fc8f5d439cf47d12fe28c70dafb3d2d63c2e3dcdc6c0493502a393b55885142c22ab30b"}}]}, 0x21c}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a1, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1m16.861112663s ago: executing program 6 (id=996): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 1m16.676478616s ago: executing program 6 (id=998): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x2000f765) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="234602ffffff"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x6}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xb, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x100000, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x224, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) sendto$packet(r1, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1m16.334073613s ago: executing program 6 (id=1001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x1000000, 0x0}) 1m15.869796042s ago: executing program 35 (id=1001): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x1000000, 0x0}) 24.437614981s ago: executing program 4 (id=1326): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) socket$key(0xf, 0x3, 0x2) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 22.737762225s ago: executing program 4 (id=1338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 22.660437426s ago: executing program 4 (id=1339): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2802, 0x0) writev(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="6d00330080000800ffffffffffff080211"], 0x8c}, 0x1, 0x0, 0x0, 0x94}, 0x0) 22.538964828s ago: executing program 4 (id=1341): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 22.361501712s ago: executing program 4 (id=1342): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) shutdown(r0, 0x2) 22.022321188s ago: executing program 4 (id=1344): r0 = socket(0x22, 0xa, 0x4000000) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02010000000000142bbd70000200000005000a004e221c244cf400dbd78b03600000000000000000010400000000000000030006000400000100000000e000000100080000eae8d288eccd9ea0e9da5be0a1c290bcf87d37220959b3429247ee4ad8943b41d81f7ffe7cd1"], 0x50}}, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[], 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000180), 0x4001) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="1201f500396d0940fd101315ce7e0deebeb109026100010000000009040001"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x442) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, 0x6, 0x4) syz_usb_control_io$printer(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x21c, 0x10, 0x713, 0x0, 0x800, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x11}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0x0, 0x33}, @in6=@local, {0x200000000000000, 0x0, 0x3, 0x2}, {}, {}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x33}, [@policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in=@loopback, 0x4e24, 0x40, 0x4e23, 0x0, 0xa, 0x0, 0x30, 0x6}, {0xff, 0x8, 0x7, 0xef, 0x8, 0xd, 0x3, 0x80000001}, {0x3, 0x0, 0x4, 0x1}, 0x8000, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}}, @algo_crypt={0x7d, 0x2, {{'ctr(camellia)\x00'}, 0x1a8, "49ad0c8b88c0558cfb12fa7c673ccf6b951fc8f5d439cf47d12fe28c70dafb3d2d63c2e3dcdc6c0493502a393b55885142c22ab30b"}}]}, 0x21c}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 21.815095203s ago: executing program 36 (id=1344): r0 = socket(0x22, 0xa, 0x4000000) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02010000000000142bbd70000200000005000a004e221c244cf400dbd78b03600000000000000000010400000000000000030006000400000100000000e000000100080000eae8d288eccd9ea0e9da5be0a1c290bcf87d37220959b3429247ee4ad8943b41d81f7ffe7cd1"], 0x50}}, 0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, 0x0, 0x0, 0x4004) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[], 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000180), 0x4001) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="1201f500396d0940fd101315ce7e0deebeb109026100010000000009040001"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x442) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, 0x6, 0x4) syz_usb_control_io$printer(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x21c, 0x10, 0x713, 0x0, 0x800, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x11}, {@in6=@private1={0xfc, 0x1, '\x00', 0xff}, 0x0, 0x33}, @in6=@local, {0x200000000000000, 0x0, 0x3, 0x2}, {}, {}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x33}, [@policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, @in=@loopback, 0x4e24, 0x40, 0x4e23, 0x0, 0xa, 0x0, 0x30, 0x6}, {0xff, 0x8, 0x7, 0xef, 0x8, 0xd, 0x3, 0x80000001}, {0x3, 0x0, 0x4, 0x1}, 0x8000, 0x6e6bb4, 0x0, 0x1, 0x2, 0x1}}, @algo_crypt={0x7d, 0x2, {{'ctr(camellia)\x00'}, 0x1a8, "49ad0c8b88c0558cfb12fa7c673ccf6b951fc8f5d439cf47d12fe28c70dafb3d2d63c2e3dcdc6c0493502a393b55885142c22ab30b"}}]}, 0x21c}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 3.562901s ago: executing program 7 (id=1424): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x121) 3.398554673s ago: executing program 7 (id=1425): truncate(&(0x7f0000002100)='./file1\x00', 0x63fc) 3.364955094s ago: executing program 2 (id=1426): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f56", 0x7c}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) syz_clone(0x2100a400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 3.218926027s ago: executing program 7 (id=1427): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007000000", @ANYRES64=r0], 0x38}}, 0x10) 3.123746879s ago: executing program 2 (id=1428): syz_emit_vhci(&(0x7f00000018c0)=ANY=[@ANYBLOB="043ed702070101ffffffffffff19ff63cb0189d2e486bc6827c5752bb6ef9c28bc8eb4fd4ff063810401ffffffffffff1add0a2f4288058eac1a3f9d63f7bbb1514032564ffa3d40d55b67bc0001ffffffffffff018784010100000000000003d68509010200aaaaaaaaaa121fe6000b7bafa65be05e2926cec041f828ad6e5b0000000000006336ac0000000902000000000000001f4b40f0b91d1aa4111558aa908df454178753c585b373a6171db7a26f2b6cc50301"], 0xda) 2.991910491s ago: executing program 7 (id=1430): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) 2.970056962s ago: executing program 2 (id=1431): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 1.670566788s ago: executing program 3 (id=1434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x0, 0xfff1}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x4045090) 1.55918689s ago: executing program 8 (id=1435): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") truncate(0x0, 0x63fc) 1.53421341s ago: executing program 2 (id=1436): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close_range(r0, 0xffffffffffffffff, 0x0) 1.06260896s ago: executing program 2 (id=1437): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r1, 0x0, 0x0) 980.785051ms ago: executing program 8 (id=1438): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x2000f765) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="234602ffffff"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x6}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xb, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x100000, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x224, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) sendto$packet(r1, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 943.201981ms ago: executing program 3 (id=1439): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="0600150007000000", @ANYRES64=r0], 0x38}}, 0x10) 765.798285ms ago: executing program 8 (id=1440): writev(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000240)="062326ea656bb5e76522f7325730081b97f19b45bad44db0", 0x18}], 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 692.245507ms ago: executing program 7 (id=1441): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 638.622888ms ago: executing program 3 (id=1442): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 525.95954ms ago: executing program 3 (id=1443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x121) 512.06727ms ago: executing program 7 (id=1444): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe}, 0x1c}}, 0x44044) 511.44701ms ago: executing program 8 (id=1445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x2802, 0x0) writev(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 350.449323ms ago: executing program 3 (id=1446): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") truncate(0x0, 0x63fc) 310.479894ms ago: executing program 8 (id=1447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {0x0, 0xfff1}, {0xfff1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x4045090) 174.651907ms ago: executing program 3 (id=1448): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x2000f765) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="234602ffffff"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x2, 0x0, 0x4, 0x9, 0x6}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0x5000, 0xb, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x100000, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x224, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) sendto$packet(r1, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 50.517039ms ago: executing program 2 (id=1449): r0 = inotify_init() r1 = syz_open_dev$video(&(0x7f0000000000), 0x9, 0x649601) r2 = fcntl$dupfd(r1, 0x0, r0) fcntl$dupfd(r2, 0x0, r0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x14, 0x15, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac193400", "f4bd0000008019000e000000000000f400", [0x6, 0x2000000000001]}}) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780080006c00000000308000840000000300500010006000000050005000a00ffff13000300686173683a6e65742c696661636500000900020073797a3100000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f000840031b000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r8 = socket(0x22, 0x2, 0x3) accept4$packet(r8, 0x0, 0x0, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x80, 0x0, 0x1d8}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000140)={0xf0f003, 0x5}) close(r5) r11 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r11, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r11) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 0s ago: executing program 8 (id=1450): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680", @ANYRES64=r0], 0x38}}, 0x10) kernel console output (not intermixed with test programs): DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 206.769860][ T6570] usb 5-1: Service connection timeout for: 256 [ 206.778811][ T5796] Bluetooth: hci0: unknown advertising packet type: 0x69 [ 206.778922][ T5796] Bluetooth: hci0: Malformed LE Event: 0x02 [ 206.779063][ T27] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 206.790500][ T6570] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 206.808187][ T6570] ath9k_htc: Failed to initialize the device [ 206.818250][ T6566] usb 5-1: ath9k_htc: USB layer deinitialized [ 206.867838][ T27] usb 3-1: USB disconnect, device number 21 [ 207.619210][ T8222] overlayfs: conflicting lowerdir path [ 207.649769][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 207.839748][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 207.852847][ T5913] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.865257][ T5913] usb 5-1: config 0 has no interface number 0 [ 207.880188][ T5913] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.911361][ T5913] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 207.935619][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.960008][ T5913] usb 5-1: config 0 descriptor?? [ 207.968910][ T5913] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 209.231344][ T27] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 209.444028][ T27] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 209.453450][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.463025][ T27] usb 3-1: Product: syz [ 209.467241][ T27] usb 3-1: Manufacturer: syz [ 209.471947][ T27] usb 3-1: SerialNumber: syz [ 209.485032][ T27] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 209.504797][ T5913] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.183875][ T27] usb 3-1: USB disconnect, device number 22 [ 210.394432][ T6563] usb 5-1: USB disconnect, device number 15 [ 210.766378][ T5913] usb 3-1: Service connection timeout for: 256 [ 210.778887][ T5913] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 210.799858][ T5913] ath9k_htc: Failed to initialize the device [ 210.808477][ T27] usb 3-1: ath9k_htc: USB layer deinitialized [ 211.559854][ T6570] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 211.649985][ T6557] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 211.743697][ T6570] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 211.769796][ T6570] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.791326][ T6570] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.806328][ T6570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.815656][ T6570] usb 5-1: SerialNumber: syz [ 211.846374][ T6557] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.871339][ T6557] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.885919][ T6557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.894809][ T6557] usb 3-1: Product: syz [ 211.899123][ T6557] usb 3-1: Manufacturer: syz [ 211.909942][ T6557] usb 3-1: SerialNumber: syz [ 212.044670][ T6570] usb 5-1: 0:2 : does not exist [ 212.061871][ T6570] usb 5-1: unit 255 not found! [ 212.091023][ T6570] usb 5-1: USB disconnect, device number 16 [ 212.136701][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.160740][ T6557] cdc_ncm 3-1:1.0: failed to get mac address [ 213.176630][ T6557] cdc_ncm 3-1:1.0: bind() failure [ 213.200491][ T6557] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 213.230023][ T6557] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 213.252060][ T6557] usbtest: probe of 3-1:1.1 failed with error -71 [ 213.289786][ T6557] usb 3-1: USB disconnect, device number 23 [ 214.027065][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.039175][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.049008][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.059799][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.068529][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 214.076340][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.141623][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.201695][ T8379] lo speed is unknown, defaulting to 1000 [ 214.284882][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.299144][ T5913] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 214.342102][ T28] audit: type=1326 audit(1756980850.257:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.401274][ T28] audit: type=1326 audit(1756980850.267:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.424090][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.438024][ T28] audit: type=1326 audit(1756980850.267:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.475388][ T28] audit: type=1326 audit(1756980850.267:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.498296][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 214.503731][ T28] audit: type=1326 audit(1756980850.267:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.534482][ T28] audit: type=1326 audit(1756980850.267:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.558394][ T28] audit: type=1326 audit(1756980850.267:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.558407][ T5913] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.558434][ T5913] usb 5-1: config 0 has no interface number 0 [ 214.581253][ T28] audit: type=1326 audit(1756980850.267:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.618762][ T28] audit: type=1326 audit(1756980850.267:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.2.