last executing test programs: 3m32.044150402s ago: executing program 1 (id=16): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x55df78a381d1b10d, 0x8}, 0x98) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r3, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r3, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x6, 0x28982, 0x33258}) 3m31.852214724s ago: executing program 1 (id=17): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f00000004c0)=""/21, 0x15}], 0x2}}], 0x2, 0x60, 0x0) 3m31.650047967s ago: executing program 1 (id=20): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ustat(0x6, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x0, 0x1}]}) (async) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x0, 0x1}]}) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x105}, 0x1c) socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xc0}], 0x400000000000172, 0x4000000) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000000)=0x1) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r8, 0x1, 0x70bd2b, 0x4000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xfffffffa}, {0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) (async) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) r11 = gettid() r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r12) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r13, 0x431, 0x70bd28, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r13, 0x431, 0x70bd28, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r13, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r13, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) r14 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x11c, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004}, 0x8001) (async) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x11c, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r14}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4004}, 0x8001) open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000200)={0x9c0000, 0x6, 0x200, r7, 0x0, &(0x7f0000000100)={0xa30902, 0x40, '\x00', @value=0xfff}}) 3m30.743243575s ago: executing program 1 (id=28): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x2, 0x4a1dd8c1, 0xfffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, 0x50) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nfsfs\x00') getdents64(r3, 0xffffffffffffffff, 0x43) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x2, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000a2e300030401000057", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x4c}}, 0x0) 3m29.681390255s ago: executing program 1 (id=32): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r0, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) llistxattr(0x0, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x82) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfe, 0xc, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000080)=0x9, &(0x7f0000000240)=0x6) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x3, 0x7fff, 0x401, 0x7, 0x3, 0xe8, 0x80000000}, 0x1c) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x56, &(0x7f00000001c0)={r2, r3/1000+10000}, 0x10) 3m29.315980671s ago: executing program 1 (id=36): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000180)=0x55) syz_emit_ethernet(0xda, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0) io_setup(0x3, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setfsgid(0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x9, 0x2) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)=' ', 0x1}]) fcntl$setstatus(r0, 0x403, 0x26c00) syz_emit_ethernet(0x10b7, &(0x7f0000001240)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[{0x4c, 0x0, 0x1}], @llc={@llc={0x4e, 