last executing test programs: 27m45.189858634s ago: executing program 32 (id=11): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000f21f0025a7298c7000fddbdf250a0000cdff00000102000100080006000000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) socket$igmp6(0xa, 0x3, 0x2) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffe, {0x0, 0x0, 0x0, r6, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) 27m37.634778896s ago: executing program 33 (id=19): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8004, 0x0, 0x0) r1 = inotify_init1(0x80000) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000000) inotify_rm_watch(r1, r2) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x11e) listen(0xffffffffffffffff, 0x8) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x24, r9, 0x601, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x24}}, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}}}], 0x20}, 0x8081) syz_usb_connect(0x1, 0x56, &(0x7f00000000c0)=ANY=[], 0x0) 27m29.650747087s ago: executing program 34 (id=34): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'vxcan1\x00', @remote}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x8a080, 0x39, 0x15}, 0x18) symlinkat(0x0, r3, &(0x7f0000000200)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$netlink(0x10, 0x3, 0x0) setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) gettid() r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000031c0)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000003200)={{0x0, 0x4, 0x5, 0x7ff, 0x4, 0xffffffffffff8001, 0x3, 0x9, 0x80000000, 0x40, 0x7, 0x4, 0x8000, 0x8, 0x80}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000001c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "bfd1348317a3d8"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f00000011c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "4e728ee9998223"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f00000021c0)={r11, r12, "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", "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"}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 25m50.622055835s ago: executing program 4 (id=179): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 25m48.678918099s ago: executing program 4 (id=180): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) poll(&(0x7f0000000240)=[{r1, 0x2188}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 25m46.690485662s ago: executing program 4 (id=183): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000440)={0x0, 0xfffffffc, 0x0, 'queue1\x00', 0x4e}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 25m45.515326016s ago: executing program 4 (id=184): socket$netlink(0x10, 0x3, 0x10) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x4c) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) 25m42.43915742s ago: executing program 4 (id=188): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x10000000000}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25m40.719783999s ago: executing program 4 (id=194): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x29, 0x6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000002c0)={0x2, 0x0, @start={0xd, 0x1}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r8, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x20008894, &(0x7f0000000100)={0x11, 0x7, r9, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0xd}, {0xfff3, 0x8}, {0xb}}}, 0x24}}, 0x20040000) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 25m35.712563842s ago: executing program 35 (id=177): setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x80000000) r4 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x0, 0x5, 0x2, 0x802, 0x80000000, "f759e1006dc710000000d9fc6300", '\x00', "06000061", "e8cc1304", ["00e8ffffffffffffff00", "c2fe00408000", '\x00\x00\x00\t\t\x00\x00\x00\x00\x00\x00$', "0000005fc8000040001000"]}) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x500) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0xb}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r7 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCSMRU(r7, 0x40047452, &(0x7f0000000140)=0x7) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) unshare(0x42000000) 25m24.685720915s ago: executing program 36 (id=194): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x29, 0x6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000002c0)={0x2, 0x0, @start={0xd, 0x1}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r8, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x20008894, &(0x7f0000000100)={0x11, 0x7, r9, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0xd}, {0xfff3, 0x8}, {0xb}}}, 0x24}}, 0x20040000) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 21m53.6678881s ago: executing program 6 (id=422): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x400c630e, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21m52.461402459s ago: executing program 6 (id=423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 21m51.139583952s ago: executing program 6 (id=424): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 21m50.061066714s ago: executing program 6 (id=425): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x7d}, 'port1\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) close(r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmmsg(r2, &(0x7f0000000200), 0x0, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0xffff0aca, 0x5, 0x5, 0xfd9, 0x5}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 21m45.01995157s ago: executing program 6 (id=431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x400c630e, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 21m43.538624331s ago: executing program 6 (id=434): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000240)={r4}) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000340)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r6, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r12, 0x3000000, 0x12, r11, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x27, 0xc7, [@private=0xa010102, @empty, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}]}}}}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960207142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe8023c889fd4cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337bc5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35db96c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae374bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0c4367ef4124bfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de589020000dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161520b7e7d37b581a0f51fe26167e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800af3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09229dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a411347051460326f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9c5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba33770ce3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f24600000000a80455f324746048ea24c0df0375e2cf333fa90a51cb4cc307e208a93d56368c920c239d0b3a21136d20d4c3ac328254adc96753ab34c4e31b500f71a49a75d9d598035765a72278bc823f63f770ee055e35c367be5301fcaf733e0caad10e0e1eb103b4783243c299729b4c9e26a4a6e0f2e1170e07c63fb58bcc8e145d9d9e54291361cd906ad379fa99b345a3002a2769af372eeadb9c8ebfd4402866f278781cc0d71ecbfcb16b0dfab8043f39b44cf8cc98266e6ffd9122fe16acf0b9071e359ff2fe351601c4ef491fc21cec175d0ed34885b80e8ab975f0552756be2ead3f963487d04a0fdf28aa7f59330c2f0c78ed3800d5eeaa9627472480af1e688e79bb873503c1aecdb0b5d3dda8cb3f0c189fad95955438c0fad34d4f60755d80e3977767be97443e95f7b7982c19a731a07cda09df5b746d5ad96c3e0b84493d94bd211ff1f0e30fc959322317aff59e86e512140a9cae22becca0f195b508905fce03ab6dd01dfb1c91600ef6119aeff341d04ee74c02a717b2f6107479989cd5075e806ea2c5aad0e02db9dc43b10d2792db042e7a2cc55779403b65e442a26d1ec0227fe5d05d0d63f4b0c1ae44f391b6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x18000000000002a0, 0xe40, 0x2f, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_create1(0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x85}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 21m27.240229272s ago: executing program 37 (id=434): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000200)={0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000240)={r4}) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000340)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r6, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_GUEST_MEMFD(r10, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r12 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r8, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r12, 0x3000000, 0x12, r11, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x27, 0xc7, [@private=0xa010102, @empty, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}]}}}}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x18000000000002a0, 0xe40, 0x2f, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_create1(0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x85}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 15m17.137431473s ago: executing program 5 (id=765): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x37, 0x0, 0x0, 0x80000d6e, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa01}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 15m15.233309069s ago: executing program 5 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0xc0202, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xdc, 0x9, 0x81, 0x1, 0x10000, 0x3, 0x4002004c2, 0x7, 0x9, 0x6, 0x400, 0x80, 0xe, 0x4, 0x8, 0x9], 0x100000, 0x4800}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m13.436411172s ago: executing program 5 (id=768): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 15m8.959149615s ago: executing program 5 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15m7.436746367s ago: executing program 5 (id=776): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 15m5.52732656s ago: executing program 5 (id=778): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x48051) inotify_init() 14m50.150667338s ago: executing program 38 (id=778): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8) socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x48051) inotify_init() 11m38.874728858s ago: executing program 1 (id=1123): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0x32, 0x220000, 0x0, 0x8000008, 0x4, 0x2, 0x1, 0x0, 0x7cce8c743ee810df, 0xa5}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000200)={0x800080, 0x858, 0x8, 0xc, 0x43, 0x558}) 11m37.86853263s ago: executing program 1 (id=1126): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) openat$sndseq(0xffffff9c, 0x0, 0x200) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000430000000100000000000000", @ANYBLOB="0000000000e2ffffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/15], 0x50) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 11m34.733680346s ago: executing program 1 (id=1133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="e45f1826431b7ec7", 0x8}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0x100000000, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 11m20.472156934s ago: executing program 1 (id=1156): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0}) 11m5.677214933s ago: executing program 1 (id=1182): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffff7ffffd, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x4}) 11m4.53913993s ago: executing program 1 (id=1187): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = open(0x0, 0x111082, 0x1b2) lseek(r2, 0x101, 0x1) getdents(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) userfaultfd(0x801) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 10m49.050759251s ago: executing program 39 (id=1187): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = open(0x0, 0x111082, 0x1b2) lseek(r2, 0x101, 0x1) getdents(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000001c0)) userfaultfd(0x801) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) 9m37.913501584s ago: executing program 3 (id=1366): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a) 9m34.556108464s ago: executing program 3 (id=1372): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) 9m32.585908328s ago: executing program 3 (id=1377): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9m28.658107824s ago: executing program 3 (id=1386): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601030000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3100000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020}, 0xffffff36) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) listen(r5, 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-010d \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x200, 0x0, r6, 0x800, '\x00', r7, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) listen(r4, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 9m26.331901637s ago: executing program 3 (id=1389): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x2, 0x7}, 'syz0\x00', 0x1f}) ioctl$UI_DEV_CREATE(r0, 0x5501) 9m25.021993187s ago: executing program 3 (id=1393): r0 = memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) mmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3000000, 0x11, r0, 0x7000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000"], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r2 = socket(0x0, 0x80805, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x5, 0x0, &(0x7f0000000240)={0x0, 0xb, 0xfffc, 0x360}, 0x8, 0x8, 0x1, 0x0, 0x40000007, 0x101, 0x0}) 9m9.15824391s ago: executing program 40 (id=1393): r0 = memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) mmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x3000000, 0x11, r0, 0x7000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000"], 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) r2 = socket(0x0, 0x80805, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0xc}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) fanotify_init(0xa00, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x100000, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r1, 0x40107447, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r5, 0x0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x5, 0x0, &(0x7f0000000240)={0x0, 0xb, 0xfffc, 0x360}, 0x8, 0x8, 0x1, 0x0, 0x40000007, 0x101, 0x0}) 3m19.03972753s ago: executing program 8 (id=2108): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x8, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0}) 3m17.796000446s ago: executing program 8 (id=2112): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m16.349734205s ago: executing program 8 (id=2116): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={0x0, 0x0, 0x4000}, 0x14) socket$inet(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) move_pages(0x0, 0xffffffffffffffc0, 0x0, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x3c, 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r0, 0xaea3) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000010a40)={@random="edf611b71306", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @private=0xa010100, @multicast1=0xe0000300}, @parameter_prob={0xc, 0x0, 0x0, 0x9, 0x41, 0x0, {0x5, 0x4, 0x1, 0x8, 0x2, 0x66, 0x8, 0x40, 0x6, 0x3, @multicast2, @remote}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 3m14.979350362s ago: executing program 8 (id=2120): socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) io_uring_enter(0xffffffffffffffff, 0x7f78, 0x204ef8, 0x5a, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) socket$inet6(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 3m13.473303428s ago: executing program 8 (id=2124): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="e45f1826431b7ec7", 0x8}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x5c656f613d3ffcde}}], 0x2, 0x4000045) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0x100000000, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x0, 0x76}) 3m11.953817443s ago: executing program 8 (id=2128): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x400401) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x113240) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7409000000636b20806f6e65"], 0xd) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/profiling', 0x149a82, 0x1ec) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x1ece0b8d50d60242) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 2m55.965569642s ago: executing program 41 (id=2128): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x400401) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x113240) write$vga_arbiter(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7409000000636b20806f6e65"], 0xd) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/profiling', 0x149a82, 0x1ec) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x2040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x1ece0b8d50d60242) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x104000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 17.219175379s ago: executing program 9 (id=2379): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 15.939898641s ago: executing program 7 (id=2381): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000ffff00"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac141400060003003f"], 0x40}}, 0x0) 14.992203351s ago: executing program 9 (id=2382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 13.137795096s ago: executing program 7 (id=2385): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, 0xffffffffffffffff, 0x75fb3000) 12.571033125s ago: executing program 9 (id=2386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) 11.866326162s ago: executing program 0 (id=2388): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r1 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) 10.74358665s ago: executing program 0 (id=2390): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close(0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 10.120091649s ago: executing program 2 (id=2391): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 9.165713111s ago: executing program 7 (id=2392): syz_open_dev$vim2m(&(0x7f0000000380), 0x101ffff, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 8.479410565s ago: executing program 2 (id=2393): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) 8.003133553s ago: executing program 7 (id=2394): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x2, 0x8, 0x2, 0xfffffffd, 0x8, 0x4}) 7.541783092s ago: executing program 0 (id=2395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 7.003384405s ago: executing program 9 (id=2396): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) open(0x0, 0x108843, 0x190) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x110) fcntl$setlease(r4, 0x400, 0x1) 6.543614524s ago: executing program 7 (id=2397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x1, 0x0, 0x6}, 0xca, 0xc, 0x5}) 5.206987821s ago: executing program 0 (id=2398): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) 5.006572638s ago: executing program 2 (id=2399): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newtfilter={0x210, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0xb, 0xffe0}, {0xf, 0x5}}, [@f_rsvp={{0x9}, {0x1e0, 0x2, [@TCA_RSVP_ACT={0x1dc, 0x6, [@m_nat={0xcc, 0x4, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x3, 0x1, 0x8}, @private=0xa010101, @loopback, 0x100000001}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x0, 0x10, 0x8f}, @local, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x3, 0x0, 0xb, 0xa26f526}, @rand_addr=0x64010100, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xffff, 0x1, 0xfffffffc, 0xa}, @multicast1, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x10c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0xe1, 0x6, "fd1cf9493df8f9254b21313698598fb581f2fbcbbcc5fdbea5959a175298c1acba8fd61d5452955384783d99ac08fefd92ed3b1a024a9710b13547fc6f0ff35da51d72b5ac8205e562d21e3fb5a744166dfccd0fa99014a5b1a00eea75baadfc251fb856f5c696d016b73fe544aa4d37e44e179d0df414fd537efe31be5a1ec00498b58ced143df9917d46e8d145361f50a04787b9f4df22e8f75d5c2ffd355a5def78b301bb70d0301ae6e0ffc4d0c392928e075831dab8c08323e7830c6db24909f39f17e1fa2733d34368a17ece3b9c05e8f38e1d3127c59ce0b562"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x210}}, 0x0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c80)=""/4091, 0xffb}], 0x1}, 0xffffffff}], 0x1, 0x2023, 0x0) 3.930030019s ago: executing program 0 (id=2400): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x522, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.663165048s ago: executing program 2 (id=2401): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.088035644s ago: executing program 2 (id=2402): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$tipc(0x1e, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182) socket$inet6(0xa, 0x3, 0x3a) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, 0x0, 0x0, 0x0) 1.621124038s ago: executing program 9 (id=2403): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 939.375411ms ago: executing program 7 (id=2404): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close(0x4) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x7168, 0x3010, 0x2, 0x41}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 796.011068ms ago: executing program 0 (id=2405): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000003c0)={&(0x7f0000000400)=[{0xd0, 0x4201, 0x0, 0x0}, {0x6, 0x1201, 0x0, 0x0}, {0xfff, 0x9801, 0x0, 0x0}], 0x3}) 651.841802ms ago: executing program 9 (id=2406): syz_io_uring_setup(0x2759, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 0s ago: executing program 2 (id=2407): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x0, 0xc, 0x4, "95e2346f"}, 0x0, 0x0}) kernel console output (not intermixed with test programs): .0: Identified as PCTV tripleStick (292e) (card=94) [ 1647.128581][T24045] em28xx 1-1:0.0: dvb set to bulk mode. [ 1647.135030][ T41] em28xx 1-1:0.0: Binding DVB extension [ 1647.141690][ T797] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1647.216049][T24045] usb 1-1: USB disconnect, device number 74 [ 1647.230048][T26062] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1647.269695][T24045] em28xx 1-1:0.0: Disconnecting em28xx [ 1647.376046][ T797] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.389874][ T797] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1647.399592][ T797] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1647.409154][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.439857][T26062] usb 9-1: Using ep0 maxpacket: 32 [ 1647.533493][T26062] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1647.633292][T26062] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1647.643203][T26062] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.654932][T26062] usb 9-1: Product: syz [ 1647.660318][T26062] usb 9-1: Manufacturer: syz [ 1647.665146][T26062] usb 9-1: SerialNumber: syz [ 1647.821192][ T41] em28xx 1-1:0.0: Registering input extension [ 1647.903342][T26062] usb 9-1: config 0 descriptor?? [ 1647.905133][T24045] em28xx 1-1:0.0: Closing input extension [ 1648.008157][T31797] fuse: Unknown parameter 'user_i00000000000000000000' [ 1648.083643][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1648.091233][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1648.126376][T24045] em28xx 1-1:0.0: Freeing device [ 1648.873096][T26062] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1648.926455][T26062] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1648.935276][T26062] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -32 [ 1649.042471][T26062] usb 9-1: USB disconnect, device number 66 [ 1649.760530][T31829] tipc: Enabled bearer , priority 0 [ 1649.884177][T31832] syzkaller0: entered promiscuous mode [ 1649.890862][T31832] syzkaller0: entered allmulticast mode [ 1650.253351][T31829] tipc: Resetting bearer [ 1650.422929][T31841] overlayfs: failed to resolve './file0': -2 [ 1650.911518][T24045] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1651.170828][T26062] usb 3-1: USB disconnect, device number 48 [ 1651.184463][T24045] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1651.193245][T24045] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.208034][T24045] usb 10-1: config 0 has no interface number 0 [ 1651.349593][T24045] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1651.364132][T24045] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1651.373719][T24045] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.514747][T24045] usb 10-1: config 0 descriptor?? [ 1651.594052][ T41] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 1651.621935][T24045] usbhid 10-1:0.1: couldn't find an input interrupt endpoint [ 1651.856548][ T41] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1651.866361][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.981697][ T41] usb 8-1: config 0 descriptor?? [ 1652.112332][ T41] cp210x 8-1:0.0: cp210x converter detected [ 1652.390700][ T41] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1652.623297][T26062] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1652.930603][T26062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.949551][T26062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.961599][T26062] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1652.975105][T26062] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1652.984606][T26062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.031167][T26062] usb 9-1: config 0 descriptor?? [ 1653.564313][T18238] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1653.872355][T18238] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1653.882277][T18238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.891221][T18238] usb 3-1: Product: syz [ 1653.895594][T18238] usb 3-1: Manufacturer: syz [ 1653.901986][T18238] usb 3-1: SerialNumber: syz [ 1654.054776][T18238] usb 3-1: config 0 descriptor?? [ 1654.130760][T27063] usb 10-1: USB disconnect, device number 66 [ 1654.390456][T18238] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1654.409451][T31832] tipc: Resetting bearer [ 1654.512728][T31832] tipc: Disabling bearer [ 1654.826495][T18238] usb 3-1: USB disconnect, device number 49 [ 1655.087563][T27063] usb 8-1: USB disconnect, device number 92 [ 1655.263837][T26062] usbhid 9-1:0.0: can't add hid device: -71 [ 1655.273465][T26062] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1655.295552][T27063] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1655.375706][T27063] cp210x 8-1:0.0: device disconnected [ 1655.437214][T26062] usb 9-1: USB disconnect, device number 67 [ 1656.350457][ T41] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1656.591351][ T41] usb 9-1: Using ep0 maxpacket: 16 [ 1656.646537][T24045] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1656.744671][ T41] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1656.898431][T24045] usb 3-1: Using ep0 maxpacket: 32 [ 1656.908670][ T41] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1656.918314][ T41] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.926584][ T41] usb 9-1: Product: syz [ 1656.931131][ T41] usb 9-1: Manufacturer: syz [ 1656.940380][ T41] usb 9-1: SerialNumber: syz [ 1657.004286][T24045] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1657.083127][T24045] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1657.093005][T24045] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.104604][T24045] usb 3-1: Product: syz [ 1657.109152][T24045] usb 3-1: Manufacturer: syz [ 1657.113987][T24045] usb 3-1: SerialNumber: syz [ 1657.126331][ T41] usb 9-1: config 0 descriptor?? [ 1657.221238][T24045] usb 3-1: config 0 descriptor?? [ 1657.258548][ T41] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1657.268467][ T41] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1657.694494][T24045] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1657.760449][ T797] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1657.925826][T24045] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1657.934632][T24045] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 1658.038533][ T797] usb 10-1: Using ep0 maxpacket: 8 [ 1658.101827][ T41] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1658.123575][ T797] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1658.133890][ T797] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1658.144390][ T797] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1658.155006][ T797] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1658.173275][ T797] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1658.184049][ T797] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1658.238521][T24045] usb 3-1: USB disconnect, device number 50 [ 1658.703961][ T41] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1658.712642][ T41] em28xx 9-1:0.0: board has no eeprom [ 1658.873626][ T797] usb 10-1: usb_control_msg returned -71 [ 1658.880074][ T797] usbtmc 10-1:16.0: can't read capabilities [ 1659.018434][ T41] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1659.026884][ T41] em28xx 9-1:0.0: dvb set to bulk mode. [ 1659.037883][T24045] em28xx 9-1:0.0: Binding DVB extension [ 1659.250375][ T797] usb 10-1: USB disconnect, device number 67 [ 1659.281176][ T41] usb 9-1: USB disconnect, device number 68 [ 1659.368121][ T5850] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1659.414140][ T41] em28xx 9-1:0.0: Disconnecting em28xx [ 1659.748203][ T5850] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.758868][ T5850] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1659.768882][ T5850] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1659.778296][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.079556][T24045] em28xx 9-1:0.0: Registering input extension [ 1660.090837][ T41] em28xx 9-1:0.0: Closing input extension [ 1660.279700][ T41] em28xx 9-1:0.0: Freeing device [ 1661.758196][ T9374] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1661.987026][ T9374] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1661.996807][ T9374] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.123290][ T9374] usb 9-1: config 0 descriptor?? [ 1662.247677][ T9374] cp210x 9-1:0.0: cp210x converter detected [ 1662.527941][ T9374] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1662.881125][ T41] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1663.075312][T24045] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1663.151220][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.162731][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.172891][ T41] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1663.195889][ T41] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1663.215659][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.459220][T24045] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1663.469192][T24045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.477689][T24045] usb 10-1: Product: syz [ 1663.482158][T24045] usb 10-1: Manufacturer: syz [ 1663.487052][T24045] usb 10-1: SerialNumber: syz [ 1663.508766][ T41] usb 3-1: config 0 descriptor?? [ 1663.590560][ T5850] usb 8-1: USB disconnect, device number 93 [ 1663.803265][T24045] usb 10-1: config 0 descriptor?? [ 1664.148602][T24045] usb-storage 10-1:0.0: USB Mass Storage device detected [ 1664.614233][T24045] usb 10-1: USB disconnect, device number 68 [ 1665.355432][T26062] usb 9-1: USB disconnect, device number 69 [ 1665.524940][T26062] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1665.593306][T26062] cp210x 9-1:0.0: device disconnected [ 1665.648250][ T41] usbhid 3-1:0.0: can't add hid device: -71 [ 1665.654968][ T41] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1665.883494][ T41] usb 3-1: USB disconnect, device number 51 [ 1666.749460][ T9374] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1666.958134][ T797] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1666.978184][ T9374] usb 9-1: Using ep0 maxpacket: 32 [ 1667.084763][ T9374] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1667.193418][ T9374] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1667.203263][ T9374] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.211766][ T9374] usb 9-1: Product: syz [ 1667.216156][ T9374] usb 9-1: Manufacturer: syz [ 1667.221261][ T9374] usb 9-1: SerialNumber: syz [ 1667.248782][ T797] usb 10-1: Using ep0 maxpacket: 8 [ 1667.379461][ T797] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1667.396258][ T797] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1667.406632][ T797] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1667.413309][ T9374] usb 9-1: config 0 descriptor?? [ 1667.417011][ T797] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1667.435462][ T797] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1667.445119][ T797] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.617952][ T41] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1667.898948][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 1667.984831][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1668.079214][ T797] usb 10-1: usb_control_msg returned -71 [ 1668.085439][ T797] usbtmc 10-1:16.0: can't read capabilities [ 1668.161591][ T9374] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1668.161752][ T41] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1668.177901][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.186169][ T41] usb 3-1: Product: syz [ 1668.190663][ T41] usb 3-1: Manufacturer: syz [ 1668.195475][ T41] usb 3-1: SerialNumber: syz [ 1668.308685][ T797] usb 10-1: USB disconnect, device number 69 [ 1668.364673][ T9374] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1668.374010][ T9374] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -32 [ 1668.552518][ T41] usb 3-1: config 0 descriptor?? [ 1668.622707][ T41] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1668.632638][ T41] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1668.649667][ T9374] usb 9-1: USB disconnect, device number 70 [ 1669.233420][ T41] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1669.747156][ T41] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1669.755859][ T41] em28xx 3-1:0.0: board has no eeprom [ 1669.976749][ T41] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1669.985265][ T41] em28xx 3-1:0.0: dvb set to bulk mode. [ 1669.999048][T24045] em28xx 3-1:0.0: Binding DVB extension [ 1670.153434][ T41] usb 3-1: USB disconnect, device number 52 [ 1670.201959][ T41] em28xx 3-1:0.0: Disconnecting em28xx [ 1670.565241][T26062] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1670.819802][T26062] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.820659][T24045] em28xx 3-1:0.0: Registering input extension [ 1670.830497][T26062] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1670.830713][T26062] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1670.856153][T26062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.898675][ T41] em28xx 3-1:0.0: Closing input extension [ 1671.138164][ T41] em28xx 3-1:0.0: Freeing device [ 1672.451177][T26062] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1672.830341][T32311] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1672.853792][T26062] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1672.864030][T26062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.872664][T26062] usb 3-1: Product: syz [ 1672.877036][T26062] usb 3-1: Manufacturer: syz [ 1672.882036][T26062] usb 3-1: SerialNumber: syz [ 1672.936650][T26062] usb 3-1: config 0 descriptor?? [ 1673.099469][ T9374] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1673.229359][T26062] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1673.552662][ T9374] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.564581][ T9374] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1673.574832][ T9374] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1673.588552][ T9374] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1673.597997][ T9374] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.623851][T26062] usb 3-1: USB disconnect, device number 53 [ 1673.952260][ T9374] usb 9-1: config 0 descriptor?? [ 1673.983248][T24045] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1674.349476][T24045] usb 1-1: Using ep0 maxpacket: 16 [ 1675.192176][ T41] usb 8-1: USB disconnect, device number 94 [ 1676.158271][T24045] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1676.166167][T24045] usb 1-1: can't read configurations, error -71 [ 1676.690261][ T9374] usbhid 9-1:0.0: can't add hid device: -71 [ 1676.696994][ T9374] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1676.866186][ T9374] usb 9-1: USB disconnect, device number 71 [ 1677.037955][ T41] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1677.263655][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 1677.350321][ T41] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1677.360642][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1677.370874][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1677.382577][ T41] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.396190][ T41] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1677.405664][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.998366][ T41] usb 8-1: usb_control_msg returned -71 [ 1678.004387][ T41] usbtmc 8-1:16.0: can't read capabilities [ 1678.087715][ T797] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1678.208303][ T41] usb 8-1: USB disconnect, device number 95 [ 1678.327826][ T797] usb 3-1: Using ep0 maxpacket: 16 [ 1678.393907][ T797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1678.406137][ T797] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1678.419563][ T797] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1678.429613][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.643357][ T797] usb 3-1: config 0 descriptor?? [ 1679.357815][ T9374] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1679.371725][ T797] lg-g15 0003:046D:C222.0019: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1679.525595][ T797] usb 3-1: USB disconnect, device number 54 [ 1679.599211][ T9374] usb 10-1: Using ep0 maxpacket: 16 [ 1679.682187][ T9374] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1679.820952][ T9374] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1679.830677][ T9374] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.839233][ T9374] usb 10-1: Product: syz [ 1679.843695][ T9374] usb 10-1: Manufacturer: syz [ 1679.849470][ T9374] usb 10-1: SerialNumber: syz [ 1679.986997][ T9374] usb 10-1: config 0 descriptor?? [ 1680.099103][ T9374] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1680.108921][ T9374] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1680.438927][T26062] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1680.744045][ T9374] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1680.780652][T26062] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1680.789176][T26062] usb 8-1: config 0 has no interface number 0 [ 1680.930865][T26062] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1680.945362][T26062] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1680.955055][T26062] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.080915][T32438] fido_id[32438]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1681.196055][T26062] usb 8-1: config 0 descriptor?? [ 1681.346230][ T9374] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1681.354818][ T9374] em28xx 10-1:0.0: board has no eeprom [ 1681.408297][T26062] usbhid 8-1:0.1: couldn't find an input interrupt endpoint [ 1681.521497][ T9374] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1681.530324][ T9374] em28xx 10-1:0.0: dvb set to bulk mode. [ 1681.548459][T26062] em28xx 10-1:0.0: Binding DVB extension [ 1681.665653][ T9374] usb 10-1: USB disconnect, device number 70 [ 1681.761043][ T9374] em28xx 10-1:0.0: Disconnecting em28xx [ 1681.878844][ T41] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1682.138284][ T797] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1682.248845][ T41] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1682.258522][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.266828][ T41] usb 3-1: Product: syz [ 1682.271270][ T41] usb 3-1: Manufacturer: syz [ 1682.275980][ T41] usb 3-1: SerialNumber: syz [ 1682.423513][ T41] usb 3-1: config 0 descriptor?? [ 1682.457599][T26062] em28xx 10-1:0.0: Registering input extension [ 1682.528564][ T9374] em28xx 10-1:0.0: Closing input extension [ 1682.556037][ T797] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1682.568001][ T797] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1682.577647][ T797] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1682.586945][ T797] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.770922][ T41] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1682.985163][ T9374] em28xx 10-1:0.0: Freeing device [ 1683.145333][ T41] usb 3-1: USB disconnect, device number 55 [ 1683.349705][T32498] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1683.869937][ T797] usb 8-1: USB disconnect, device number 96 [ 1684.128526][ T41] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1684.368238][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 1684.512137][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1685.811525][ T41] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1685.830937][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.843259][ T41] usb 1-1: Product: syz [ 1685.933194][ T9374] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1685.990303][ T41] usb 1-1: config 0 descriptor?? [ 1686.110150][ T41] usb 1-1: can't set config #0, error -71 [ 1686.255393][ T41] usb 1-1: USB disconnect, device number 77 [ 1686.459762][ T9374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.472083][ T9374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.482367][ T9374] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1686.495973][ T9374] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1686.505456][ T9374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.583230][T26062] usb 9-1: USB disconnect, device number 72 [ 1686.599647][ T9374] usb 3-1: config 0 descriptor?? [ 1687.268067][ T797] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1687.457654][ T797] usb 8-1: device descriptor read/64, error -71 [ 1687.718120][ T797] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1687.936856][ T797] usb 8-1: device descriptor read/64, error -71 [ 1688.055453][ T797] usb usb8-port1: attempt power cycle [ 1688.495297][ T9374] usbhid 3-1:0.0: can't add hid device: -71 [ 1688.502251][ T9374] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1688.503384][ T797] usb 8-1: new high-speed USB device number 99 using dummy_hcd [ 1688.611138][ T797] usb 8-1: device descriptor read/8, error -71 [ 1688.628649][T27063] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1688.673730][ T9374] usb 3-1: USB disconnect, device number 56 [ 1688.870174][T27063] usb 10-1: Using ep0 maxpacket: 16 [ 1688.878923][ T797] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1688.957697][ T797] usb 8-1: device descriptor read/8, error -71 [ 1688.958472][T27063] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1688.975445][T27063] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1688.995195][T27063] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1689.006598][T27063] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.072715][ T797] usb usb8-port1: unable to enumerate USB device [ 1689.248119][T27063] usb 10-1: config 0 descriptor?? [ 1689.822060][T32601] syzkaller1: entered promiscuous mode [ 1689.833845][T32601] syzkaller1: entered allmulticast mode [ 1689.885145][T27063] lg-g15 0003:046D:C222.001A: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.9-1/input0 [ 1690.061116][T27063] usb 10-1: USB disconnect, device number 71 [ 1690.272882][T26062] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1690.591688][T26062] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1690.600140][T26062] usb 1-1: config 0 has no interface number 0 [ 1690.637621][T26062] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1690.651065][T26062] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1690.660751][T26062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.846592][T26062] usb 1-1: config 0 descriptor?? [ 1691.006193][T26062] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 1691.323722][T32625] fido_id[32625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1691.971630][T32657] loop2: detected capacity change from 0 to 7 [ 1692.025752][T32657] Dev loop2: unable to read RDB block 7 [ 1692.032294][T32657] loop2: unable to read partition table [ 1692.106020][T32657] loop2: partition table beyond EOD, truncated [ 1692.113158][T32657] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1692.599267][T32662] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1693.080212][T32573] usb 8-1: new high-speed USB device number 101 using dummy_hcd [ 1693.280433][ T41] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1693.356516][T32573] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.367182][T32573] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1693.376814][T32573] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1693.386417][T32573] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.489101][T26062] usb 1-1: USB disconnect, device number 78 [ 1693.579135][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 1693.710963][ T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.833382][ T41] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1693.843345][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.852004][ T41] usb 3-1: Product: syz [ 1693.856402][ T41] usb 3-1: Manufacturer: syz [ 1693.861494][ T41] usb 3-1: SerialNumber: syz [ 1694.020711][ T41] usb 3-1: config 0 descriptor?? [ 1694.650170][T26062] usb 3-1: USB disconnect, device number 57 [ 1694.673328][ T30] audit: type=1326 audit(1768984358.923:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1694.696632][ T30] audit: type=1326 audit(1768984358.933:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32653 comm="syz.2.2037" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1694.959511][ T41] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1695.231314][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.245445][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.256825][ T41] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1695.270126][ T41] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1695.279515][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.413395][ T41] usb 1-1: config 0 descriptor?? [ 1697.130558][T27063] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1697.277219][T27063] usb 3-1: device descriptor read/64, error -71 [ 1697.277965][ T41] usbhid 1-1:0.0: can't add hid device: -71 [ 1697.296880][ T41] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1697.495053][ T41] usb 1-1: USB disconnect, device number 79 [ 1697.538215][T27063] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1697.620009][T26062] usb 8-1: USB disconnect, device number 101 [ 1697.771445][T27063] usb 3-1: device descriptor read/64, error -71 [ 1697.843314][T32735] syzkaller1: entered promiscuous mode [ 1697.849622][T32735] syzkaller1: entered allmulticast mode [ 1697.916404][T27063] usb usb3-port1: attempt power cycle [ 1698.311049][T27063] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1698.357905][T27063] usb 3-1: device descriptor read/8, error -71 [ 1698.388075][ T41] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1698.605689][T27063] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1698.625383][ T41] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1698.636117][ T41] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.673485][T27063] usb 3-1: device descriptor read/8, error -71 [ 1698.789428][T27063] usb usb3-port1: unable to enumerate USB device [ 1698.823354][ T41] usb 9-1: config 0 descriptor?? [ 1698.897942][ T41] cp210x 9-1:0.0: cp210x converter detected [ 1698.943048][T29966] usb 8-1: new high-speed USB device number 102 using dummy_hcd [ 1699.162882][T29966] usb 8-1: Using ep0 maxpacket: 16 [ 1699.274137][T29966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1699.285911][T29966] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1699.299539][T29966] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1699.309612][T29966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.347992][ T41] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1699.384919][ T41] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1699.393107][ T41] cp210x 9-1:0.0: GPIO initialisation failed: -32 [ 1699.484880][ T41] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1699.513679][T29966] usb 8-1: config 0 descriptor?? [ 1699.608686][ T41] usb 9-1: USB disconnect, device number 73 [ 1699.688192][T26392] udevd[26392]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory [ 1699.728126][ T41] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1699.759263][T26392] udevd[26392]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1699.762469][ T41] cp210x 9-1:0.0: device disconnected [ 1700.093781][T29966] lg-g15 0003:046D:C222.001B: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.7-1/input0 [ 1700.258977][T29966] usb 8-1: USB disconnect, device number 102 [ 1701.279546][T10593] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1701.525246][T10593] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1701.533867][T10593] usb 1-1: config 0 has no interface number 0 [ 1701.595479][ T354] fido_id[354]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1701.636415][T10593] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1701.652854][T10593] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1701.662510][T10593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.996953][T10593] usb 1-1: config 0 descriptor?? [ 1702.117236][T10593] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 1703.031243][T10593] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1703.267673][T10593] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1703.278796][T10593] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1703.288429][T10593] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1703.298014][T10593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.807868][T27063] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1704.374665][T27063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1704.389075][T27063] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1704.402332][T27063] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1704.419908][T27063] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1704.432240][T27063] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.519835][ T41] usb 1-1: USB disconnect, device number 80 [ 1704.735696][T27063] usb 8-1: config 0 descriptor?? [ 1705.878735][ T41] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1706.017926][T29966] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1706.160265][ T41] usb 9-1: device descriptor read/64, error -71 [ 1706.186032][T29966] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1706.203094][T29966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.361968][T29966] usb 1-1: config 0 descriptor?? [ 1706.419786][T29966] cp210x 1-1:0.0: cp210x converter detected [ 1706.485092][ T41] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1706.524570][ T9374] usb 10-1: USB disconnect, device number 72 [ 1706.749339][ T41] usb 9-1: device descriptor read/64, error -71 [ 1706.863417][ T41] usb usb9-port1: attempt power cycle [ 1707.058603][T29966] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1707.163920][T29966] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1707.172159][T29966] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 1707.341288][ T41] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1707.376269][T29966] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1707.441540][ T41] usb 9-1: device descriptor read/8, error -71 [ 1707.499626][T27063] usbhid 8-1:0.0: can't add hid device: -71 [ 1707.506207][T27063] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1707.558173][T29966] usb 1-1: USB disconnect, device number 81 [ 1707.680605][T29966] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1707.718728][T27063] usb 8-1: USB disconnect, device number 103 [ 1707.737184][ T41] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1707.791401][ T41] usb 9-1: device descriptor read/8, error -71 [ 1707.800829][T29966] cp210x 1-1:0.0: device disconnected [ 1707.926347][ T41] usb usb9-port1: unable to enumerate USB device [ 1709.178807][T29966] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1709.378479][T29966] usb 1-1: Using ep0 maxpacket: 32 [ 1709.426898][T29966] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1709.553756][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1709.560589][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1709.602172][T29966] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1709.612752][T29966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.621267][T29966] usb 1-1: Product: syz [ 1709.625663][T29966] usb 1-1: Manufacturer: syz [ 1709.630637][T29966] usb 1-1: SerialNumber: syz [ 1709.822154][T29966] usb 1-1: config 0 descriptor?? [ 1710.420735][T29966] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1710.638371][T27063] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1710.642819][T29966] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1710.655597][T29966] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 1710.860803][T29966] usb 1-1: USB disconnect, device number 82 [ 1710.969607][T27063] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1710.981508][T27063] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1710.991727][T27063] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1711.009400][T27063] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1711.263686][T27063] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1711.273545][T27063] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.281966][T27063] usb 9-1: Product: syz [ 1711.286359][T27063] usb 9-1: Manufacturer: syz [ 1711.291348][T27063] usb 9-1: SerialNumber: syz [ 1711.383632][T27063] usb 9-1: config 0 descriptor?? [ 1711.752099][T27063] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1712.039656][T29966] usb 9-1: USB disconnect, device number 78 [ 1712.111333][ T9374] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1712.305334][T27063] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1712.349702][ T9374] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.360613][ T9374] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1712.370425][ T9374] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1712.379884][ T9374] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.593026][T27063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.604968][T27063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.615250][T27063] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1712.629316][T27063] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1712.639059][T27063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.089785][T27063] usb 3-1: config 0 descriptor?? [ 1713.272994][ T587] lo: entered allmulticast mode [ 1713.620043][ T579] lo: left allmulticast mode [ 1714.250731][ T41] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1714.457784][ T41] usb 9-1: device descriptor read/64, error -71 [ 1714.758332][ T41] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1714.968544][ T41] usb 9-1: device descriptor read/64, error -71 [ 1715.011801][T27063] usbhid 3-1:0.0: can't add hid device: -71 [ 1715.025205][T27063] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1715.116479][ T41] usb usb9-port1: attempt power cycle [ 1715.260605][T27063] usb 3-1: USB disconnect, device number 62 [ 1715.518547][ T41] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1715.574812][ T41] usb 9-1: device descriptor read/8, error -71 [ 1715.868132][ T41] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1715.950344][T29966] usb 8-1: USB disconnect, device number 104 [ 1715.972314][ T41] usb 9-1: device descriptor read/8, error -71 [ 1716.099536][ T41] usb usb9-port1: unable to enumerate USB device [ 1718.268416][T27063] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1718.509120][T27063] usb 10-1: Using ep0 maxpacket: 32 [ 1718.557748][T27063] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1718.605891][T27063] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1718.615726][T27063] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.624475][T27063] usb 10-1: Product: syz [ 1718.629159][T27063] usb 10-1: Manufacturer: syz [ 1718.634084][T27063] usb 10-1: SerialNumber: syz [ 1718.765644][T27063] usb 10-1: config 0 descriptor?? [ 1718.878140][ T41] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1719.125247][ T41] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1719.135169][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.215056][ T41] usb 8-1: config 0 descriptor?? [ 1719.323364][T27063] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1719.327193][ T41] cp210x 8-1:0.0: cp210x converter detected [ 1719.416408][ T684] syz_tun: entered allmulticast mode [ 1719.492352][ T682] syz_tun: left allmulticast mode [ 1719.748999][T27063] gs_usb 10-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1719.815951][ T41] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1719.823521][T27063] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71 [ 1719.887922][ T41] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1719.896031][ T41] cp210x 8-1:0.0: GPIO initialisation failed: -32 [ 1719.996233][T27063] usb 10-1: USB disconnect, device number 73 [ 1720.053194][ T41] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1720.204536][ T41] usb 8-1: USB disconnect, device number 105 [ 1720.306175][ T41] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1720.408799][ T41] cp210x 8-1:0.0: device disconnected [ 1721.054881][ T715] kernel profiling enabled (shift: 63) [ 1721.061081][ T715] profiling shift: 63 too large [ 1725.102212][ T773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2100'. [ 1725.111599][ T773] netlink: 'syz.2.2100': attribute type 7 has an invalid length. [ 1725.119697][ T773] netlink: 'syz.2.2100': attribute type 8 has an invalid length. [ 1725.127642][ T773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 1725.328417][T29966] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1725.388821][ T773] ip6gretap0: entered promiscuous mode [ 1725.551479][ T773] syz_tun: entered promiscuous mode [ 1725.557898][T29966] usb 9-1: Using ep0 maxpacket: 8 [ 1725.637675][T29966] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.714796][ T773] gretap0: entered promiscuous mode [ 1725.768601][T29966] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1725.778149][T29966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.318360][ T794] lo: entered allmulticast mode [ 1726.403688][ T793] lo: left allmulticast mode [ 1726.806516][ T798] tipc: Enabled bearer , priority 0 [ 1726.881492][ T802] syzkaller0: entered promiscuous mode [ 1726.887221][ T802] syzkaller0: entered allmulticast mode [ 1727.256473][ T798] tipc: Resetting bearer [ 1727.511643][T27063] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1727.710200][T27063] usb 3-1: Using ep0 maxpacket: 32 [ 1727.779760][T27063] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1727.862001][T27063] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1727.871501][T27063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.879780][T27063] usb 3-1: Product: syz [ 1727.884065][T27063] usb 3-1: Manufacturer: syz [ 1727.888930][T27063] usb 3-1: SerialNumber: syz [ 1728.114479][T27063] usb 3-1: config 0 descriptor?? [ 1728.577067][T29966] usb 9-1: USB disconnect, device number 83 [ 1728.713919][T27063] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1729.180911][T27063] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1729.285043][T27063] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1729.453543][T27063] usb 3-1: USB disconnect, device number 63 [ 1730.676883][ T802] tipc: Resetting bearer [ 1730.801543][ T802] tipc: Disabling bearer [ 1734.026827][ T925] syz_tun: entered allmulticast mode [ 1734.069456][ T923] syz_tun: left allmulticast mode [ 1734.467681][T10593] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1734.666113][T10593] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1734.674563][T10593] usb 1-1: config 0 has no interface number 0 [ 1734.748045][T10593] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.767768][T10593] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.779368][T10593] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1734.788859][T10593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.905188][T10593] usb 1-1: config 0 descriptor?? [ 1735.508408][T10593] usbhid 1-1:0.1: can't add hid device: -71 [ 1735.515148][T10593] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1735.660217][T10593] usb 1-1: USB disconnect, device number 83 [ 1735.747817][ T965] tipc: Enabled bearer , priority 0 [ 1735.815100][ T957] syzkaller0: entered promiscuous mode [ 1735.821074][ T957] syzkaller0: entered allmulticast mode [ 1735.965924][ T957] tipc: Resetting bearer [ 1736.977698][T27063] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1737.190309][ T10] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1737.275098][T27063] usb 3-1: Using ep0 maxpacket: 8 [ 1737.329968][T27063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1737.341569][T27063] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1737.351469][T27063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.446782][T27063] usb 3-1: config 0 descriptor?? [ 1737.482658][ T10] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1737.492354][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.620124][ T10] usb 8-1: config 0 descriptor?? [ 1737.738437][ T10] cp210x 8-1:0.0: cp210x converter detected [ 1737.810546][T27063] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1738.158610][ T1030] kernel profiling enabled (shift: 63) [ 1738.164505][ T1030] profiling shift: 63 too large [ 1738.352884][ T10] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1738.461550][ T10] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1738.471422][ T10] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 1738.642343][ T10] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1738.835563][ T10] usb 8-1: USB disconnect, device number 106 [ 1738.943341][T31246] udevd[31246]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory [ 1738.994616][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1739.039042][ T965] tipc: Resetting bearer [ 1739.089303][ T10] cp210x 8-1:0.0: device disconnected [ 1739.253601][ T965] tipc: Disabling bearer [ 1740.472059][ T10] usb 3-1: USB disconnect, device number 64 [ 1743.742322][ T1127] capability: warning: `syz.7.2137' uses 32-bit capabilities (legacy support in use) [ 1745.666863][ T1146] tipc: Enabled bearer , priority 0 [ 1745.853096][ T1159] syzkaller0: entered promiscuous mode [ 1745.859654][ T1159] syzkaller0: entered allmulticast mode [ 1745.967874][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1749.255987][ T10] usb 3-1: device descriptor read/all, error -71 [ 1749.471263][ T1159] tipc: Resetting bearer [ 1749.830432][ T1159] tipc: Disabling bearer [ 1750.170114][ T1184] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1750.682080][ T10] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1750.768031][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 1750.927928][ T10] usb 10-1: device descriptor read/64, error -32 [ 1751.218128][ T10] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1751.469670][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1751.574340][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.670113][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1751.679920][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.688468][ T10] usb 10-1: Product: syz [ 1751.692861][ T10] usb 10-1: Manufacturer: syz [ 1751.697804][ T10] usb 10-1: SerialNumber: syz [ 1751.808887][ T10] usb 10-1: config 0 descriptor?? [ 1752.380597][ T30] audit: type=1326 audit(1768984416.663:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.9.2146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1752.382130][T29966] usb 10-1: USB disconnect, device number 75 [ 1752.554377][ T30] audit: type=1326 audit(1768984416.703:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1180 comm="syz.9.2146" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1755.891638][T29966] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1755.983022][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1756.000471][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1756.022828][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1756.056834][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1756.088817][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1756.206504][T29966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.222365][T29966] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.232709][T29966] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1756.246062][T29966] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1756.255616][T29966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.330416][T29966] usb 8-1: config 0 descriptor?? [ 1758.112949][T29966] usbhid 8-1:0.0: can't add hid device: -71 [ 1758.125184][T29966] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1758.139276][ T5793] Bluetooth: hci4: command tx timeout [ 1758.166473][T29966] usb 8-1: USB disconnect, device number 107 [ 1758.655321][ T1311] tipc: Enabled bearer , priority 0 [ 1758.728040][ T1303] syzkaller0: entered promiscuous mode [ 1758.733781][ T1303] syzkaller0: entered allmulticast mode [ 1759.479395][ T1308] tipc: Resetting bearer [ 1760.057792][ T10] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1760.218473][ T5793] Bluetooth: hci4: command tx timeout [ 1760.264540][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1760.337103][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1760.425851][ T10] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1760.435692][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1760.444291][ T10] usb 8-1: Product: syz [ 1760.448886][ T10] usb 8-1: Manufacturer: syz [ 1760.453826][ T10] usb 8-1: SerialNumber: syz [ 1760.636405][ T10] usb 8-1: config 0 descriptor?? [ 1761.268756][ T10] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1761.481413][ T10] gs_usb 8-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1761.606528][ T10] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -22 [ 1761.828321][ T10] usb 8-1: USB disconnect, device number 108 [ 1762.298271][ T5793] Bluetooth: hci4: command tx timeout [ 1763.083958][ T1264] chnl_net:caif_netlink_parms(): no params data found [ 1764.378398][ T5793] Bluetooth: hci4: command tx timeout [ 1764.462693][ T1463] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1764.627915][ T1303] tipc: Resetting bearer [ 1764.811155][ T1303] tipc: Disabling bearer [ 1765.077812][T27063] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1765.307821][T27063] usb 3-1: Using ep0 maxpacket: 16 [ 1765.336859][T27063] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.470527][T27063] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1765.484201][T27063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.494424][T27063] usb 3-1: Product: syz [ 1765.499139][T27063] usb 3-1: Manufacturer: syz [ 1765.503923][T27063] usb 3-1: SerialNumber: syz [ 1765.667896][T27063] usb 3-1: config 0 descriptor?? [ 1766.005459][T27063] usb 3-1: USB disconnect, device number 67 [ 1766.023726][ T30] audit: type=1326 audit(1768984430.263:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1459 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1766.046380][ T30] audit: type=1326 audit(1768984430.263:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1459 comm="syz.2.2165" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1766.649830][ T1264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.657825][ T1264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.779321][ T1264] bridge_slave_0: entered allmulticast mode [ 1766.802492][ T1264] bridge_slave_0: entered promiscuous mode [ 1766.958327][ T1264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.965738][ T1264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.038563][ T1264] bridge_slave_1: entered allmulticast mode [ 1767.105837][ T1264] bridge_slave_1: entered promiscuous mode [ 1767.896939][ T1264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.947862][T10593] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1767.986568][ T1264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.303341][T10593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.315175][T10593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.325721][T10593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1768.339844][T10593] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1768.353721][T10593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.623191][ T1264] team0: Port device team_slave_0 added [ 1768.623968][T10593] usb 1-1: config 0 descriptor?? [ 1768.742640][ T1264] team0: Port device team_slave_1 added [ 1768.879685][T27063] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1769.111596][T27063] usb 10-1: Using ep0 maxpacket: 32 [ 1769.185161][T27063] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1769.303337][T27063] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1769.313523][T27063] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.322120][T27063] usb 10-1: Product: syz [ 1769.326598][T27063] usb 10-1: Manufacturer: syz [ 1769.331766][T27063] usb 10-1: SerialNumber: syz [ 1769.455394][ T1264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.462977][ T1264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1769.495745][ T1264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.525297][T27063] usb 10-1: config 0 descriptor?? [ 1770.005990][ T1264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.014175][ T1264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1770.041610][ T1264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.252179][T27063] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1770.476793][T27063] gs_usb 10-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1770.558830][T27063] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -22 [ 1770.669299][T10593] usbhid 1-1:0.0: can't add hid device: -71 [ 1770.676042][T10593] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1770.722173][T27063] usb 10-1: USB disconnect, device number 76 [ 1770.878500][T10593] usb 1-1: USB disconnect, device number 84 [ 1770.981583][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1770.988518][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1771.353411][ T1600] can0: slcan on ttyS3. [ 1771.734601][ T1600] can0 (unregistered): slcan off ttyS3. [ 1771.774894][ T1264] hsr_slave_0: entered promiscuous mode [ 1771.861887][ T1264] hsr_slave_1: entered promiscuous mode [ 1771.941052][ T1264] debugfs: 'hsr0' already exists in 'hsr' [ 1771.947047][ T1264] Cannot create hsr debugfs directory [ 1773.911923][ T1716] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1774.977681][T27063] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1775.218318][T27063] usb 3-1: Using ep0 maxpacket: 16 [ 1775.250402][T27063] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.406707][T27063] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1775.422671][T27063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.433102][T27063] usb 3-1: Product: syz [ 1775.437649][T27063] usb 3-1: Manufacturer: syz [ 1775.442487][T27063] usb 3-1: SerialNumber: syz [ 1775.562281][T27063] usb 3-1: config 0 descriptor?? [ 1775.976236][ T30] audit: type=1326 audit(1768984440.253:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1691 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1776.006815][T27063] usb 3-1: USB disconnect, device number 68 [ 1776.143029][ T30] audit: type=1326 audit(1768984440.283:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1691 comm="syz.2.2180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1776.651288][ T1264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1776.762481][ T1264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1776.965675][ T1264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1777.086717][ T1264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1777.717681][T10593] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1777.990445][T10593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1778.002136][T10593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1778.012712][T10593] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1778.026255][T10593] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1778.035870][T10593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.221659][T10593] usb 10-1: config 0 descriptor?? [ 1779.821235][T10593] usbhid 10-1:0.0: can't add hid device: -71 [ 1779.829961][T10593] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1779.861062][ T1264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1780.003657][T10593] usb 10-1: USB disconnect, device number 77 [ 1780.261083][ T1264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1780.488183][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.495807][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1780.677457][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.685068][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1781.159047][ T1854] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2196'. [ 1782.447796][ T10] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 1782.770513][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1782.779991][ T10] usb 1-1: config 0 has no interface number 0 [ 1782.782014][ T1867] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1782.843445][ T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1782.853452][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.188636][ T10] usb 1-1: config 0 descriptor?? [ 1783.362743][ T10] usb 1-1: selecting invalid altsetting 1 [ 1783.387722][ T1004] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1783.489977][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 1783.557998][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1783.720136][ T1004] usb 3-1: Using ep0 maxpacket: 16 [ 1783.801864][ T1004] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.822382][ T41] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 1784.068001][ T41] usb 8-1: Using ep0 maxpacket: 16 [ 1784.078854][ T1004] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1784.088626][ T1004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.096916][ T1004] usb 3-1: Product: syz [ 1784.103928][ T1004] usb 3-1: Manufacturer: syz [ 1784.109158][ T1004] usb 3-1: SerialNumber: syz [ 1784.144707][ T41] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1784.153874][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1784.164605][ T41] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1784.281887][ T41] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1784.292045][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.302625][ T41] usb 8-1: Product: syz [ 1784.307022][ T41] usb 8-1: Manufacturer: syz [ 1784.309545][ T1004] usb 3-1: config 0 descriptor?? [ 1784.312866][ T41] usb 8-1: SerialNumber: syz [ 1784.623249][ T10] DVB: Unable to find symbol cx22700_attach() [ 1784.852826][ T30] audit: type=1326 audit(1768984449.083:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1784.879741][ T30] audit: type=1326 audit(1768984449.113:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1863 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d539 code=0x7ffc0000 [ 1784.920153][ T1004] usb 3-1: USB disconnect, device number 69 [ 1785.031887][ T41] usb 8-1: 0:2 : does not exist [ 1785.535506][ T10] DVB: Unable to find symbol tda10046_attach() [ 1785.543527][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1785.763649][ T10] usb 1-1: USB disconnect, device number 85 [ 1786.056355][ T1264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1787.221225][T10593] usb 8-1: USB disconnect, device number 109 [ 1788.509314][ T1983] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2209'. [ 1789.539211][ T41] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 1789.757528][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 1789.839481][ T41] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1789.919859][ T41] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1789.930742][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1789.941060][ T41] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1789.958541][ T41] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1789.969685][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.349331][ T41] usbtmc 8-1:16.0: bulk endpoints not found [ 1791.122326][ T2027] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1791.238170][ T1264] veth0_vlan: entered promiscuous mode [ 1791.455779][ T1264] veth1_vlan: entered promiscuous mode [ 1791.817546][ T41] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1792.227761][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 1792.235483][ T1264] veth0_macvtap: entered promiscuous mode [ 1792.394683][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.499796][ T1264] veth1_macvtap: entered promiscuous mode [ 1792.530685][ T41] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1792.542190][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.551000][ T41] usb 1-1: Product: syz [ 1792.555285][ T41] usb 1-1: Manufacturer: syz [ 1792.560223][ T41] usb 1-1: SerialNumber: syz [ 1792.611753][ T10] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1792.675070][ T41] usb 1-1: config 0 descriptor?? [ 1792.844069][T29966] usb 8-1: USB disconnect, device number 110 [ 1792.848386][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 1792.932966][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1792.944672][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1792.958886][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1792.968518][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.083527][ T1264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1793.188512][ T30] audit: type=1326 audit(1768984457.463:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1793.293886][ T10] usb 10-1: config 0 descriptor?? [ 1793.342688][ T1264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1793.417627][ T30] audit: type=1326 audit(1768984457.503:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.0.2214" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x7ffc0000 [ 1793.880664][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1793.979768][T20050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.100866][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 1794.108682][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1794.246540][T20050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1794.281786][ T10] usb 10-1: USB disconnect, device number 78 [ 1795.067764][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.068143][T27063] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1797.191684][T27063] usb 8-1: Using ep0 maxpacket: 16 [ 1797.299949][ T1004] usb 1-1: USB disconnect, device number 86 [ 1797.820386][T27063] usb 8-1: device descriptor read/all, error -71 [ 1798.719619][ T2107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2222'. [ 1802.837622][T10593] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1803.069127][T10593] usb 3-1: Using ep0 maxpacket: 8 [ 1803.101922][T10593] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1803.112481][T10593] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1803.122709][T10593] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1803.134059][T10593] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1803.147619][T10593] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1803.156947][T10593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.359440][ T2148] tipc: Enabled bearer , priority 0 [ 1803.552195][T10593] usbtmc 3-1:16.0: bulk endpoints not found [ 1803.594304][ T2148] tipc: Resetting bearer [ 1804.331687][ T2169] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1804.547820][T10593] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1804.753782][T10593] usb 10-1: Using ep0 maxpacket: 16 [ 1804.810498][T10593] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1804.822367][T10593] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1804.836196][T10593] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1804.845701][T10593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.974646][T10593] usb 10-1: config 0 descriptor?? [ 1805.057566][T29966] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 1805.321256][T29966] usb 8-1: Using ep0 maxpacket: 16 [ 1805.464000][T29966] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.604803][T29966] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1805.614617][T29966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.627446][T29966] usb 8-1: Product: syz [ 1805.631868][T29966] usb 8-1: Manufacturer: syz [ 1805.636712][T29966] usb 8-1: SerialNumber: syz [ 1805.687970][T10593] usbhid 10-1:0.0: can't add hid device: -71 [ 1805.695280][T10593] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1805.718466][T10593] usb 10-1: USB disconnect, device number 79 [ 1805.733301][T29966] usb 8-1: config 0 descriptor?? [ 1806.089030][ T30] audit: type=1326 audit(1768984470.363:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2157 comm="syz.7.2231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1806.121159][T27063] usb 3-1: USB disconnect, device number 70 [ 1806.210822][ T10] usb 8-1: USB disconnect, device number 113 [ 1806.344586][ T30] audit: type=1326 audit(1768984470.403:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2157 comm="syz.7.2231" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1807.239823][T29966] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1807.518556][T29966] usb 3-1: Using ep0 maxpacket: 16 [ 1807.546860][T29966] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1807.556165][T29966] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1807.571447][T29966] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1807.685178][T29966] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1807.695142][T29966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.704080][T29966] usb 3-1: Product: syz [ 1807.708766][T29966] usb 3-1: Manufacturer: syz [ 1807.713596][T29966] usb 3-1: SerialNumber: syz [ 1807.854999][ T2262] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2235'. [ 1808.162719][ T2148] tipc: Disabling bearer [ 1808.368466][T29966] usb 3-1: 0:2 : does not exist [ 1810.284788][ T10] usb 3-1: USB disconnect, device number 71 [ 1812.921382][ T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1813.150532][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1813.162596][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1813.263143][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1813.272682][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1813.281287][ T10] usb 3-1: Manufacturer: syz [ 1813.299036][T27063] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1813.440689][ T10] usb 3-1: config 0 descriptor?? [ 1813.557885][T27063] usb 10-1: Using ep0 maxpacket: 8 [ 1813.662624][T27063] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1813.673141][T27063] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1813.683586][T27063] usb 10-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1813.695037][T27063] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1813.716029][T27063] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1813.727463][T27063] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.984740][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1813.991757][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1814.073636][ T10] usb 3-1: USB disconnect, device number 72 [ 1814.142019][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1814.150498][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1814.170377][T27063] usbtmc 10-1:16.0: bulk endpoints not found [ 1814.347982][T27064] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 1814.567605][T27064] usb 8-1: Using ep0 maxpacket: 16 [ 1814.664465][T27064] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1814.676146][T27064] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1814.691312][T27064] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1814.700881][T27064] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.928458][T27064] usb 8-1: config 0 descriptor?? [ 1815.632327][T27064] usbhid 8-1:0.0: can't add hid device: -71 [ 1815.639312][T27064] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1815.796902][T27064] usb 8-1: USB disconnect, device number 114 [ 1816.008709][ T2370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2246'. [ 1816.439171][T16154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1816.440842][T27064] usb 10-1: USB disconnect, device number 80 [ 1816.459776][T16154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1816.497056][T16154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1816.556212][T16154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1816.593081][T16154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1817.959359][T29966] usb 8-1: new high-speed USB device number 115 using dummy_hcd [ 1818.208194][T29966] usb 8-1: Using ep0 maxpacket: 16 [ 1818.317049][T29966] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1818.332326][T29966] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.343999][T29966] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1818.485659][T29966] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1818.495555][T29966] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.504142][T29966] usb 8-1: Product: syz [ 1818.508702][T29966] usb 8-1: Manufacturer: syz [ 1818.513558][T29966] usb 8-1: SerialNumber: syz [ 1818.677745][T27064] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1818.700270][T16154] Bluetooth: hci3: command tx timeout [ 1819.404807][T29966] usb 8-1: 0:2 : does not exist [ 1819.793547][T27064] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1819.802071][T27064] usb 1-1: config 0 has no interface number 0 [ 1820.783268][T16154] Bluetooth: hci3: command tx timeout [ 1820.788002][T27064] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.800006][T27064] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.810183][T27064] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1820.819632][T27064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.812139][T27064] usb 1-1: config 0 descriptor?? [ 1821.875207][T29966] usb 8-1: USB disconnect, device number 115 [ 1822.051323][ T2383] chnl_net:caif_netlink_parms(): no params data found [ 1822.809680][T27064] usb 1-1: can't set config #0, error -71 [ 1822.858581][T16154] Bluetooth: hci3: command tx timeout [ 1822.910125][T27064] usb 1-1: USB disconnect, device number 87 [ 1823.762725][T27064] usb 8-1: new high-speed USB device number 116 using dummy_hcd [ 1824.036318][T27064] usb 8-1: config 0 has an invalid interface number: 238 but max is 0 [ 1824.045177][T27064] usb 8-1: config 0 has no interface number 0 [ 1824.229813][T27064] usb 8-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1824.240297][T27064] usb 8-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1824.250634][T27064] usb 8-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 128 [ 1824.426584][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.456329][ T41] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 1824.533940][T27064] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 1824.547096][T27064] usb 8-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 1824.557142][T27064] usb 8-1: Product: syz [ 1824.561841][T27064] usb 8-1: Manufacturer: syz [ 1824.571238][T27064] usb 8-1: SerialNumber: syz [ 1824.695334][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1824.709547][ T41] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.739176][T27064] usb 8-1: config 0 descriptor?? [ 1824.794053][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1824.819498][ T41] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1824.830837][ T41] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1824.839605][ T41] usb 10-1: Manufacturer: syz [ 1824.850499][ T2572] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1824.948360][T16154] Bluetooth: hci3: command tx timeout [ 1824.970136][T27064] ni6501 8-1:0.238: driver 'ni6501' failed to auto-configure device. [ 1825.012503][ T41] usb 10-1: config 0 descriptor?? [ 1825.160797][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.288988][T27064] usb 8-1: USB disconnect, device number 116 [ 1825.414901][ T2633] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2257'. [ 1825.559953][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.754041][ T41] usbhid 10-1:0.0: can't add hid device: -71 [ 1825.762611][ T41] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1825.913520][ T41] usb 10-1: USB disconnect, device number 81 [ 1825.916608][T27064] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1826.213273][T27064] usb 3-1: Using ep0 maxpacket: 8 [ 1826.259863][T27064] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1826.270678][T27064] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1826.290420][T27064] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1826.301836][T27064] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1826.319938][T27064] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1826.331298][T27064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.663057][T27064] usbtmc 3-1:16.0: bulk endpoints not found [ 1827.186531][ T59] bridge_slave_1: left allmulticast mode [ 1827.193058][ T59] bridge_slave_1: left promiscuous mode [ 1827.200062][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.301500][ T59] bridge_slave_0: left allmulticast mode [ 1827.307661][ T59] bridge_slave_0: left promiscuous mode [ 1827.314432][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.642598][T29966] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1827.848117][T29966] usb 1-1: Using ep0 maxpacket: 16 [ 1827.872317][T29966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1827.884102][T29966] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1827.902865][T29966] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1827.912886][T29966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.071768][T29966] usb 1-1: config 0 descriptor?? [ 1828.769529][T29966] usbhid 1-1:0.0: can't add hid device: -71 [ 1828.776259][T29966] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1828.818355][T29966] usb 1-1: USB disconnect, device number 88 [ 1828.930325][T10593] usb 3-1: USB disconnect, device number 73 [ 1829.157891][ T10] usb 10-1: new high-speed USB device number 82 using dummy_hcd [ 1829.427000][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.505995][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.507890][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1829.521889][ T10] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1829.538024][ T10] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1829.613140][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1829.633883][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1829.643800][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.645946][ T59] bond0 (unregistering): Released all slaves [ 1829.654592][ T10] usb 10-1: Product: syz [ 1829.663258][ T10] usb 10-1: Manufacturer: syz [ 1829.669620][ T10] usb 10-1: SerialNumber: syz [ 1829.704002][T10593] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1829.940651][T10593] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1829.950112][T10593] usb 3-1: config 0 has no interface number 0 [ 1830.025624][T10593] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.038592][T10593] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.049624][T10593] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1830.061140][T10593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.137850][ T2383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.145601][ T2383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.194953][ T2383] bridge_slave_0: entered allmulticast mode [ 1830.226901][ T2383] bridge_slave_0: entered promiscuous mode [ 1830.255836][T10593] usb 3-1: config 0 descriptor?? [ 1830.780657][ T2383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.789031][ T2383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.870965][ T2383] bridge_slave_1: entered allmulticast mode [ 1830.911567][ T2383] bridge_slave_1: entered promiscuous mode [ 1830.947969][ T10] cdc_ncm 10-1:1.0: bind() failure [ 1830.968464][T10593] usbhid 3-1:0.1: can't add hid device: -71 [ 1830.975342][T10593] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1831.095420][ T10] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 1831.106862][T10593] usb 3-1: USB disconnect, device number 74 [ 1831.338353][ T10] usb 10-1: USB disconnect, device number 82 [ 1831.913382][ T59] hsr_slave_0: left promiscuous mode [ 1832.006217][ T59] hsr_slave_1: left promiscuous mode [ 1832.029875][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1832.038260][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1832.164088][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1832.171998][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1832.406826][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1832.414508][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1833.138243][ T59] veth1_macvtap: left promiscuous mode [ 1833.149792][ T59] veth0_macvtap: left promiscuous mode [ 1833.171018][ T59] veth1_vlan: left promiscuous mode [ 1834.139043][ T59] veth0_vlan: left promiscuous mode [ 1835.330545][ T2853] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2268'. [ 1838.155092][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1838.268711][ T10] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1838.348193][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1838.527079][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1838.604301][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1838.615132][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1838.625596][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1838.635873][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1838.646496][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1838.659985][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1838.670023][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.870406][ T10] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 1839.442513][ T2383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.463293][ T2858] syz_tun: entered allmulticast mode [ 1839.537783][ T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1839.567857][ T2383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.578965][ T2858] syz_tun: left allmulticast mode [ 1839.738351][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1839.812329][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1839.830118][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1839.846331][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1839.855935][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.116210][ T10] usb 1-1: config 0 descriptor?? [ 1840.171072][ T2383] team0: Port device team_slave_0 added [ 1840.286018][ T2383] team0: Port device team_slave_1 added [ 1840.801578][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1840.809213][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1840.935895][ T10] usb 1-1: USB disconnect, device number 89 [ 1841.108308][ T2383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1841.115512][ T2383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.143011][ T2383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1841.229318][T10593] usb 3-1: USB disconnect, device number 75 [ 1841.403374][ T2383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1841.412377][ T2383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1841.439836][ T2383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1842.289471][T10593] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1842.524262][T10593] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1842.532850][T10593] usb 3-1: config 0 has no interface number 0 [ 1842.535861][ T2383] hsr_slave_0: entered promiscuous mode [ 1842.602134][ T2383] hsr_slave_1: entered promiscuous mode [ 1842.640848][ T2383] debugfs: 'hsr0' already exists in 'hsr' [ 1842.646821][ T2383] Cannot create hsr debugfs directory [ 1842.647617][T10593] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.663685][T10593] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.674223][T10593] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1842.683913][T10593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.777539][ T10] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1842.920348][T10593] usb 3-1: config 0 descriptor?? [ 1842.987718][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1843.053700][ T10] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1843.062524][ T10] usb 1-1: config 0 has no interface number 0 [ 1843.165387][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1843.176949][ T10] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1843.189627][ T10] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1843.207653][ T10] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1843.222940][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1843.232411][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.828018][ T10] usb 1-1: config 0 descriptor?? [ 1844.134677][ T10] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1845.121067][T10593] usbhid 3-1:0.1: can't add hid device: -71 [ 1845.128138][T10593] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1845.161364][T10593] usb 3-1: USB disconnect, device number 76 [ 1845.346026][ T10] usb 1-1: USB disconnect, device number 90 [ 1845.619294][ T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1847.021636][ T3102] overlayfs: failed to resolve './file1': -2 [ 1847.329652][ T3111] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2283'. [ 1851.206267][ T2383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1851.364781][ T2383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1851.882613][ T3151] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1851.898209][ T2383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1852.224051][ T2383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1852.538982][T27064] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1852.688290][T10593] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1852.767984][T27064] usb 1-1: Using ep0 maxpacket: 16 [ 1852.936984][T10593] usb 10-1: Using ep0 maxpacket: 8 [ 1853.056483][T10593] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.151108][T10593] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1853.161804][T10593] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1853.172277][T10593] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1853.187788][T10593] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1853.197565][T10593] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.469903][ T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1853.496947][T27064] usb 1-1: device descriptor read/all, error -71 [ 1853.660334][T10593] usbtmc 10-1:16.0: bulk endpoints not found [ 1853.745737][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1853.816026][ T10] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.828000][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1853.834909][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1853.844461][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.040351][ T10] usb 3-1: config 0 descriptor?? [ 1854.636660][ T10] hid_parser_main: 5 callbacks suppressed [ 1854.636792][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.650690][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.658262][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.665694][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.683116][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.693249][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.702243][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.709924][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.717524][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.724982][ T10] logitech 0003:046D:C286.001C: unknown main item tag 0x0 [ 1854.971624][ T2383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1855.038388][ T10] logitech 0003:046D:C286.001C: hidraw0: USB HID v0.09 Device [HID 046d:c286] on usb-dummy_hcd.2-1/input0 [ 1855.050217][ T10] logitech 0003:046D:C286.001C: no inputs found [ 1855.073852][ T10] usb 3-1: USB disconnect, device number 77 [ 1855.567607][ T2383] 8021q: adding VLAN 0 to HW filter on device team0 [ 1855.814607][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1855.822313][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1856.036348][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 1856.044080][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1856.061883][ T10] usb 10-1: USB disconnect, device number 83 [ 1856.364794][ T3232] fido_id[3232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1862.535553][ T3286] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1862.791391][ T2383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.287694][T27063] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 1863.677741][T27063] usb 10-1: Using ep0 maxpacket: 16 [ 1863.800010][T27063] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.926724][T27063] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1863.936766][T27063] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.945477][T27063] usb 10-1: Product: syz [ 1863.950184][T27063] usb 10-1: Manufacturer: syz [ 1863.955096][T27063] usb 10-1: SerialNumber: syz [ 1864.129889][T27063] usb 10-1: config 0 descriptor?? [ 1864.558096][ T30] audit: type=1326 audit(1768984528.833:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3270 comm="syz.9.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1864.589587][T29966] usb 10-1: USB disconnect, device number 84 [ 1864.765250][ T30] audit: type=1326 audit(1768984528.943:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3270 comm="syz.9.2300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33539 code=0x7ffc0000 [ 1866.089549][T29966] usb 8-1: new high-speed USB device number 117 using dummy_hcd [ 1866.688099][T29966] usb 8-1: Using ep0 maxpacket: 8 [ 1866.776371][T29966] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1866.786881][T29966] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1866.797338][T29966] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1866.809116][T29966] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1866.822619][T29966] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1866.831897][T29966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.226120][T29966] usbtmc 8-1:16.0: bulk endpoints not found [ 1870.001959][T27063] usb 8-1: USB disconnect, device number 117 [ 1870.680665][ T2383] veth0_vlan: entered promiscuous mode [ 1871.300113][ T2383] veth1_vlan: entered promiscuous mode [ 1872.087835][ T41] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1872.164360][ T2383] veth0_macvtap: entered promiscuous mode [ 1872.307738][ T41] usb 3-1: Using ep0 maxpacket: 8 [ 1872.363150][ T2383] veth1_macvtap: entered promiscuous mode [ 1872.420981][ T41] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1872.430121][ T41] usb 3-1: config 0 has no interface number 0 [ 1872.503525][ T41] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1872.515731][ T41] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1872.527847][ T41] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1872.539603][ T41] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1872.553284][ T41] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1872.562893][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.654035][ T41] usb 3-1: config 0 descriptor?? [ 1872.888416][ T2383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1872.905361][ T41] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1873.130768][ T2383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1873.471546][ T1089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.532076][ T1089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.881650][ T1089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.071868][ T1089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.534493][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-1) [ 1874.548981][ T10] usb 3-1: USB disconnect, device number 78 [ 1874.614816][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1875.939961][ T3427] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1876.800669][T27063] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1876.978150][T27063] usb 1-1: Using ep0 maxpacket: 8 [ 1877.016493][T27063] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1877.027092][T27063] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1877.037739][T27063] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1877.049069][T27063] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1877.062636][T27063] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1877.072256][T27063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.137920][ T10] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 1877.795546][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1877.833401][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1877.844526][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1877.862343][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1877.930913][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1878.162289][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 1878.258737][T27063] usbtmc 1-1:16.0: bulk endpoints not found [ 1879.415239][ T10] usb 8-1: device descriptor read/all, error -71 [ 1879.978627][ T5793] Bluetooth: hci4: command tx timeout [ 1881.028277][ T10] usb 1-1: USB disconnect, device number 93 [ 1882.069924][ T5793] Bluetooth: hci4: command tx timeout [ 1883.505045][ T3447] chnl_net:caif_netlink_parms(): no params data found [ 1883.671401][ T10] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1883.930959][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1883.941546][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1883.952046][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1883.968138][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1883.980358][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1883.989985][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.151038][ T5793] Bluetooth: hci4: command tx timeout [ 1884.460283][ T10] usb 10-1: config 0 descriptor?? [ 1884.745619][ T8132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.789402][ T10] hdpvr 10-1:0.0: firmware version 0x8 dated [ 1885.070440][ T8132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.136688][ T10] hdpvr 10-1:0.0: device init failed [ 1885.142715][ T10] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 1885.284618][ T10] usb 10-1: USB disconnect, device number 85 [ 1885.450012][ T8132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.918773][ T8132] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.220869][ T5793] Bluetooth: hci4: command tx timeout [ 1886.728160][T29966] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1886.897628][T29966] usb 1-1: Using ep0 maxpacket: 8 [ 1886.946387][T29966] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1886.957130][T29966] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1886.967935][T29966] usb 1-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1886.979151][T29966] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1886.992819][T29966] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1887.002328][T29966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.011250][ T3647] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 1887.471828][ T8132] bridge_slave_1: left allmulticast mode [ 1887.477999][ T8132] bridge_slave_1: left promiscuous mode [ 1887.484800][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1887.590208][T29966] usbtmc 1-1:16.0: bulk endpoints not found [ 1887.650543][ T8132] bridge_slave_0: left allmulticast mode [ 1887.656375][ T8132] bridge_slave_0: left promiscuous mode [ 1887.662971][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1887.777593][T27063] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1888.009916][T27063] usb 8-1: Using ep0 maxpacket: 16 [ 1888.115028][T27063] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.233223][T27063] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1888.243082][T27063] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.252135][T27063] usb 8-1: Product: syz [ 1888.263045][T27063] usb 8-1: Manufacturer: syz [ 1888.269814][T27063] usb 8-1: SerialNumber: syz [ 1888.382138][T27063] usb 8-1: config 0 descriptor?? [ 1888.608574][T29966] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1888.720816][ T30] audit: type=1326 audit(1768984553.003:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3632 comm="syz.7.2336" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1888.780481][T27063] usb 8-1: USB disconnect, device number 120 [ 1888.855091][T29966] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.866164][T29966] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1888.879735][T29966] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1888.890257][T29966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.911353][ T30] audit: type=1326 audit(1768984553.013:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3632 comm="syz.7.2336" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d539 code=0x7ffc0000 [ 1889.401639][ T8132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.474941][ T8132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1889.595672][ T8132] bond0 (unregistering): Released all slaves [ 1889.682899][T27063] usb 1-1: USB disconnect, device number 94 [ 1890.594723][ T8132] hsr_slave_0: left promiscuous mode [ 1890.658889][ T8132] hsr_slave_1: left promiscuous mode [ 1890.688979][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1890.696774][ T8132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1890.766943][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1890.775233][ T8132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1890.904839][ T8132] veth1_macvtap: left promiscuous mode [ 1890.955412][ T8132] veth0_macvtap: left promiscuous mode [ 1890.978002][ T8132] veth1_vlan: left promiscuous mode [ 1891.009955][ T8132] veth0_vlan: left promiscuous mode [ 1892.312844][T29966] usb 3-1: USB disconnect, device number 79 [ 1892.521639][ T3746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1892.528550][ T3746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1892.536911][ T3746] vhci_hcd vhci_hcd.0: Device attached [ 1892.645673][ T3752] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 1892.652577][ T3752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1892.665321][ T3752] vhci_hcd vhci_hcd.0: Device attached [ 1892.816599][ T3746] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 1892.823515][ T3746] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1892.832393][ T3746] vhci_hcd vhci_hcd.0: Device attached [ 1892.874535][ T41] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1892.994465][ T3752] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1893.055091][ T3746] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 1893.061996][ T3746] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1893.078890][ T3746] vhci_hcd vhci_hcd.0: Device attached [ 1893.103438][ T3752] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(23) [ 1893.110334][ T3752] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1893.119006][ T3752] vhci_hcd vhci_hcd.0: Device attached [ 1893.268772][ T3746] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1893.370695][ T3752] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(27) [ 1893.377605][ T3752] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1893.391748][ T3752] vhci_hcd vhci_hcd.0: Device attached [ 1893.499813][ T3746] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1893.768668][ T3770] vhci_hcd: connection closed [ 1893.771743][ T143] vhci_hcd vhci_hcd.0: stop threads [ 1893.782506][ T143] vhci_hcd vhci_hcd.0: release socket [ 1893.794522][ T143] vhci_hcd vhci_hcd.0: disconnect device [ 1893.805940][ T3762] vhci_hcd: connection closed [ 1893.809576][ T3760] vhci_hcd: connection closed [ 1893.814593][ T3756] vhci_hcd: connection closed [ 1893.848134][ T3750] vhci_hcd: connection reset by peer [ 1893.859419][ T3753] vhci_hcd: connection closed [ 1893.876924][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1893.894184][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1894.119899][ T143] vhci_hcd vhci_hcd.0: stop threads [ 1894.125612][ T143] vhci_hcd vhci_hcd.0: release socket [ 1894.132051][ T143] vhci_hcd vhci_hcd.0: disconnect device [ 1894.234755][ T143] vhci_hcd vhci_hcd.0: stop threads [ 1894.240569][ T143] vhci_hcd vhci_hcd.0: release socket [ 1894.246277][ T143] vhci_hcd vhci_hcd.0: disconnect device [ 1894.335940][ T143] vhci_hcd vhci_hcd.0: stop threads [ 1894.342053][ T143] vhci_hcd vhci_hcd.0: release socket [ 1894.347902][ T143] vhci_hcd vhci_hcd.0: disconnect device [ 1894.382670][ T143] vhci_hcd vhci_hcd.0: stop threads [ 1894.388602][ T143] vhci_hcd vhci_hcd.0: release socket [ 1894.394395][ T143] vhci_hcd vhci_hcd.0: disconnect device [ 1894.515897][ T143] vhci_hcd vhci_hcd.0: stop threads [ 1894.523660][ T143] vhci_hcd vhci_hcd.0: release socket [ 1894.529779][ T143] vhci_hcd vhci_hcd.0: disconnect device [ 1895.062694][ T8132] team0 (unregistering): Port device team_slave_1 removed [ 1895.296610][ T8132] team0 (unregistering): Port device team_slave_0 removed [ 1895.951098][ T797] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1896.188995][ T797] usb 1-1: Using ep0 maxpacket: 8 [ 1896.229263][ T797] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1896.239615][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1896.253931][ T797] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1896.265343][ T797] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1896.276096][ T797] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1896.289511][ T797] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1896.299446][ T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.535812][ T797] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22 [ 1897.135628][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1897.143714][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1897.222670][ T3447] bridge_slave_0: entered allmulticast mode [ 1897.305036][ T3447] bridge_slave_0: entered promiscuous mode [ 1897.601392][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1897.611533][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1897.696071][ T3447] bridge_slave_1: entered allmulticast mode [ 1897.731979][ T3447] bridge_slave_1: entered promiscuous mode [ 1898.048164][ T41] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1898.348313][ T3447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1898.467144][ T3447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1898.984165][ T797] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 1899.072371][T29966] usb 1-1: USB disconnect, device number 95 [ 1899.166755][ T3447] team0: Port device team_slave_0 