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f885898ebe9 code=0x7ffc0000 [ 214.640875][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.640912][ T5913] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.640938][ T5913] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.640983][ T5913] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 214.641005][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.659032][ T5913] usb 5-1: config 0 descriptor?? [ 214.695859][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.719623][ T5913] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 214.826791][ T8379] chnl_net:caif_netlink_parms(): no params data found [ 214.948050][ T12] tipc: Left network mode [ 215.037587][ T8379] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.046127][ T8379] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.053497][ T8379] bridge_slave_0: entered allmulticast mode [ 215.060975][ T8379] bridge_slave_0: entered promiscuous mode [ 215.071239][ T8379] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.078471][ T8379] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.086838][ T8379] bridge_slave_1: entered allmulticast mode [ 215.094135][ T8379] bridge_slave_1: entered promiscuous mode [ 215.166516][ T8379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.219565][ T8379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.330404][ T8402] netlink: 'syz.2.706': attribute type 2 has an invalid length. [ 215.345433][ T8379] team0: Port device team_slave_0 added [ 215.359054][ T8379] team0: Port device team_slave_1 added [ 215.367457][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 215.536580][ T8407] vlan2: entered promiscuous mode [ 215.595006][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.615345][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.669849][ T8379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.725805][ T8379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.735959][ T8379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.787822][ T8379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.014287][ T8379] hsr_slave_0: entered promiscuous mode [ 216.025375][ T8379] hsr_slave_1: entered promiscuous mode [ 216.032085][ T8379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.040208][ T8379] Cannot create hsr debugfs directory [ 216.074335][ T8424] tipc: Enabled bearer , priority 0 [ 216.129852][ T5796] Bluetooth: hci2: command tx timeout [ 216.154091][ T8424] tipc: Resetting bearer [ 216.199328][ T8423] tipc: Disabling bearer [ 216.547472][ T12] hsr_slave_0: left promiscuous mode [ 216.570278][ T12] hsr_slave_1: left promiscuous mode [ 216.582786][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 216.589566][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 216.610553][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.618027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.643911][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.659209][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.672530][ T12] bridge_slave_1: left allmulticast mode [ 216.680672][ T12] bridge_slave_1: left promiscuous mode [ 216.686599][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.714207][ T12] bridge_slave_0: left allmulticast mode [ 216.725230][ T12] bridge_slave_0: left promiscuous mode [ 216.757232][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.816092][ T12] veth1_macvtap: left promiscuous mode [ 216.821880][ T12] veth0_macvtap: left promiscuous mode [ 216.827545][ T12] veth1_vlan: left promiscuous mode [ 216.834516][ T12] veth0_vlan: left promiscuous mode [ 217.020717][ T6566] usb 5-1: USB disconnect, device number 17 [ 217.757070][ T8463] binder: BINDER_SET_CONTEXT_MGR already set [ 217.763258][ T8463] binder: 8462:8463 ioctl 4018620d 200000000040 returned -16 [ 217.898211][ T8469] fuse: Bad value for 'fd' [ 218.007974][ T12] team0 (unregistering): Port device team_slave_1 removed [ 218.061872][ T12] team0 (unregistering): Port device team_slave_0 removed [ 218.111183][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.166758][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.200019][ T5796] Bluetooth: hci2: command tx timeout [ 218.859439][ T12] bond0 (unregistering): Released all slaves [ 219.020773][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 219.152644][ T8471] hsr_slave_1 (unregistering): left promiscuous mode [ 219.181930][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.719'. [ 219.388019][ T8379] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 219.444250][ T8379] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 219.493634][ T8379] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 219.550500][ T8379] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 219.686614][ T8492] binder: BINDER_SET_CONTEXT_MGR already set [ 219.713053][ T8492] binder: 8491:8492 ioctl 4018620d 200000000040 returned -16 [ 219.857171][ T8379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.926112][ T8379] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.937903][ T8505] loop2: detected capacity change from 0 to 256 [ 219.973118][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.980408][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.037466][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.044948][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.136479][ T8509] tipc: Started in network mode [ 220.160712][ T8509] tipc: Node identity d2fbf3e5c88, cluster identity 4711 [ 220.167975][ T8509] tipc: Enabled bearer , priority 0 [ 220.197140][ T8507] tipc: Resetting bearer [ 220.237685][ T8506] tipc: Disabling bearer [ 220.281756][ T5796] Bluetooth: hci2: command tx timeout [ 220.809796][ T6563] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 220.992979][ T6563] usb 5-1: Using ep0 maxpacket: 32 [ 221.026534][ T6563] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 221.043800][ T6563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.055853][ T6563] usb 5-1: config 0 descriptor?? [ 221.122626][ T8379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.588021][ T6563] cypress 0003:04B4:BCA1.0007: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0 [ 221.738413][ T6563] usb 5-1: USB disconnect, device number 18 [ 221.834934][ T8558] fido_id[8558]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 222.011071][ T8571] fuse: Bad value for 'group_id' [ 222.237685][ T8379] veth0_vlan: entered promiscuous mode [ 222.264790][ T8379] veth1_vlan: entered promiscuous mode [ 222.353616][ T8379] veth0_macvtap: entered promiscuous mode [ 222.360611][ T5796] Bluetooth: hci2: command tx timeout [ 222.408409][ T8379] veth1_macvtap: entered promiscuous mode [ 222.448233][ T8584] loop4: detected capacity change from 0 to 256 [ 222.470636][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.514755][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.547400][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.579628][ T8379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.596195][ T8379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.616985][ T8379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.683798][ T8379] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.719157][ T8379] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.738360][ T8379] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.770720][ T8379] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.003506][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.026570][ T8599] loop4: detected capacity change from 0 to 512 [ 223.042614][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.115155][ T8599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.746: bg 0: block 393: padding at end of block bitmap is not set [ 223.143753][ T8599] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 223.165301][ T8604] netlink: 'syz.2.748': attribute type 2 has an invalid length. [ 223.211297][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.748'. [ 223.221689][ T8599] EXT4-fs (loop4): 2 truncates cleaned up [ 223.228974][ T8599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.270026][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.277914][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.457304][ T8599] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 223.482248][ T8611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.751'. [ 223.556848][ T8614] capability: warning: `syz.3.752' uses deprecated v2 capabilities in a way that may be insecure [ 223.601465][ T6490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.669831][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 224.090082][ T27] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 224.289865][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 224.309889][ T8643] netlink: 'syz.3.758': attribute type 2 has an invalid length. [ 224.309948][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 224.343821][ T27] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 224.346398][ T8643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 224.356282][ T27] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 224.399298][ T27] usb 5-1: Product: syz [ 224.404488][ T27] usb 5-1: Manufacturer: syz [ 224.409392][ T27] usb 5-1: SerialNumber: syz [ 224.642760][ T27] usb 5-1: palm_os_3_probe - error -32 getting connection information [ 224.654667][ T27] visor: probe of 5-1:1.0 failed with error -32 [ 224.655311][ T8619] netlink: 'syz.4.753': attribute type 4 has an invalid length. [ 224.710178][ T6575] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 224.785663][ T27] usb 5-1: USB disconnect, device number 19 [ 224.900253][ T6575] usb 3-1: Using ep0 maxpacket: 32 [ 224.922454][ T6575] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 224.939956][ T6575] usb 3-1: config 0 has no interface number 0 [ 224.956417][ T6575] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 224.988705][ T6575] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 225.013711][ T6575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.026944][ T6575] usb 3-1: Product: syz [ 225.032955][ T6575] usb 3-1: Manufacturer: syz [ 225.054725][ T6575] usb 3-1: SerialNumber: syz [ 225.080063][ T6575] usb 3-1: config 0 descriptor?? [ 225.107109][ T6575] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 225.125001][ T6575] em28xx 3-1:0.132: Video interface 132 found: [ 225.515245][ T6575] em28xx 3-1:0.132: chip ID is em2884 [ 225.615286][ T8685] netlink: 'syz.4.768': attribute type 2 has an invalid length. [ 225.625630][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.768'. [ 225.919831][ T6575] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 225.943978][ T6575] em28xx 3-1:0.132: board has no eeprom [ 226.029802][ T6575] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 226.049746][ T6575] em28xx 3-1:0.132: analog set to bulk mode. [ 226.064792][ T9] em28xx 3-1:0.132: Registering V4L2 extension [ 226.091644][ T6575] usb 3-1: USB disconnect, device number 24 [ 226.121629][ T6575] em28xx 3-1:0.132: Disconnecting em28xx [ 226.373931][ T9] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 226.393147][ T9] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 226.420305][ T9] em28xx 3-1:0.132: No AC97 audio processor [ 226.457584][ T9] usb 3-1: Decoder not found [ 226.466909][ T9] em28xx 3-1:0.132: failed to create media graph [ 226.480324][ T9] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 226.531116][ T9] em28xx 3-1:0.132: Remote control support is not available for this card. [ 226.567632][ T6575] em28xx 3-1:0.132: Closing input extension [ 226.637123][ T6575] em28xx 3-1:0.132: Freeing device [ 226.855263][ T8724] netlink: 'syz.6.778': attribute type 2 has an invalid length. [ 226.884123][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.6.778'. [ 227.069922][ T6575] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 227.267389][ T6575] usb 3-1: Using ep0 maxpacket: 16 [ 227.311528][ T6575] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.339915][ T6575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.362341][ T6575] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.376199][ T6575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.390769][ T6575] usb 3-1: Product: syz [ 227.403833][ T6575] usb 3-1: Manufacturer: syz [ 227.418811][ T6575] usb 3-1: SerialNumber: syz [ 227.659592][ T6575] usb 3-1: 0:2 : does not exist [ 227.678094][ T6575] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 227.707603][ T6575] usb 3-1: USB disconnect, device number 25 [ 227.868278][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.269909][ T6566] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.454471][ T8795] loop2: detected capacity change from 0 to 256 [ 229.513404][ T6566] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.532898][ T6566] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.551554][ T6566] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.566421][ T6566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.602178][ T6566] usb 5-1: SerialNumber: syz [ 229.844044][ T6566] usb 5-1: 0:2 : does not exist [ 229.910135][ T6566] usb 5-1: USB disconnect, device number 20 [ 229.964243][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.209924][ T788] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 230.412061][ T788] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.443292][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.465600][ T788] usb 3-1: Product: syz [ 230.478688][ T788] usb 3-1: Manufacturer: syz [ 230.484515][ T788] usb 3-1: SerialNumber: syz [ 230.493783][ T788] usb 3-1: config 0 descriptor?? [ 230.704580][ T788] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.713122][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 230.902244][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 230.919571][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 230.929385][ T9] usb 5-1: config 0 has no interface number 0 [ 230.936041][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.947355][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.963365][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 230.972792][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 230.982199][ T9] usb 5-1: Product: syz [ 230.986488][ T9] usb 5-1: SerialNumber: syz [ 230.995830][ T9] usb 5-1: config 0 descriptor?? [ 231.011618][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 231.021636][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input9 [ 231.225105][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.234843][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.242170][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.249612][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.256862][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.264120][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.271374][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.278591][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.285813][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.293143][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 231.301861][ T9] usb 5-1: USB disconnect, device number 21 [ 231.307844][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 231.334428][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 232.148737][ T788] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 232.162318][ T788] usb 3-1: USB disconnect, device number 26 [ 233.240140][ T5795] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.249846][ T6575] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 233.306617][ T8865] netlink: 'syz.2.824': attribute type 2 has an invalid length. [ 233.444848][ T8870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.825'. [ 233.465213][ T6575] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.488809][ T6575] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.506885][ T6575] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.530117][ T6575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.538200][ T6575] usb 5-1: SerialNumber: syz [ 233.773231][ T6575] usb 5-1: 0:2 : does not exist [ 233.796146][ T6575] usb 5-1: USB disconnect, device number 22 [ 233.857541][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.304147][ T8890] loop2: detected capacity change from 0 to 4096 [ 234.331393][ T8894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 234.355553][ T8890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.503854][ T8890] fs-verity: sha256 using implementation "sha256-avx2" [ 234.688632][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.881050][ T6557] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 235.086655][ T6557] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 235.103898][ T6557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.131082][ T6557] usb 5-1: Product: syz [ 235.137258][ T6557] usb 5-1: Manufacturer: syz [ 235.151908][ T6557] usb 5-1: SerialNumber: syz [ 235.180975][ T6557] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.215723][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 235.523229][ T8934] fuse: Unknown parameter 'grou00000000000000000000' [ 235.680050][ T6566] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 235.716255][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.844'. [ 235.827515][ T6563] usb 5-1: USB disconnect, device number 23 [ 235.892593][ T6566] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.911233][ T6566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.922594][ T6566] usb 3-1: Product: syz [ 235.926823][ T6566] usb 3-1: Manufacturer: syz [ 235.928599][ T5796] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 235.932609][ T6566] usb 3-1: SerialNumber: syz [ 235.942874][ T5796] CPU: 0 PID: 5796 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 235.953734][ T5796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.963834][ T5796] Workqueue: hci2 hci_rx_work [ 235.968522][ T6566] usb 3-1: config 0 descriptor?? [ 235.968585][ T5796] Call Trace: [ 235.976948][ T5796] [ 235.979939][ T5796] dump_stack_lvl+0x16c/0x230 [ 235.984678][ T5796] ? show_regs_print_info+0x20/0x20 [ 235.989938][ T5796] ? load_image+0x3b0/0x3b0 [ 235.994476][ T5796] sysfs_create_dir_ns+0x256/0x280 [ 235.999624][ T5796] ? hci_rx_work+0x43a/0xd80 [ 236.004275][ T5796] ? sysfs_warn_dup+0xa0/0xa0 [ 236.009002][ T5796] ? do_raw_spin_unlock+0x121/0x230 [ 236.014236][ T5796] kobject_add_internal+0x6b8/0xc70 [ 236.019484][ T5796] kobject_add+0x156/0x220 [ 236.023944][ T5796] ? __rwlock_init+0x150/0x150 [ 236.028773][ T5796] ? kobject_init+0x1e0/0x1e0 [ 236.033479][ T5796] ? _raw_spin_unlock+0x28/0x40 [ 236.038366][ T5796] ? get_device_parent+0x366/0x390 [ 236.043526][ T5796] device_add+0x408/0xc20 [ 236.047888][ T5796] hci_conn_add_sysfs+0xd5/0x1e0 [ 236.052880][ T5796] le_conn_complete_evt+0xc37/0x1220 [ 236.058210][ T5796] ? hci_event_packet+0x4a7/0x1210 [ 236.063372][ T5796] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 236.069649][ T5796] ? __copy_skb_header+0xa7/0x550 [ 236.074714][ T5796] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 236.080408][ T5796] ? skb_pull_data+0xfb/0x200 [ 236.085126][ T5796] hci_le_enh_conn_complete_evt+0x189/0x460 [ 236.091037][ T5796] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 236.097489][ T5796] ? hci_remote_host_features_evt+0x160/0x160 [ 236.103689][ T5796] hci_event_packet+0x795/0x1210 [ 236.108693][ T5796] ? bis_list+0x290/0x290 [ 236.113069][ T5796] ? lockdep_hardirqs_on+0x98/0x150 [ 236.118299][ T5796] ? hci_send_to_monitor+0xd7/0x4f0 [ 236.123523][ T5796] hci_rx_work+0x43a/0xd80 [ 236.127974][ T5796] ? process_scheduled_works+0x957/0x15b0 [ 236.133726][ T5796] process_scheduled_works+0xa45/0x15b0 [ 236.139324][ T5796] ? assign_work+0x400/0x400 [ 236.143969][ T5796] ? assign_work+0x39e/0x400 [ 236.148604][ T5796] worker_thread+0xa55/0xfc0 [ 236.153278][ T5796] kthread+0x2fa/0x390 [ 236.157385][ T5796] ? pr_cont_work+0x560/0x560 [ 236.162106][ T5796] ? kthread_blkcg+0xd0/0xd0 [ 236.166716][ T5796] ret_from_fork+0x48/0x80 [ 236.171176][ T5796] ? kthread_blkcg+0xd0/0xd0 [ 236.175842][ T5796] ret_from_fork_asm+0x11/0x20 [ 236.180736][ T5796] [ 236.186397][ T5796] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 236.200861][ T5796] Bluetooth: hci2: failed to register connection device [ 236.226308][ T6566] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.444348][ T9] usb 5-1: Service connection timeout for: 256 [ 236.454513][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 236.463281][ T9] ath9k_htc: Failed to initialize the device [ 236.475704][ T6563] usb 5-1: ath9k_htc: USB layer deinitialized [ 236.511561][ T8956] loop4: detected capacity change from 0 to 128 [ 236.724692][ T8964] loop4: detected capacity change from 0 to 512 [ 236.735124][ T8964] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 236.743251][ T8964] UDF-fs: Scanning with blocksize 512 failed [ 236.755849][ T8964] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 236.763902][ T8964] UDF-fs: Scanning with blocksize 1024 failed [ 236.774461][ T8964] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 236.783115][ T8964] UDF-fs: Scanning with blocksize 2048 failed [ 236.791600][ T8964] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 236.805742][ T8964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.828679][ T28] audit: type=1800 audit(1756980872.747:19): pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.851" name="bus" dev="loop4" ino=42 res=0 errno=0 [ 237.020617][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.852'. [ 237.166779][ T8969] loop4: detected capacity change from 0 to 512 [ 237.178205][ T8969] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 237.231957][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 237.701298][ T6566] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 237.737171][ T6566] usb 3-1: USB disconnect, device number 27 [ 238.693015][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 239.400906][ T6575] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 239.609776][ T6575] usb 3-1: Using ep0 maxpacket: 32 [ 239.618348][ T6575] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 239.630111][ T6575] usb 3-1: config 0 has no interface number 0 [ 239.636354][ T6575] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 239.712529][ T6575] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 239.779090][ T6575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.846230][ T6575] usb 3-1: Product: syz [ 239.881992][ T6575] usb 3-1: Manufacturer: syz [ 239.882024][ T5796] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 239.897109][ T5796] Bluetooth: hci2: Injecting HCI hardware error event [ 239.907071][ T5795] Bluetooth: hci2: hardware error 0x00 [ 239.916144][ T9059] loop4: detected capacity change from 0 to 1024 [ 239.916772][ T6575] usb 3-1: SerialNumber: syz [ 239.996076][ T6575] usb 3-1: config 0 descriptor?? [ 240.038457][ T6575] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 240.051535][ T6575] em28xx 3-1:0.132: Video interface 132 found: [ 240.242240][ T9067] netlink: 108 bytes leftover after parsing attributes in process `syz.6.888'. [ 240.445738][ T6575] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 240.575688][ T9077] loop6: detected capacity change from 0 to 4096 [ 240.629033][ T9077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.634915][ T9080] binder: 9078:9080 ioctl 4018620d 0 returned -22 [ 240.693319][ T6575] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 240.709903][ T6575] em28xx 3-1:0.132: board has no eeprom [ 240.789797][ T6575] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 240.802600][ T6575] em28xx 3-1:0.132: analog set to bulk mode. [ 240.831175][ T6557] em28xx 3-1:0.132: Registering V4L2 extension [ 240.842366][ T6575] usb 3-1: USB disconnect, device number 28 [ 240.849368][ T6575] em28xx 3-1:0.132: Disconnecting em28xx [ 240.945020][ T8379] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.474245][ T6557] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 241.512866][ T6557] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 241.546542][ T6557] em28xx 3-1:0.132: No AC97 audio processor [ 241.570336][ T6557] usb 3-1: Decoder not found [ 241.581783][ T6557] em28xx 3-1:0.132: failed to create media graph [ 241.596100][ T6557] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 241.681102][ T6557] em28xx 3-1:0.132: Remote control support is not available for this card. [ 241.726133][ T6575] em28xx 3-1:0.132: Closing input extension [ 241.746524][ T6575] em28xx 3-1:0.132: Freeing device [ 242.048034][ T5795] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 242.139884][ T6575] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 242.175694][ T5795] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 242.341765][ T6575] usb 3-1: Using ep0 maxpacket: 16 [ 242.370548][ T6575] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.409917][ T6575] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.425157][ T6575] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.451218][ T9121] binder: 9120:9121 ioctl c0306201 0 returned -14 [ 242.469797][ T6575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.477965][ T6575] usb 3-1: Product: syz [ 242.498324][ T6575] usb 3-1: Manufacturer: syz [ 242.509744][ T6575] usb 3-1: SerialNumber: syz [ 242.609433][ T9076] syz.3.892: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 242.669900][ T9076] CPU: 1 PID: 9076 Comm: syz.3.892 Not tainted syzkaller #0 [ 242.677310][ T9076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.687512][ T9076] Call Trace: [ 242.690841][ T9076] [ 242.693813][ T9076] dump_stack_lvl+0x16c/0x230 [ 242.698547][ T9076] ? show_regs_print_info+0x20/0x20 [ 242.703889][ T9076] ? load_image+0x3b0/0x3b0 [ 242.708458][ T9076] ? __rcu_read_unlock+0x7c/0xd0 [ 242.713451][ T9076] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 242.720011][ T9076] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 242.726570][ T9076] warn_alloc+0x210/0x300 [ 242.730963][ T9076] ? zone_watermark_ok_safe+0x230/0x230 [ 242.736577][ T9076] ? _raw_spin_unlock+0x28/0x40 [ 242.741507][ T9076] ? netlink_rcv_skb+0x216/0x480 [ 242.746504][ T9076] __vmalloc_node_range+0x662/0x1320 [ 242.751843][ T9076] ? __asan_memset+0x22/0x40 [ 242.756517][ T9076] ? free_vm_area+0x50/0x50 [ 242.757094][ T6575] usb 3-1: 0:2 : does not exist [ 242.761062][ T9076] ? kvmalloc_node+0x70/0x180 [ 242.761134][ T9076] ? rcu_is_watching+0x15/0xb0 [ 242.761164][ T9076] ? kvmalloc_node+0x70/0x180 [ 242.761188][ T9076] ? trace_kmalloc+0x1f/0xa0 [ 242.761219][ T9076] kvmalloc_node+0x13f/0x180 [ 242.761246][ T9076] ? hash_netport4_resize+0x232/0x1b50 [ 242.761278][ T9076] hash_netport4_resize+0x232/0x1b50 [ 242.761299][ T9076] ? hash_netport4_uadt+0xc1f/0xed0 [ 242.761319][ T9076] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 242.801884][ T6575] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 242.805664][ T9076] ? hash_netport4_uadt+0xed0/0xed0 [ 242.805697][ T9076] ? hash_netport4_kadt+0x560/0x560 [ 242.829368][ T9076] ? _local_bh_enable+0xa0/0xa0 [ 242.834398][ T9076] call_ad+0x43f/0xae0 [ 242.838506][ T9076] ? ip_set_ad+0x930/0x930 [ 242.842968][ T9076] ? __nla_parse+0x40/0x50 [ 242.847426][ T9076] ip_set_ad+0x787/0x930 [ 242.851707][ T9076] ? trace_raw_output_contention_end+0x90/0xd0 [ 242.857965][ T9076] ? ip_set_dump_done+0x1e0/0x1e0 [ 242.863021][ T9076] ? rcu_is_watching+0x15/0xb0 [ 242.867909][ T9076] nfnetlink_rcv_msg+0xb49/0x1130 [ 242.872958][ T9076] ? nfnetlink_rcv_msg+0x20e/0x1130 [ 242.878188][ T9076] ? nfnetlink_unbind+0x160/0x160 [ 242.883281][ T9076] netlink_rcv_skb+0x216/0x480 [ 242.888069][ T9076] ? nfnetlink_unbind+0x160/0x160 [ 242.893110][ T9076] ? netlink_ack+0x1110/0x1110 [ 242.897927][ T9076] ? apparmor_capable+0x137/0x1a0 [ 242.902995][ T9076] ? bpf_lsm_capable+0x9/0x10 [ 242.907800][ T9076] ? security_capable+0x89/0xb0 [ 242.912685][ T9076] nfnetlink_rcv+0x274/0x2180 [ 242.917407][ T9076] ? mark_lock+0x94/0x320 [ 242.921784][ T9076] ? mark_lock+0x94/0x320 [ 242.926152][ T9076] ? __lock_acquire+0x1260/0x7c80 [ 242.931211][ T9076] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 242.936785][ T9076] ? kmalloc_reserve+0x95/0x260 [ 242.941678][ T9076] ? verify_lock_unused+0x140/0x140 [ 242.946905][ T9076] ? __netlink_lookup+0xbe/0x810 [ 242.951886][ T9076] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.957173][ T9076] ? __lock_acquire+0x7c80/0x7c80 [ 242.962243][ T9076] ? net_generic+0x1e/0x240 [ 242.966789][ T9076] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.972027][ T9076] netlink_unicast+0x751/0x8d0 [ 242.976822][ T9076] netlink_sendmsg+0x8c1/0xbe0 [ 242.981711][ T9076] ? netlink_getsockopt+0x580/0x580 [ 242.986959][ T9076] ? aa_sock_msg_perm+0x94/0x150 [ 242.991941][ T9076] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 242.997256][ T9076] ? security_socket_sendmsg+0x80/0xa0 [ 243.002739][ T9076] ? netlink_getsockopt+0x580/0x580 [ 243.007976][ T9076] ____sys_sendmsg+0x5bf/0x950 [ 243.012770][ T9076] ? __asan_memset+0x22/0x40 [ 243.017378][ T9076] ? __sys_sendmsg_sock+0x30/0x30 [ 243.022432][ T9076] ? __import_iovec+0x5f2/0x860 [ 243.027333][ T9076] ? import_iovec+0x73/0xa0 [ 243.031861][ T9076] ___sys_sendmsg+0x220/0x290 [ 243.036562][ T9076] ? __sys_sendmsg+0x270/0x270 [ 243.041387][ T9076] __se_sys_sendmsg+0x1a5/0x270 [ 243.046272][ T9076] ? __x64_sys_sendmsg+0x80/0x80 [ 243.051276][ T9076] ? lockdep_hardirqs_on+0x98/0x150 [ 243.056598][ T9076] do_syscall_64+0x55/0xb0 [ 243.061037][ T9076] ? clear_bhb_loop+0x40/0x90 [ 243.065759][ T9076] ? clear_bhb_loop+0x40/0x90 [ 243.070480][ T9076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.076435][ T9076] RIP: 0033:0x7fb0a138ebe9 [ 243.080900][ T9076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.100548][ T9076] RSP: 002b:00007fb0a2239038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.109008][ T9076] RAX: ffffffffffffffda RBX: 00007fb0a15c5fa0 RCX: 00007fb0a138ebe9 [ 243.117001][ T9076] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 243.124991][ T9076] RBP: 00007fb0a1411e19 R08: 0000000000000000 R09: 0000000000000000 [ 243.132984][ T9076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.141004][ T9076] R13: 00007fb0a15c6038 R14: 00007fb0a15c5fa0 R15: 00007fff63f811a8 [ 243.149019][ T9076] [ 243.177860][ T9076] Mem-Info: [ 243.229729][ T6575] usb 3-1: USB disconnect, device number 29 [ 243.252323][ T9076] active_anon:6853 inactive_anon:0 isolated_anon:0 [ 243.252323][ T9076] active_file:11319 inactive_file:39965 isolated_file:0 [ 243.252323][ T9076] unevictable:768 dirty:197 writeback:0 [ 243.252323][ T9076] slab_reclaimable:10816 slab_unreclaimable:95550 [ 243.252323][ T9076] mapped:25049 shmem:1398 pagetables:853 [ 243.252323][ T9076] sec_pagetables:0 bounce:0 [ 243.252323][ T9076] kernel_misc_reclaimable:0 [ 243.252323][ T9076] free:1348786 free_pcp:10565 free_cma:0 [ 243.393976][ T9076] Node 0 active_anon:27312kB inactive_anon:0kB active_file:45276kB inactive_file:159656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100196kB dirty:788kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13072kB pagetables:3312kB sec_pagetables:0kB all_unreclaimable? no [ 243.438678][ T9076] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 243.494203][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.585808][ T9076] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.728996][ T9076] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 243.752826][ T9076] Node 0 DMA32 free:1487540kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:27364kB inactive_anon:0kB active_file:45276kB inactive_file:158332kB unevictable:1536kB writepending:788kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:22680kB local_pcp:19452kB free_cma:0kB [ 243.820896][ T9076] lowmem_reserve[]: 0 0 1 1 1 [ 243.825795][ T9076] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.901026][ T9076] lowmem_reserve[]: 0 0 0 0 0 [ 243.916364][ T9076] Node 1 Normal free:3892104kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19488kB local_pcp:11744kB free_cma:0kB [ 243.977721][ T9147] loop6: detected capacity change from 0 to 2048 [ 243.996325][ T9076] lowmem_reserve[]: 0 0 0 0 0 [ 244.043484][ T9147] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 244.058054][ T9076] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.071289][ T9076] Node 0 DMA32: 18*4kB (ME) 185*8kB (UME) 351*16kB (UM) 178*32kB (UME) 238*64kB (UME) 48*128kB (UME) 12*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 7*2048kB (UME) 349*4096kB (M) = 1486784kB [ 244.089947][ T9076] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 244.098551][ T9147] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 244.119757][ T9076] Node 1 Normal: 270*4kB (UME) 74*8kB (UME) 50*16kB (UME) 71*32kB (UME) 12*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (U) 0*1024kB 1*2048kB (U) 948*4096kB (M) = 3892104kB [ 244.149952][ T9147] UDF-fs: Scanning with blocksize 512 failed [ 244.185894][ T9076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.217239][ T9147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.250338][ T9076] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.289887][ T9076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.299523][ T9076] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.365576][ T9076] 52935 total pagecache pages [ 244.370721][ T9076] 0 pages in swap cache [ 244.402912][ T9076] Free swap = 124720kB [ 244.407152][ T9076] Total swap = 124996kB [ 244.422227][ T9076] 2097051 pages RAM [ 244.436425][ T9076] 0 pages HighMem/MovableOnly [ 244.449814][ T9076] 416139 pages reserved [ 244.472114][ T9076] 0 pages cma reserved [ 244.680092][ T9160] binder: 9159:9160 ioctl c0306201 0 returned -14 [ 245.208853][ T5795] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 245.975183][ T5796] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 246.162328][ T9228] overlayfs: failed to clone upperpath [ 246.699974][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 246.895793][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 246.914429][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.938752][ T9] usb 3-1: Product: syz [ 246.946011][ T9] usb 3-1: Manufacturer: syz [ 246.955770][ T9] usb 3-1: SerialNumber: syz [ 246.964740][ T5795] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 246.996298][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 247.026745][ T6575] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 247.402439][ T9281] overlayfs: missing 'lowerdir' [ 247.802438][ T9] usb 3-1: USB disconnect, device number 30 [ 248.150085][ T6570] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 248.178027][ T9307] vxcan1: entered allmulticast mode [ 248.281371][ T6575] usb 3-1: Service connection timeout for: 256 [ 248.298125][ T6575] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 248.325720][ T6575] ath9k_htc: Failed to initialize the device [ 248.339942][ T6570] usb 5-1: Using ep0 maxpacket: 16 [ 248.360538][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 248.374464][ T6570] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.409393][ T6570] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.428353][ T6570] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.439418][ T6570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.471520][ T6570] usb 5-1: Product: syz [ 248.475874][ T6570] usb 5-1: Manufacturer: syz [ 248.496080][ T9315] loop2: detected capacity change from 0 to 1024 [ 248.509976][ T6570] usb 5-1: SerialNumber: syz [ 248.770094][ T6570] usb 5-1: 0:2 : does not exist [ 248.785304][ T6570] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 248.860951][ T6570] usb 5-1: USB disconnect, device number 24 [ 248.942026][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.956676][ T9354] loop4: detected capacity change from 0 to 1024 [ 251.553267][ T6563] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 251.773079][ T6563] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.804142][ T6563] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.821337][ T6563] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.839901][ T6563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.858374][ T6563] usb 3-1: SerialNumber: syz [ 252.096869][ T6563] usb 3-1: 0:2 : does not exist [ 252.121486][ T6563] usb 3-1: USB disconnect, device number 31 [ 252.175464][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.249552][ T5795] Bluetooth: hci1: unexpected event for opcode 0x080e [ 252.606490][ T9427] loop4: detected capacity change from 0 to 1024 [ 252.681124][ T9427] hfsplus: catalog searching failed [ 252.716061][ T12] hfsplus: bad catalog file entry [ 252.724077][ T12] hfsplus: b-tree write err: -5, ino 3 [ 252.788700][ T9430] loop2: detected capacity change from 0 to 2048 [ 252.828795][ T9430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.962841][ T38] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.983403][ T38] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 252.996322][ T38] EXT4-fs (loop2): This should not happen!! Data will be lost [ 252.996322][ T38] [ 253.009735][ T38] EXT4-fs (loop2): Total free blocks count 0 [ 253.015813][ T38] EXT4-fs (loop2): Free/Dirty block details [ 253.039708][ T38] EXT4-fs (loop2): free_blocks=2415919104 [ 253.045534][ T38] EXT4-fs (loop2): dirty_blocks=16 [ 253.060077][ T38] EXT4-fs (loop2): Block reservation details [ 253.069134][ T38] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 253.093199][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.107859][ T6570] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 253.293918][ T6570] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 253.316815][ T6570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.339840][ T6570] usb 5-1: Product: syz [ 253.344096][ T6570] usb 5-1: Manufacturer: syz [ 253.363904][ T6570] usb 5-1: SerialNumber: syz [ 253.387633][ T6570] usb 5-1: config 0 descriptor?? [ 253.621098][ T6570] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 253.681910][ T1091] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.887001][ T1091] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.052742][ T1091] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.095461][ T5795] Bluetooth: hci1: unknown advertising packet type: 0x69 [ 254.095582][ T5795] Bluetooth: hci1: Malformed LE Event: 0x02 [ 254.147156][ T6575] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.166851][ T6575] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.230641][ T1091] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.312810][ T9455] fido_id[9455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.796665][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.807503][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.823032][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.840036][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.857498][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 254.867119][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.105692][ T6570] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 255.126524][ T9462] lo speed is unknown, defaulting to 1000 [ 255.128063][ T6570] usb 5-1: USB disconnect, device number 25 [ 255.370911][ T6557] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 255.582249][ T6557] usb 3-1: Using ep0 maxpacket: 16 [ 255.591020][ T6557] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.607185][ T6557] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.612826][ T9462] chnl_net:caif_netlink_parms(): no params data found [ 255.634379][ T6557] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.648679][ T6557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.660058][ T6557] usb 3-1: Product: syz [ 255.664467][ T6557] usb 3-1: Manufacturer: syz [ 255.684885][ T6557] usb 3-1: SerialNumber: syz [ 255.889165][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.895625][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.922339][ T6557] usb 3-1: 0:2 : does not exist [ 255.978520][ T6557] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 256.024423][ T6557] usb 3-1: USB disconnect, device number 32 [ 256.064782][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.166881][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.175446][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.182973][ T9462] bridge_slave_0: entered allmulticast mode [ 256.192916][ T9462] bridge_slave_0: entered promiscuous mode [ 256.211790][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.222059][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.229477][ T9462] bridge_slave_1: entered allmulticast mode [ 256.251428][ T9462] bridge_slave_1: entered promiscuous mode [ 256.281061][ T5796] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 256.290991][ T5796] Bluetooth: hci1: Injecting HCI hardware error event [ 256.300589][ T5795] Bluetooth: hci1: hardware error 0x00 [ 256.382962][ T9462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.399292][ T1091] hsr_slave_0: left promiscuous mode [ 256.406357][ T1091] hsr_slave_1: left promiscuous mode [ 256.417310][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.428766][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.458053][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.477486][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.497465][ T1091] bridge_slave_1: left allmulticast mode [ 256.519843][ T1091] bridge_slave_1: left promiscuous mode [ 256.530062][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.599484][ T1091] bridge_slave_0: left allmulticast mode [ 256.634828][ T1091] bridge_slave_0: left promiscuous mode [ 256.641051][ T6563] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 256.676473][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.746528][ T1091] veth1_macvtap: left promiscuous mode [ 256.757241][ T1091] veth0_macvtap: left promiscuous mode [ 256.766703][ T1091] veth1_vlan: left promiscuous mode [ 256.778453][ T1091] veth0_vlan: left promiscuous mode [ 256.851740][ T6563] usb 5-1: too many configurations: 177, using maximum allowed: 8 [ 256.906196][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.920593][ T5796] Bluetooth: hci2: command tx timeout [ 256.927733][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.961173][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.998520][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.027163][ T9523] loop2: detected capacity change from 0 to 256 [ 257.039349][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.081176][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.091319][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.093541][ T9523] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 257.109894][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.133981][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.149726][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.178606][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.212252][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.233103][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.273477][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.332789][ T6563] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.357728][ T6563] usb 5-1: config 0 interface 0 has no altsetting 0 [ 257.376714][ T6563] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 257.387672][ T6563] usb 5-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 257.401408][ T6563] usb 5-1: Product: syz [ 257.405967][ T6563] usb 5-1: Manufacturer: syz [ 257.428425][ T6563] usb 5-1: SerialNumber: syz [ 257.436162][ T6563] usb 5-1: config 0 descriptor?? [ 257.455724][ T6563] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 257.489397][ T6563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.512999][ T6563] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 257.537730][ T6563] usb 5-1: media controller created [ 257.589251][ T6563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.723761][ T6563] DVB: Unable to find symbol tda10046_attach() [ 257.738467][ T6563] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 257.748529][ T6563] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 258.193144][ T27] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 258.226518][ T5796] Bluetooth: hci3: unknown advertising packet type: 0x69 [ 258.228442][ T5796] Bluetooth: hci3: Malformed LE Event: 0x02 [ 258.251640][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 258.361044][ T5795] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 258.387824][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 258.416104][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 258.433528][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.452490][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.474820][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.480064][ T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.494999][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.504868][ T27] usb 3-1: Product: syz [ 258.509131][ T27] usb 3-1: Manufacturer: syz [ 258.514318][ T27] usb 3-1: SerialNumber: syz [ 258.565587][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.750561][ T27] usb 3-1: 0:2 : does not exist [ 258.767491][ T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 258.816193][ T27] usb 3-1: USB disconnect, device number 33 [ 258.862471][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.000086][ T5795] Bluetooth: hci2: command tx timeout [ 259.378527][ T1091] bond0 (unregistering): Released all slaves [ 259.546401][ T9462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.626823][ T6563] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 259.648618][ T6563] usb 5-1: USB disconnect, device number 26 [ 259.671093][ T6575] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 259.765548][ T9462] team0: Port device team_slave_0 added [ 259.780513][ T9462] team0: Port device team_slave_1 added [ 259.885038][ T6575] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.899728][ T6575] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.908113][ T6575] usb 3-1: Product: syz [ 259.915134][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.925492][ T6575] usb 3-1: Manufacturer: syz [ 259.943342][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.980152][ T6575] usb 3-1: SerialNumber: syz [ 260.003192][ T6575] usb 3-1: config 0 descriptor?? [ 260.039813][ T9462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.072932][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.091338][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.159737][ T9462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.269501][ T6575] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.395090][ T9462] hsr_slave_0: entered promiscuous mode [ 260.419844][ T9462] hsr_slave_1: entered promiscuous mode [ 260.430118][ T9462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.448548][ T9462] Cannot create hsr debugfs directory [ 260.908536][ T9462] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 260.926918][ T9462] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 260.945878][ T9462] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 260.964400][ T9462] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 261.080042][ T5795] Bluetooth: hci2: command tx timeout [ 261.176193][ T9462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.204681][ T9462] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.227227][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.234506][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.264046][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.271322][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.703102][ T6575] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 261.750697][ T6575] usb 3-1: USB disconnect, device number 34 [ 261.786719][ T9462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.340599][ T6563] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 262.414536][ T9639] loop2: detected capacity change from 0 to 256 [ 262.561908][ T9639] FAT-fs (loop2): Directory bread(block 64) failed [ 262.563629][ T6563] usb 5-1: Using ep0 maxpacket: 32 [ 262.578369][ T9639] FAT-fs (loop2): Directory bread(block 65) failed [ 262.595443][ T9639] FAT-fs (loop2): Directory bread(block 66) failed [ 262.602383][ T9462] veth0_vlan: entered promiscuous mode [ 262.608408][ T9639] FAT-fs (loop2): Directory bread(block 67) failed [ 262.616671][ T6563] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 262.638620][ T9639] FAT-fs (loop2): Directory bread(block 68) failed [ 262.642061][ T6563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.664787][ T9639] FAT-fs (loop2): Directory bread(block 69) failed [ 262.675966][ T9462] veth1_vlan: entered promiscuous mode [ 262.684528][ T6563] usb 5-1: config 0 descriptor?? [ 262.699524][ T9639] FAT-fs (loop2): Directory bread(block 70) failed [ 262.712587][ T6563] gspca_main: sunplus-2.14.0 probing 041e:400b [ 262.726322][ T9639] FAT-fs (loop2): Directory bread(block 71) failed [ 262.760260][ T9639] FAT-fs (loop2): Directory bread(block 72) failed [ 262.762990][ T9462] veth0_macvtap: entered promiscuous mode [ 262.778280][ T9639] FAT-fs (loop2): Directory bread(block 73) failed [ 262.786632][ T9462] veth1_macvtap: entered promiscuous mode [ 262.826610][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.842988][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.856870][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.872723][ T9462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.891532][ T9462] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.912077][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.939343][ T9462] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.969092][ T9462] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.985784][ T9462] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.006227][ T9462] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.163908][ T5795] Bluetooth: hci2: command tx timeout [ 263.261970][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.290748][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.390549][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.398436][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.522064][ T6563] gspca_sunplus: reg_w_riv err -71 [ 263.527353][ T6563] sunplus: probe of 5-1:0.0 failed with error -71 [ 263.561716][ T6563] usb 5-1: USB disconnect, device number 27 [ 263.654881][ T5795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 263.665477][ T5795] CPU: 0 PID: 5795 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 263.673051][ T5795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.683119][ T5795] Workqueue: hci2 hci_rx_work [ 263.687814][ T5795] Call Trace: [ 263.691099][ T5795] [ 263.694042][ T5795] dump_stack_lvl+0x16c/0x230 [ 263.698734][ T5795] ? show_regs_print_info+0x20/0x20 [ 263.703973][ T5795] ? load_image+0x3b0/0x3b0 [ 263.708497][ T5795] sysfs_create_dir_ns+0x256/0x280 [ 263.713631][ T5795] ? hci_rx_work+0x43a/0xd80 [ 263.718237][ T5795] ? sysfs_warn_dup+0xa0/0xa0 [ 263.722936][ T5795] ? do_raw_spin_unlock+0x121/0x230 [ 263.728150][ T5795] kobject_add_internal+0x6b8/0xc70 [ 263.733390][ T5795] kobject_add+0x156/0x220 [ 263.737855][ T5795] ? __rwlock_init+0x150/0x150 [ 263.742679][ T5795] ? kobject_init+0x1e0/0x1e0 [ 263.747403][ T5795] ? _raw_spin_unlock+0x28/0x40 [ 263.752278][ T5795] ? get_device_parent+0x366/0x390 [ 263.757416][ T5795] device_add+0x408/0xc20 [ 263.761768][ T5795] hci_conn_add_sysfs+0xd5/0x1e0 [ 263.766725][ T5795] le_conn_complete_evt+0xc37/0x1220 [ 263.772029][ T5795] ? hci_event_packet+0x4a7/0x1210 [ 263.777168][ T5795] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 263.783440][ T5795] ? __copy_skb_header+0xa7/0x550 [ 263.788505][ T5795] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 263.794156][ T5795] ? skb_pull_data+0xfb/0x200 [ 263.798874][ T5795] hci_le_enh_conn_complete_evt+0x189/0x460 [ 263.804786][ T5795] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 263.811219][ T5795] ? hci_remote_host_features_evt+0x160/0x160 [ 263.817302][ T5795] hci_event_packet+0x795/0x1210 [ 263.822354][ T5795] ? bis_list+0x290/0x290 [ 263.826705][ T5795] ? lockdep_hardirqs_on+0x98/0x150 [ 263.831928][ T5795] ? hci_send_to_monitor+0xd7/0x4f0 [ 263.837142][ T5795] hci_rx_work+0x43a/0xd80 [ 263.841609][ T5795] ? process_scheduled_works+0x957/0x15b0 [ 263.847352][ T5795] process_scheduled_works+0xa45/0x15b0 [ 263.852929][ T5795] ? assign_work+0x400/0x400 [ 263.857620][ T5795] ? assign_work+0x39e/0x400 [ 263.862230][ T5795] worker_thread+0xa55/0xfc0 [ 263.866848][ T5795] kthread+0x2fa/0x390 [ 263.870922][ T5795] ? pr_cont_work+0x560/0x560 [ 263.875609][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 263.880214][ T5795] ret_from_fork+0x48/0x80 [ 263.884640][ T5795] ? kthread_blkcg+0xd0/0xd0 [ 263.889239][ T5795] ret_from_fork_asm+0x11/0x20 [ 263.894025][ T5795] [ 263.899074][ T5795] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 263.913733][ T5795] Bluetooth: hci2: failed to register connection device [ 264.325911][ T9675] syzkaller0: entered promiscuous mode [ 264.335898][ T9675] syzkaller0: entered allmulticast mode [ 264.919728][ T6563] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 265.131897][ T6563] usb 8-1: too many configurations: 177, using maximum allowed: 8 [ 265.152451][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.183435][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.205666][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.229711][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.245061][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.269728][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.277922][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.299078][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.328504][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.350193][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.358769][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.379767][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.387970][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.410157][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.420892][ T6563] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.439703][ T6563] usb 8-1: config 0 interface 0 has no altsetting 0 [ 265.464350][ T6563] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 265.490113][ T6563] usb 8-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 265.509132][ T6563] usb 8-1: Product: syz [ 265.517153][ T6563] usb 8-1: Manufacturer: syz [ 265.532403][ T6563] usb 8-1: SerialNumber: syz [ 265.584045][ T6563] usb 8-1: config 0 descriptor?? [ 265.615028][ T6563] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 265.648750][ T6563] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.690335][ T6563] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 265.699086][ T6563] usb 8-1: media controller created [ 265.770281][ T6563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.908295][ T6563] DVB: Unable to find symbol tda10046_attach() [ 265.915915][ T6563] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 265.928391][ T6563] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 265.949787][ T6557] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 266.139806][ T6557] usb 5-1: Using ep0 maxpacket: 16 [ 266.150513][ T6557] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.161417][ T6557] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.175481][ T6557] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 266.185320][ T6557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.206407][ T6557] usb 5-1: Product: syz [ 266.215507][ T6557] usb 5-1: Manufacturer: syz [ 266.229443][ T6557] usb 5-1: SerialNumber: syz [ 266.348843][ T5795] Bluetooth: hci2: unknown advertising packet type: 0x69 [ 266.348941][ T5795] Bluetooth: hci2: Malformed LE Event: 0x02 [ 266.374918][ T6563] dvb_usb_m920x: probe of 8-1:0.0 failed with error -71 [ 266.453223][ T6563] usb 8-1: USB disconnect, device number 2 [ 266.458691][ T6557] usb 5-1: 0:2 : does not exist [ 266.484305][ T6557] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 266.547186][ T6557] usb 5-1: USB disconnect, device number 28 [ 266.704102][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.550577][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1079'. [ 268.719742][ T6563] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 268.890139][ T6566] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 268.922382][ T6563] usb 8-1: Using ep0 maxpacket: 16 [ 268.935117][ T6563] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.946425][ T6563] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.964197][ T6563] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.976587][ T6563] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.987353][ T6563] usb 8-1: Product: syz [ 268.994155][ T6563] usb 8-1: Manufacturer: syz [ 268.998965][ T6563] usb 8-1: SerialNumber: syz [ 269.083454][ T6566] usb 5-1: too many configurations: 177, using maximum allowed: 8 [ 269.094967][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.106503][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.117701][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.135413][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.146084][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.157008][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.174966][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.186061][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.195217][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.206049][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.214942][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.232637][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.241496][ T6563] usb 8-1: 0:2 : does not exist [ 269.253055][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.264922][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.275635][ T6566] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.286634][ T6566] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.294006][ T6563] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 269.307739][ T6566] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 269.317615][ T6566] usb 5-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 269.328578][ T6566] usb 5-1: Product: syz [ 269.347257][ T6563] usb 8-1: USB disconnect, device number 3 [ 269.365392][ T6566] usb 5-1: Manufacturer: syz [ 269.376209][ T6566] usb 5-1: SerialNumber: syz [ 269.405435][ T6566] usb 5-1: config 0 descriptor?? [ 269.417192][ T6566] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 269.426700][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.443388][ T6566] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.459304][ T6566] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 269.487267][ T6566] usb 5-1: media controller created [ 269.557619][ T6566] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.716075][ T6566] DVB: Unable to find symbol tda10046_attach() [ 269.750142][ T6566] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 269.758825][ T6566] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 269.795653][ T28] audit: type=1326 audit(1756980905.717:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9808 comm="syz.2.1083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f885898ebe9 code=0x0 [ 270.174355][ T5795] Bluetooth: hci3: unknown advertising packet type: 0x69 [ 270.174438][ T5795] Bluetooth: hci3: Malformed LE Event: 0x02 [ 270.175857][ T6566] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 270.277793][ T6566] usb 5-1: USB disconnect, device number 29 [ 270.399542][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1090'. [ 271.231253][ T6575] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 271.460058][ T6575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 271.489189][ T6575] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 271.505576][ T9867] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 271.520405][ T6575] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 271.541319][ T6575] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 271.560021][ T6575] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 271.576035][ T6575] usb 5-1: Manufacturer: syz [ 271.595643][ T6575] usb 5-1: config 0 descriptor?? [ 271.613523][ T6575] smsusb:smsusb_probe: board id=9, interface number 0 [ 271.625963][ T6575] smsusb:smsusb_probe: Device initialized with return code -19 [ 271.781128][ T9875] syzkaller0: entered promiscuous mode [ 271.786807][ T9875] syzkaller0: entered allmulticast mode [ 271.828446][ T9] usb 5-1: USB disconnect, device number 30 [ 272.009763][ T6575] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 272.038002][ T9877] net_ratelimit: 10 callbacks suppressed [ 272.038015][ T9877] dccp_invalid_packet: P.Data Offset(4) too small [ 272.237005][ T6575] usb 3-1: too many configurations: 177, using maximum allowed: 8 [ 272.254822][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.269022][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.282753][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.296808][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.308457][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.347779][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.397467][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.434194][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.499435][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.539716][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.559752][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.577497][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.617889][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.648594][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.657504][ T6575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.684629][ T6575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 272.721685][ T6575] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 272.741895][ T6575] usb 3-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 272.753447][ T9893] netlink: 'syz.4.1114': attribute type 3 has an invalid length. [ 272.768471][ T6575] usb 3-1: Product: syz [ 272.771709][ T9893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1114'. [ 272.779691][ T6575] usb 3-1: Manufacturer: syz [ 272.786433][ T6575] usb 3-1: SerialNumber: syz [ 272.807726][ T6575] usb 3-1: config 0 descriptor?? [ 272.830508][ T6575] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 272.861682][ T6575] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 272.882802][ T6575] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 272.896287][ T6575] usb 3-1: media controller created [ 272.933018][ T6575] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.025793][ T6575] DVB: Unable to find symbol tda10046_attach() [ 273.041111][ T6575] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 273.054069][ T6575] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 273.473294][ T5795] Bluetooth: hci0: unknown advertising packet type: 0x69 [ 273.473407][ T5795] Bluetooth: hci0: Malformed LE Event: 0x02 [ 273.491352][ T6575] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 273.501556][ T9899] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:99:29 [ 273.520925][ T9899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1116'. [ 273.525248][ T6575] usb 3-1: USB disconnect, device number 35 [ 273.933196][ T6557] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 274.119759][ T6557] usb 5-1: Using ep0 maxpacket: 32 [ 274.128392][ T6557] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 274.149610][ T6557] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 274.159230][ T6557] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 274.168633][ T6557] usb 5-1: config 1 has no interface number 0 [ 274.175099][ T6557] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.194630][ T6557] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 274.209150][ T6557] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 274.225474][ T6557] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.265654][ T6557] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 274.506969][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1127'. [ 274.515216][ T6557] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 274.960763][ T6557] usb 5-1: USB disconnect, device number 31 [ 274.978711][ T6557] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 275.659826][ T6557] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 275.853454][ T9957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1137'. [ 275.860875][ T6557] usb 3-1: too many configurations: 177, using maximum allowed: 8 [ 275.896593][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.909245][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.918673][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.943608][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.961406][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.972219][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.984351][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.995833][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.004511][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.019410][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.029567][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.066848][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.108342][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.122603][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.151688][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.173646][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 276.204413][ T6557] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 276.226589][ T6557] usb 3-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 276.235592][ T6557] usb 3-1: Product: syz [ 276.239927][ T6557] usb 3-1: Manufacturer: syz [ 276.244636][ T6557] usb 3-1: SerialNumber: syz [ 276.263915][ T6557] usb 3-1: config 0 descriptor?? [ 276.274128][ T6557] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 276.369126][ T6557] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.417820][ T6557] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 276.428394][ T6557] usb 3-1: media controller created [ 276.451604][ T6557] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.563914][ T6557] DVB: Unable to find symbol tda10046_attach() [ 276.590070][ T6557] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 276.598990][ T6557] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 277.026392][ T5795] Bluetooth: hci0: unknown advertising packet type: 0x69 [ 277.026505][ T5795] Bluetooth: hci0: Malformed LE Event: 0x02 [ 277.054446][ T6557] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 277.086888][ T6557] usb 3-1: USB disconnect, device number 36 [ 277.195201][ T9981] syzkaller0: entered promiscuous mode [ 277.223389][ T9981] syzkaller0: entered allmulticast mode [ 279.109881][ T6557] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 279.300874][ T6557] usb 3-1: too many configurations: 177, using maximum allowed: 8 [ 279.310349][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.340028][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.348476][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.373863][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.389947][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.422097][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.431215][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.459820][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.472008][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.506979][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.536438][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.580709][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.615256][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.643594][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.660861][ T6557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.686336][ T6557] usb 3-1: config 0 interface 0 has no altsetting 0 [ 279.710737][ T6557] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 279.739754][ T6557] usb 3-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 279.755001][ T6557] usb 3-1: Product: syz [ 279.768236][ T6557] usb 3-1: Manufacturer: syz [ 279.779738][ T6557] usb 3-1: SerialNumber: syz [ 279.803981][ T6557] usb 3-1: config 0 descriptor?? [ 279.829227][ T6557] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 279.861946][ T6557] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 279.893399][ T6557] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 279.917395][ T6557] usb 3-1: media controller created [ 280.012221][ T6557] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.266250][ T6557] DVB: Unable to find symbol tda10046_attach() [ 280.301045][ T6557] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 280.332090][ T6557] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 280.598063][ T5795] Bluetooth: hci0: unknown advertising packet type: 0x69 [ 280.598184][ T5795] Bluetooth: hci0: Malformed LE Event: 0x02 [ 280.633715][ T6557] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 280.732024][ T6557] usb 3-1: USB disconnect, device number 37 [ 281.625560][ T5795] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 281.847299][T10091] netlink: 'syz.2.1172': attribute type 3 has an invalid length. [ 281.883476][T10091] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1172'. [ 282.895680][T10115] netlink: 