added [ 1899.259606][ T797] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.270561][ T797] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1899.280475][ T797] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1899.283113][ T3447] team0: Port device team_slave_1 added [ 1899.289955][ T797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.459529][ T10] usb usb34-port1: attempt power cycle [ 1899.946046][ T3447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1899.954817][ T3447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1899.981333][ T3447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1900.119471][ T10] usb usb34-port1: unable to enumerate USB device [ 1900.356289][ T3447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1900.364018][ T3447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1900.391485][ T3447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.660467][ T3915] binder: 3913:3915 ioctl 4018620d 0 returned -22 [ 1901.276363][ T3447] hsr_slave_0: entered promiscuous mode [ 1901.348270][ T3447] hsr_slave_1: entered promiscuous mode [ 1901.384093][ T3447] debugfs: 'hsr0' already exists in 'hsr' [ 1901.390164][ T3447] Cannot create hsr debugfs directory [ 1902.217998][ T10] usb 8-1: USB disconnect, device number 121 [ 1903.731231][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1903.946120][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.958018][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1904.102830][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1904.112536][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1904.121256][ T10] usb 3-1: Manufacturer: syz [ 1904.210504][ T10] usb 3-1: config 0 descriptor?? [ 1904.355287][T27063] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1904.572474][T27063] usb 1-1: Using ep0 maxpacket: 16 [ 1904.622904][T27063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1904.637001][T27063] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1904.655764][T27063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.791572][T27063] usb 1-1: config 0 descriptor?? [ 1905.139195][ T10] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #100: -71 [ 1905.150566][ T10] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 1905.166255][ T10] uclogic 0003:256C:006D.001D: failed probing pen v1 parameters: -71 [ 1905.178986][ T10] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 1905.188471][ T10] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71 [ 1905.508537][T27063] kye 0003:0458:5016.001E: control desc unexpectedly large [ 1905.517143][ T10] usb 3-1: USB disconnect, device number 80 [ 1905.676681][T27063] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001E/input/input25 [ 1905.898048][ T3447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1905.967981][T27063] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.001E/input/input26 [ 1906.035675][ T3447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1906.308771][T27063] kye 0003:0458:5016.001E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 1906.339365][ T41] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1906.431892][ T3447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1906.638382][ T41] usb 10-1: Using ep0 maxpacket: 8 [ 1906.658592][T27063] usb 1-1: USB disconnect, device number 96 [ 1906.781137][ T3447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1906.799461][ T41] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1906.810276][ T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1906.820586][ T41] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1906.830989][ T41] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1906.841618][ T41] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1906.855191][ T41] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1906.864758][ T41] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.415809][ T41] usbtmc 10-1:16.0: probe with driver usbtmc failed with error -22 [ 1907.896646][ T4113] fido_id[4113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1909.676443][ T3447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.225631][ T3447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1910.282508][ T797] usb 10-1: USB disconnect, device number 86 [ 1910.473743][ T2733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.481542][ T2733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.751171][T20050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.758968][T20050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1912.799490][T29966] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1913.016395][T29966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.028040][T29966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.122981][T29966] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1913.133226][T29966] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1913.145919][T29966] usb 3-1: Manufacturer: syz [ 1913.152726][ T797] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1913.354483][T29966] usb 3-1: config 0 descriptor?? [ 1913.374398][ T797] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xDE, changing to 0x8E [ 1913.391685][ T797] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1913.402466][ T797] usb 1-1: config 36 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1913.643873][ T797] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 1913.657908][ T797] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1913.666429][ T797] usb 1-1: Manufacturer: syz [ 1913.673042][ T797] usb 1-1: SerialNumber: syz [ 1914.141300][ T797] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1914.286667][ T797] usb 1-1: USB disconnect, device number 97 [ 1914.374962][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1914.414271][T29966] uclogic 0003:256C:006D.001F: interface is invalid, ignoring [ 1914.549234][T29966] usb 3-1: USB disconnect, device number 81 [ 1916.269296][ T3447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1916.928271][T29966] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 1917.180165][T29966] usb 8-1: Using ep0 maxpacket: 8 [ 1917.287569][T29966] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1917.297903][T29966] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1917.308444][T29966] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1917.318832][T29966] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1917.329212][T29966] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1917.348487][T29966] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1917.359599][T29966] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.746237][T29966] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 1919.923550][T29966] usb 8-1: USB disconnect, device number 122 [ 1920.253204][ T3447] veth0_vlan: entered promiscuous mode [ 1920.499279][ T3447] veth1_vlan: entered promiscuous mode [ 1921.253782][ T3447] veth0_macvtap: entered promiscuous mode [ 1921.408522][ T3447] veth1_macvtap: entered promiscuous mode [ 1921.567931][T27063] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1921.820486][T27063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.832404][T27063] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.918126][ T3447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1921.973292][T27063] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1921.982930][T27063] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1921.991372][T27063] usb 3-1: Manufacturer: syz [ 1922.069272][T27063] usb 3-1: config 0 descriptor?? [ 1922.213125][ T3447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1922.582932][ T3493] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.892131][T32454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1922.956863][T32454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.015000][T32454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1923.094470][T27063] uclogic 0003:256C:006D.0020: failed retrieving string descriptor #100: -71 [ 1923.104060][T27063] uclogic 0003:256C:006D.0020: failed retrieving pen parameters: -71 [ 1923.112594][T27063] uclogic 0003:256C:006D.0020: failed probing pen v1 parameters: -71 [ 1923.121213][T27063] uclogic 0003:256C:006D.0020: failed probing parameters: -71 [ 1923.130268][T27063] uclogic 0003:256C:006D.0020: probe with driver uclogic failed with error -71 [ 1923.438342][T27063] usb 3-1: USB disconnect, device number 82 [ 1924.825392][ T4363] trusted_key: syz.2.2399 sent an empty control message without MSG_MORE. [ 1926.078018][T29966] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1926.319953][T29966] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1926.329543][T29966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.361404][ T4378] binder_alloc: 4377: binder_alloc_buf, no vma [ 1926.426370][T29966] usb 1-1: config 0 descriptor?? [ 1927.179982][T29966] uclogic 0003:5543:0522.0021: hidraw0: USB HID v0.09 Device [HID 5543:0522] on usb-dummy_hcd.0-1/input0 [ 1927.314700][T29966] usb 1-1: USB disconnect, device number 98 [ 1928.674417][ T4403] fido_id[4403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1929.313224][T27063] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1929.550746][T27063] usb 1-1: Using ep0 maxpacket: 32 [ 1929.619686][T27063] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1929.635157][T27063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1929.651975][ T10] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1929.758832][T27063] usb 1-1: config 0 descriptor?? [ 1929.848569][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 1929.900570][T29966] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1929.954045][ T10] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1929.964091][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.088576][ T10] usb 10-1: config 0 descriptor?? [ 1930.102239][T27063] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1930.118085][T29966] usb 3-1: Using ep0 maxpacket: 32 [ 1930.183672][T29966] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1930.191503][T27063] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1930.192634][T29966] usb 3-1: config 0 has no interface number 0 [ 1930.313465][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1930.321039][T29966] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1930.322346][T27063] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1930.340573][ T4419] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 1930.402730][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1930.444112][T27063] usb 1-1: media controller created [ 1930.450048][T29966] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1930.450232][T29966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.450384][T29966] usb 3-1: Product: syz [ 1930.450503][T29966] usb 3-1: Manufacturer: syz [ 1930.450628][T29966] usb 3-1: SerialNumber: syz [ 1930.511212][T29966] usb 3-1: config 0 descriptor?? [ 1930.525672][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1930.528468][ T4425] ===================================================== [ 1930.541379][ T4425] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1930.553525][ T4425] _copy_to_user+0xcc/0x120 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1930.559666][ T4425] i2cdev_ioctl_smbus+0x586/0x660 [ 1930.565229][ T4425] compat_i2cdev_ioctl+0x48f/0xb40 [ 1930.570849][ T4425] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1930.576794][ T4425] ia32_sys_call+0x25d9/0x4340 [ 1930.587531][ T10] usb 10-1: media controller created [ 1930.587326][ T4425] __do_fast_syscall_32+0x14a/0x310 [ 1930.598538][ T4425] do_fast_syscall_32+0x37/0x80 [ 1930.603640][ T4425] do_SYSENTER_32+0x1f/0x30 [ 1930.608527][ T4425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.615162][ T4425] [ 1930.617752][ T4425] Uninit was stored to memory at: [ 1930.623083][ T4425] __i2c_smbus_xfer+0x25f6/0x3000 [ 1930.628509][ T4425] i2c_smbus_xfer+0x2d8/0x480 [ 1930.633397][ T4425] i2cdev_ioctl_smbus+0x4a1/0x660 [ 1930.638822][ T4425] compat_i2cdev_ioctl+0x48f/0xb40 [ 1930.644185][ T4425] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1930.654151][ T4425] ia32_sys_call+0x25d9/0x4340 [ 1930.661825][ T4425] __do_fast_syscall_32+0x14a/0x310 [ 1930.667431][ T4425] do_fast_syscall_32+0x37/0x80 [ 1930.672531][ T4425] do_SYSENTER_32+0x1f/0x30 [ 1930.677440][ T4425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.684017][ T4425] [ 1930.686442][ T4425] Local variable msgbuf1.i created at: [ 1930.692310][ T4425] __i2c_smbus_xfer+0x876/0x3000 [ 1930.697616][ T4425] i2c_smbus_xfer+0x2d8/0x480 [ 1930.702487][ T4425] [ 1930.704909][ T4425] Bytes 0-1 of 2 are uninitialized [ 1930.710296][ T4425] Memory access of size 2 starts at ffff88802bd2fc76 [ 1930.717115][ T4425] Data copied to user address 0000000080000040 [ 1930.724014][ T4425] [ 1930.726509][ T4425] CPU: 1 UID: 0 PID: 4425 Comm: syz.9.2406 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1930.738242][ T4425] Tainted: [L]=SOFTLOCKUP [ 1930.742709][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1930.757011][ T4425] ===================================================== [ 1930.765442][ T4425] Disabling lock debugging due to kernel taint [ 1930.771890][ T4425] Kernel panic - not syncing: kmsan.panic set ... [ 1930.778474][ T4425] CPU: 1 UID: 0 PID: 4425 Comm: syz.9.2406 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 1930.790007][ T4425] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1930.795672][ T4425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1930.805872][ T4425] Call Trace: [ 1930.809260][ T4425] [ 1930.812305][ T4425] __dump_stack+0x26/0x30 [ 1930.816857][ T4425] dump_stack_lvl+0x50/0x1c0 [ 1930.821653][ T4425] ? dump_stack+0x12/0x25 [ 1930.826192][ T4425] dump_stack+0x1e/0x25 [ 1930.830550][ T4425] vpanic+0x435/0xd40 [ 1930.834765][ T4425] panic+0x15d/0x160 [ 1930.838931][ T4425] kmsan_report+0x31a/0x320 [ 1930.843693][ T4425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1930.849754][ T4425] ? kmsan_internal_check_memory+0x1e8/0x240 [ 1930.855979][ T4425] ? kmsan_copy_to_user+0xef/0x190 [ 1930.861348][ T4425] ? _copy_to_user+0xcc/0x120 [ 1930.866260][ T4425] ? i2cdev_ioctl_smbus+0x586/0x660 [ 1930.871701][ T4425] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 1930.877230][ T4425] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1930.883186][ T4425] ? ia32_sys_call+0x25d9/0x4340 [ 1930.888395][ T4425] ? __do_fast_syscall_32+0x14a/0x310 [ 1930.894014][ T4425] ? do_fast_syscall_32+0x37/0x80 [ 1930.899290][ T4425] ? do_SYSENTER_32+0x1f/0x30 [ 1930.904200][ T4425] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1930.910961][ T4425] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 1930.916695][ T4425] ? __i2c_transfer+0x1179/0x30f0 [ 1930.922009][ T4425] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1930.928596][ T4425] ? kmsan_get_metadata+0xf1/0x160 [ 1930.933963][ T4425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1930.940040][ T4425] ? __i2c_smbus_xfer+0x1fb8/0x3000 [ 1930.945465][ T4425] ? kmsan_get_metadata+0xf1/0x160 [ 1930.950888][ T4425] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1930.957013][ T4425] kmsan_internal_check_memory+0x1e8/0x240 [ 1930.963103][ T4425] kmsan_copy_to_user+0xef/0x190 [ 1930.968330][ T4425] _copy_to_user+0xcc/0x120 [ 1930.973087][ T4425] i2cdev_ioctl_smbus+0x586/0x660 [ 1930.978402][ T4425] compat_i2cdev_ioctl+0x48f/0xb40 [ 1930.983792][ T4425] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 1930.989677][ T4425] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1930.995467][ T4425] ? kmsan_get_metadata+0xf1/0x160 [ 1931.000836][ T4425] ? kmsan_get_metadata+0xf1/0x160 [ 1931.006229][ T4425] ia32_sys_call+0x25d9/0x4340 [ 1931.011254][ T4425] __do_fast_syscall_32+0x14a/0x310 [ 1931.016721][ T4425] do_fast_syscall_32+0x37/0x80 [ 1931.021812][ T4425] do_SYSENTER_32+0x1f/0x30 [ 1931.026551][ T4425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1931.033107][ T4425] RIP: 0023:0xf7f33539 [ 1931.037327][ T4425] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1931.057306][ T4425] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1931.065919][ T4425] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 1931.074050][ T4425] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 1931.082170][ T4425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1931.090288][ T4425] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1931.098406][ T4425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1931.106560][ T4425] [ 1931.110067][ T4425] Kernel Offset: disabled [ 1931.114460][ T4425] Rebooting in 86400 seconds..