'syz.7.1179': attribute type 10 has an invalid length. [ 282.970018][T10115] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 283.379774][ T6557] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 283.587625][ T6557] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 283.603245][ T6557] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.617228][ T6557] usb 5-1: Product: syz [ 283.622776][ T6557] usb 5-1: Manufacturer: syz [ 283.627444][ T6557] usb 5-1: SerialNumber: syz [ 283.634964][ T6557] usb 5-1: config 0 descriptor?? [ 283.672284][ T27] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 283.852619][ T6557] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 283.866328][ T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.901746][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.912199][ T27] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 283.922079][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 283.930237][ T27] usb 3-1: SerialNumber: syz [ 284.218477][ T27] usb 3-1: 0:2 : does not exist [ 284.291996][ T27] usb 3-1: USB disconnect, device number 38 [ 284.452203][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.281803][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 285.289056][ T6557] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 285.355037][ T6557] usb 5-1: USB disconnect, device number 32 [ 286.779794][ T6563] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 286.960961][ T6563] usb 5-1: Using ep0 maxpacket: 16 [ 286.991804][ T6563] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.003148][ T6563] usb 5-1: config 0 has no interface number 0 [ 287.052269][ T6563] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.074849][ T6563] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.117438][ T6563] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.148334][ T6563] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 287.163842][ T6563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.191440][ T6563] usb 5-1: config 0 descriptor?? [ 287.642029][ T6563] holtek_mouse 0003:04D9:A072.0009: item fetching failed at offset 0/4 [ 287.695150][ T6563] holtek_mouse 0003:04D9:A072.0009: hid parse failed: -22 [ 287.729803][ T6563] holtek_mouse: probe of 0003:04D9:A072.0009 failed with error -22 [ 287.766202][T10234] lo speed is unknown, defaulting to 1000 [ 287.834708][ T6563] usb 5-1: USB disconnect, device number 33 [ 288.881617][T10234] netlink: 'syz.7.1204': attribute type 2 has an invalid length. [ 289.047155][ T5796] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 290.542096][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 290.776120][T10313] mmap: syz.2.1220 (10313) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 290.820151][T10320] syzkaller0: entered promiscuous mode [ 290.827183][T10320] syzkaller0: entered allmulticast mode [ 291.552680][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 291.797883][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.822813][ T9] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 291.833720][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.850863][ T9] usb 8-1: config 0 descriptor?? [ 292.296786][ T9] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 292.347909][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.000A/input/input10 [ 292.554878][ T9] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 293.177558][T10352] syzkaller0: entered promiscuous mode [ 293.184573][T10352] syzkaller0: entered allmulticast mode [ 294.052603][T10366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1242'. [ 294.309258][ T27] usb 8-1: USB disconnect, device number 4 [ 295.400580][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1254'. [ 295.750160][ T27] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 296.049824][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 296.064255][ T27] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.083452][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 296.099807][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 296.109844][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 296.120294][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 296.130086][ T27] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x2D, skipping [ 296.158038][ T27] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 296.167790][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.185836][ T27] usb 5-1: Product: syz [ 296.190274][ T27] usb 5-1: Manufacturer: syz [ 296.194903][ T27] usb 5-1: SerialNumber: syz [ 296.210343][ T27] usb 5-1: config 0 descriptor?? [ 296.216589][T10399] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 296.225808][T10399] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 296.244314][ T27] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 296.336002][ T27] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 296.354430][T10417] bridge0: port 2(bridge_slave_1) entered listening state [ 296.388603][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.408256][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.456034][ T27] usb 5-1: USB disconnect, device number 34 [ 296.663171][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1264'. [ 296.779789][ T6563] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 296.983793][ T6563] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.048307][ T6563] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.095634][ T6563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.129672][ T6563] usb 3-1: Product: syz [ 297.141426][ T6563] usb 3-1: Manufacturer: syz [ 297.178819][ T6563] usb 3-1: SerialNumber: syz [ 297.879966][ T6574] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 298.075658][ T6574] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 298.085927][ T6574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.096047][ T6574] usb 5-1: Product: syz [ 298.100916][ T6574] usb 5-1: Manufacturer: syz [ 298.105591][ T6574] usb 5-1: SerialNumber: syz [ 298.114187][ T6574] usb 5-1: config 0 descriptor?? [ 298.222738][T10451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1273'. [ 298.329835][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 298.338062][ T6574] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 298.455676][ T6563] cdc_ncm 3-1:1.0: failed to get mac address [ 298.474124][ T6563] cdc_ncm 3-1:1.0: bind() failure [ 298.494753][ T6563] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 298.504263][ T6563] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 298.517769][ T6563] usbtest: probe of 3-1:1.1 failed with error -71 [ 298.520026][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 298.540090][ T6563] usb 3-1: USB disconnect, device number 39 [ 298.551893][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.586309][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.607356][ T9] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 298.627505][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.639212][ T9] usb 8-1: Product: syz [ 298.647017][ T9] usb 8-1: Manufacturer: syz [ 298.651842][ T9] usb 8-1: SerialNumber: syz [ 298.870970][ T9] usb 8-1: 0:2 : does not exist [ 298.884345][ T9] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 298.907510][ T9] usb 8-1: USB disconnect, device number 5 [ 298.948186][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.969329][ T6574] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 299.309508][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 299.340147][T10472] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 299.503476][T10475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1282'. [ 300.088200][T10493] vxcan1: entered allmulticast mode [ 300.549929][ T9] usb 5-1: USB disconnect, device number 35 [ 300.677532][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 300.698468][T10503] macvtap1: entered promiscuous mode [ 300.707793][T10503] syz_tun: entered promiscuous mode [ 300.716104][T10503] macvtap1: entered allmulticast mode [ 300.724115][T10503] syz_tun: entered allmulticast mode [ 300.744121][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 300.819829][ T27] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 300.965047][T10507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1293'. [ 301.021440][ T27] usb 3-1: too many configurations: 177, using maximum allowed: 8 [ 301.044659][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.069946][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.095768][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.107303][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.115795][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.126961][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.135636][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.159969][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.185636][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.209813][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.224679][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.236111][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.255506][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.270177][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.280502][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.291421][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 301.311757][ T27] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 301.329822][ T27] usb 3-1: New USB device strings: Mfr=13, Product=238, SerialNumber=190 [ 301.338327][ T27] usb 3-1: Product: syz [ 301.353295][ T27] usb 3-1: Manufacturer: syz [ 301.357971][ T27] usb 3-1: SerialNumber: syz [ 301.370559][ T27] usb 3-1: config 0 descriptor?? [ 301.378843][ T27] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 301.402505][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 301.423167][ T27] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 301.432660][ T27] usb 3-1: media controller created [ 301.457960][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 301.510863][ T27] DVB: Unable to find symbol tda10046_attach() [ 301.517100][ T27] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 301.527426][ T27] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 301.992018][ T27] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 302.002624][ T27] usb 3-1: USB disconnect, device number 40 [ 302.579485][T10538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1303'. [ 302.600035][ T27] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 302.749888][ T27] usb 5-1: device descriptor read/64, error -71 [ 303.051104][ T27] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 303.100105][ T6574] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 303.134624][T10554] tipc: Enabling of bearer rejected, failed to enable media [ 303.145073][T10554] syzkaller0: entered promiscuous mode [ 303.150801][T10554] syzkaller0: entered allmulticast mode [ 303.209896][ T27] usb 5-1: device descriptor read/64, error -71 [ 303.290116][ T6574] usb 3-1: Using ep0 maxpacket: 16 [ 303.297637][ T6574] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.308162][ T6574] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.323366][ T6574] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.331782][ T27] usb usb5-port1: attempt power cycle [ 303.339068][ T6574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.348961][ T6574] usb 3-1: Product: syz [ 303.358295][ T6574] usb 3-1: Manufacturer: syz [ 303.363445][ T6574] usb 3-1: SerialNumber: syz [ 303.399296][ T5795] Bluetooth: hci2: unknown advertising packet type: 0x69 [ 303.399354][ T5795] Bluetooth: hci2: Malformed LE Event: 0x02 [ 303.587819][ T6574] usb 3-1: 0:2 : does not exist [ 303.596865][ T6574] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 303.616794][ T6574] usb 3-1: USB disconnect, device number 41 [ 303.647769][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.749844][ T27] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 303.791799][ T27] usb 5-1: device descriptor read/8, error -71 [ 303.811794][T10561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1312'. [ 304.069819][ T27] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 304.103558][ T27] usb 5-1: device descriptor read/8, error -71 [ 304.240142][ T27] usb usb5-port1: unable to enumerate USB device [ 304.612948][T10586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1321'. [ 305.697365][T10608] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1330'. [ 305.899737][ T27] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 306.089735][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 306.106191][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.119501][T10613] ALSA: mixer_oss: invalid OSS volume '' [ 306.125705][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.144947][ T27] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.155091][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.163476][ T27] usb 5-1: Product: syz [ 306.167958][ T27] usb 5-1: Manufacturer: syz [ 306.172812][ T27] usb 5-1: SerialNumber: syz [ 306.395265][ T27] usb 5-1: 0:2 : does not exist [ 306.607668][ T27] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 306.676032][ T27] usb 5-1: USB disconnect, device number 40 [ 306.740851][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.120000][ T6564] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 307.282816][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1340'. [ 307.310036][ T6564] usb 8-1: Using ep0 maxpacket: 16 [ 307.317758][ T6564] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.349857][ T6564] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.384444][ T6564] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.397652][ T6564] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.411690][ T6564] usb 8-1: Product: syz [ 307.416043][ T6564] usb 8-1: Manufacturer: syz [ 307.423654][ T6564] usb 8-1: SerialNumber: syz [ 307.652715][ T6564] usb 8-1: 0:2 : does not exist [ 307.669150][ T6564] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 307.692733][ T6564] usb 8-1: USB disconnect, device number 6 [ 307.723861][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.827233][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.952944][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.042852][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.164788][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.608601][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1351'. [ 308.622620][T10648] lo speed is unknown, defaulting to 1000 [ 308.671250][ T11] tipc: Left network mode [ 308.874441][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.891110][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.900139][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.910673][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.943898][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 308.953595][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.145469][T10658] lo speed is unknown, defaulting to 1000 [ 309.149938][T10648] netlink: 'syz.3.1350': attribute type 2 has an invalid length. [ 309.931543][T10658] chnl_net:caif_netlink_parms(): no params data found [ 309.999791][ T6563] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 310.072167][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1360'. [ 310.199881][ T6563] usb 8-1: Using ep0 maxpacket: 16 [ 310.213685][ T6563] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.226135][ T6563] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.238168][ T6563] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.247559][ T6563] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.255696][ T6563] usb 8-1: Product: syz [ 310.260213][ T6563] usb 8-1: Manufacturer: syz [ 310.264934][ T6563] usb 8-1: SerialNumber: syz [ 310.284627][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.292766][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.313485][T10658] bridge_slave_0: entered allmulticast mode [ 310.322174][T10658] bridge_slave_0: entered promiscuous mode [ 310.332999][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.340962][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.348335][T10658] bridge_slave_1: entered allmulticast mode [ 310.356937][T10658] bridge_slave_1: entered promiscuous mode [ 310.482189][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.515467][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.526084][ T6563] usb 8-1: 0:2 : does not exist [ 310.544551][ T6563] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 310.606138][ T6563] usb 8-1: USB disconnect, device number 7 [ 310.613472][ T11] hsr_slave_0: left promiscuous mode [ 310.625981][ T11] batman_adv: batadv0: Interface deactivated: dummy0 [ 310.644527][ T11] batman_adv: batadv0: Removing interface: dummy0 [ 310.668474][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.682568][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.698846][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.720361][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.739810][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.767461][ T11] bridge_slave_1: left allmulticast mode [ 310.782097][ T11] bridge_slave_1: left promiscuous mode [ 310.789182][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.804536][ T11] bridge_slave_0: left allmulticast mode [ 310.810867][ T11] bridge_slave_0: left promiscuous mode [ 310.816662][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.850379][ T11] veth1_macvtap: left promiscuous mode [ 310.856262][ T11] veth0_macvtap: left promiscuous mode [ 310.869858][ T11] veth1_vlan: left promiscuous mode [ 310.876613][ T11] veth0_vlan: left promiscuous mode [ 311.000163][ T5795] Bluetooth: hci3: command tx timeout [ 311.541798][ T6563] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 311.780629][ T6563] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.798704][ T6563] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.827743][ T6563] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 311.860736][ T6563] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.905259][ T6563] usb 8-1: config 0 descriptor?? [ 312.110314][ T11] team0 (unregistering): Port device team_slave_1 removed [ 312.236902][ T11] team0 (unregistering): Port device team_slave_0 removed [ 312.328558][ T6563] cm6533_jd 0003:0D8C:0022.000B: No inputs registered, leaving [ 312.351274][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.363187][ T6563] cm6533_jd 0003:0D8C:0022.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 312.562952][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.870562][ T6563] usb 8-1: USB disconnect, device number 8 [ 313.080683][ T5795] Bluetooth: hci3: command tx timeout [ 313.513085][ T11] bond0 (unregistering): Released all slaves [ 313.727297][T10658] team0: Port device team_slave_0 added [ 313.816506][T10658] team0: Port device team_slave_1 added [ 313.822340][ T6563] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 314.064390][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.081774][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.115159][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.128925][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.140997][ T6563] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.163763][ T6563] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.174354][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.232210][ T6563] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.243099][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.260104][ T6563] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.290863][ T6563] usb 8-1: SerialNumber: syz [ 314.486399][T10658] hsr_slave_0: entered promiscuous mode [ 314.497251][T10658] hsr_slave_1: entered promiscuous mode [ 314.546612][ T6563] usb 8-1: 0:2 : does not exist [ 314.667110][ T6563] usb 8-1: USB disconnect, device number 9 [ 314.757971][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.159935][ T5795] Bluetooth: hci3: command tx timeout [ 315.352187][T10658] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 315.398129][T10658] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 315.456566][T10658] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 315.493661][T10658] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 315.674871][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1373'. [ 315.918176][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.983197][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.017914][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.025150][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.080797][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.087983][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.353894][T10658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 316.381204][T10658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.239971][ T5795] Bluetooth: hci3: command tx timeout [ 317.329383][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.336055][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.461587][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.701565][ T6557] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 317.941846][ T6557] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 317.969288][ T6557] usb 3-1: config 0 has no interface number 0 [ 317.987945][ T6557] usb 3-1: config 0 interface 41 has no altsetting 0 [ 318.007404][ T6557] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 318.040215][ T6557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.048279][ T6557] usb 3-1: Product: syz [ 318.067456][ T6557] usb 3-1: Manufacturer: syz [ 318.072646][ T6557] usb 3-1: SerialNumber: syz [ 318.092564][ T6557] usb 3-1: config 0 descriptor?? [ 318.252940][ T6574] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 318.307802][T10658] veth0_vlan: entered promiscuous mode [ 318.326081][T10658] veth1_vlan: entered promiscuous mode [ 318.382268][T10658] veth0_macvtap: entered promiscuous mode [ 318.408396][T10658] veth1_macvtap: entered promiscuous mode [ 318.442106][ T6574] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.446325][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.459794][ T6574] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.469438][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.490650][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.491872][ T6574] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 318.508343][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.525554][ T6574] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.526155][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.534485][ T6574] usb 8-1: SerialNumber: syz [ 318.547457][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.599223][T10658] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.620583][T10658] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.639973][T10658] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.648862][T10658] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.793063][ T6574] usb 8-1: 0:2 : does not exist [ 318.860348][ T6574] usb 8-1: USB disconnect, device number 10 [ 318.872806][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.916432][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.917985][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.928286][ T6557] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 318.985369][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.000793][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.699868][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1387'. [ 319.711995][T10852] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1387'. [ 320.262019][ T6557] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 320.288042][ T6557] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 320.363789][ T6557] CoreChips: probe of 3-1:0.41 failed with error -71 [ 320.422581][ T6557] usb 3-1: USB disconnect, device number 42 [ 321.348260][T10884] loop8: detected capacity change from 0 to 256 [ 321.450881][T10884] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 322.049749][ T6557] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 322.249793][ T6557] usb 3-1: Using ep0 maxpacket: 16 [ 322.266513][ T6557] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.281295][ T6557] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.293298][ T6557] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.308353][ T6557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.324315][ T6557] usb 3-1: Product: syz [ 322.333333][ T6557] usb 3-1: Manufacturer: syz [ 322.343310][ T6557] usb 3-1: SerialNumber: syz [ 322.560805][ T6557] usb 3-1: 0:2 : does not exist [ 322.594545][ T6557] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 322.660123][ T6557] usb 3-1: USB disconnect, device number 43 [ 322.746948][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.970090][ T6574] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 323.041843][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1403'. [ 323.179930][ T6574] usb 8-1: Using ep0 maxpacket: 32 [ 323.203234][ T6574] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 323.230801][ T6574] usb 8-1: config 0 has no interface number 0 [ 323.277417][ T6574] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 323.299695][ T6574] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.322334][ T6574] usb 8-1: Product: syz [ 323.326562][ T6574] usb 8-1: Manufacturer: syz [ 323.334395][ T6574] usb 8-1: SerialNumber: syz [ 323.353272][ T6574] usb 8-1: config 0 descriptor?? [ 323.396140][ T6574] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 323.636741][ T6574] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 323.696524][ T6574] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 323.843258][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 323.843686][ T6566] usb 8-1: USB disconnect, device number 11 [ 323.882501][ T6566] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 323.924997][ T6566] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 323.953980][ T6566] quatech2 8-1:0.51: device disconnected [ 324.140797][T10945] tipc: Failed to remove unknown binding: 66,1,1/0:245118476/245118478 [ 324.445580][T10965] fuse: Bad value for 'fd' [ 324.642839][T10968] lo speed is unknown, defaulting to 1000 [ 325.359834][ T6564] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 325.560695][ T6564] usb 3-1: Using ep0 maxpacket: 16 [ 325.568498][ T6564] usb 3-1: config 75 has an invalid interface number: 136 but max is 0 [ 325.580689][ T6564] usb 3-1: config 75 has no interface number 0 [ 325.602217][ T6564] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=bc.ca [ 325.630146][ T6564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.648964][ T6564] usb 3-1: Product: syz [ 325.653910][ T6564] usb 3-1: Manufacturer: syz [ 325.658556][ T6564] usb 3-1: SerialNumber: syz [ 325.931950][ T6564] ftdi_sio 3-1:75.136: FTDI USB Serial Device converter detected [ 325.975960][ T6564] ftdi_sio ttyUSB0: unknown device type: 0xbcca [ 326.034562][ T6564] usb 3-1: USB disconnect, device number 44 [ 326.082118][ T6564] ftdi_sio 3-1:75.136: device disconnected [ 326.718934][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1427'. [ 326.749945][T11019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.757862][T11019] IPv6: NLM_F_CREATE should be set when creating new route [ 326.974632][T11025] lo speed is unknown, defaulting to 1000 [ 327.402445][T11034] tipc: Failed to remove unknown binding: 66,1,1/0:102809049/102809051 [ 328.570582][T11047] loop8: detected capacity change from 0 to 256 [ 328.632053][T11047] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 329.134464][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1439'. [ 329.448289][T11071] lo speed is unknown, defaulting to 1000 [ 329.969544][T11085] [ 329.972032][T11085] ================================================ [ 329.978556][T11085] WARNING: lock held when returning to user space! [ 329.985095][T11085] syzkaller #0 Not tainted [ 329.989545][T11085] ------------------------------------------------ [ 329.996067][T11085] syz.2.1449/11085 is leaving the kernel with locks still held! [ 330.003722][T11085] 1 lock held by syz.2.1449/11085: [ 330.008865][T11085] #0: ffff88802144f360 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 330.023491][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1450'. [ 330.059277][T11085] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1449'.