0xff, "810e", "78fdfce94581cab357bac41d6896c2a33ea9fb65ec7847209fde655c1ba392a7dff3ddce74cdc54c677b2105e7accd2557ea031faf44b4511ddfebfe0d4bcf8d7fdb5a65e9e4283025a22059e745486f09cee119b507fd4a57e3a3333c08f096a68600829393f684ed2d124bd077536d1a15ee70498b2dd355170e50f4b742f3fded95cf2bb15291a014d11b5cf4c64f26865a6e5f62e7e8088da726a4f59dc373b539d76d25676d6443afadad17814974b2ced8b87d6f2434fe5b6640a9684c1c280111ce96b4f247b2fc19984563c92e1f883cd1b7cc8734af48498d3538e3fe070012ebdb1250028f8b6320901d60ffbb02ff0b16c9fd0a1189061ab0ea84f209db0a315509522ab36048ed84f6ac17c5171120b707662c17ad03484094e66c51b038e2ca65e373da2d510da0f1fccd8fa6713ac9199d71ac7ad2bcec59bd104c1c0182351ed55590906222622e4845aa6a657df6ea7f2aab8ce2258e2dab00ff8a5a7849872424c68f7e711d4fb669c80641c2a259aa1f4b8c26d4dadb4924ace8d891956d8285c355ee678f1b1d53bb1cfe19d7c3f40ea0542447d516b4d805114eb0dd64af2f98522d78a4a887e54b0f68efd34a62eda133e9047e94471513111f919e07b707f920605c75d735a3462a21f4b28bf7d83e2a8854e49a672919d7c90c1b1d9aea02b65942de70c77324db5f605fb884da879b3672fd9606391113ac2a0962f024f4659fcae2501e23abb3d897ff6e2718dad47da2cc2cc876dee332d640d3627931bf54b66c2846c2986e9f75a59b6e817ad7280e93c6c03f49acb686c06f9400340bcdc951ef6da1ef2274de97688562e3ce11700816a6464293afe748a94239efc9f578e7316c54fb6476d3bf6a27038a22ab2204c42fa947967a0e87eec026415173d2a1ff333427cb981c46e78a6170c16339371c9af8ae2005e24208e9962ffa3c6a90441f82ba1ec755ad28bb93d2cb8f36683a4e0ee6cda3fce557388fffed036058ecae5d03845aabbe725dce164a14189e69d523381556d246442b0baa59877d1b34c0ed8388362bf304262792285a4fdfa2e47cadfb4885c7cd1dc88a35494ef4470bb907e9cb29992e96ee7f5ba549322f6d4725bc816f4bf1b6da15f46cc306965ae8ff1ab4e9a3c80812c17b4c89ee50264dc3ab597a88f59dfe0cddf7b82bf4c57c4249b8cd50be79a68a3b267db4d5e2777dfa54cae8e99239c32bbb9567b52e6b5d53b366eeaed659e7f312da0cce9ebd0534474138a3dd0131db2f4c130192bf4fb8d14428255f6da0130d602b5f0f7f50284ecd3b1b3c1bf2d2e3c5677f614463149dfccdc13395221120cb983b451f0d149611ddd24c8123513dac861ea41715279045559077841c25c2de3ca1105a45db16f01841f7202404b2a333bbbd903f362f2d963b53cc60cea15c93cf0cc6ffd238148fa333bf79bfa0fff867882f8c16ea1ccf2ababefb7339c8e23b5c1eca277b6a315035900ee0b71a2068d2b37246b134fa42caf5059d48515d6dc074bfc826d0073db30ac91bbd2bfab5c34b29220bb8320cd0249a4250f54f312cd68fee73c12f40e26e0b290508ced2f98d2a5691543910026d0d40ce88c2302c0c4f8f29f43a512708193ba97f5e5390372ba5a9eddca72457d859e9c312d440db6c063f92b3bc2594796ddd5e4f9801ffa2c407e535c17e20e90443ecdc0ec5a3d813fbe6a60ffa225f178907fc0490418484e8567b04d5d6a4cf734171b5c7ecae9036173316b6b9d58ff863dd6fd53826ddf85dd7a3a368e2873ee9bfcdb46bb0441971367fd182c69d3931a1b352c7e4c628e53c4b36068a08f6083a47766efd2f12d07408babaabffd391b590985fa325d23add8f1f4bda23f85684f68b0bc9c819f879254e744f8c1a64851e5b44fcf5f41ad52e644533246b9dcedf32714671a7d3864fd45a59e45b180defc62f62cab07337373b191e4aacc6dc46efea17617903d41f1d182c270479cdbc4263e98365c597cf84a153e2851f32e379a63035d01214b7d850822524d390502d62afcf9feb913432107ff9f78ff0cfc8fa414ba59aaba20a7a23f68b7ae9947c69e115714d96d69bc19575ccc621f9590606b2d41b8742037517a47fd55e3c938456cde2ef23c3edef266175aa347814bf953bc64da6692112187f4e40e7336915f393e668d16de7d260db7bd705b788cd5a57c7b57c27de5e8c958d746860eb8cd6e06edd1032c5cbde3bb915eb7cd5af44508cc62b124186ca42f9f6af33ccf2af43f0e9ad3492e45a16340983bd08edde05d3236304560fbe87318d77fe400ecfce93ac737f9879b45c3cc6495d25563e4281ca93a00aee8b64fbe1c01f10e4efb4aaca6041e091d7f44ed4810a6f4c2c054191c04d93cfca76ee3d523eb49e407386c56146e4aee07199e503d1339c6dd9d4a8b9642dc03bd58b4bc800d13507811a2d5cdbcf17c9b3207fb43bbc84821dbff1abea66d2ed3a1fb9a3c81db1df609c972e5b83dfe11de412881b6227fdc3aa403fbcc4ed92ea695be0f5f634a8997eb22ab42ec4ea2b7a34e6f72d8b740a1dee65d5fd2857e5c4d1530a8d5f7229cb092632eeca0d1ccca5a87f16a56166d8d1bb7f08fd11bb3416ed8f1f3d92cb8f7686f9c7ac360e5c6b2c2f044eb84c7c228a608759c9213e1a46cff40f78e7fcdc5daa7bc40ded9901027fb9fbbacfa224610418f81cda2f77a4d97d7131613ad84f8a2b16b8547df45ae66e85337ccf0f507f9d248dcde868aab06fb5805070de5f9f7f04163c1ec2c4a2130ff82504ca01bc301a6f3c89a6d5c90195661d4c0cdff47d4b0ae79b6892b7ebe8978184ee4d79f3fb3ecd2ded3cf69ea508e8e356c0308bbab5725a519c1d6e4de7af72b04e06ac060405f17462b67d11f69dae3b7472cc43e78a7a592aa9f038804e332a54342e52bb76a564c863600fa1e658b4c40097939e23abe5caac1094114645534b2aa7066f8df12be13b036d724355fc95a96f2e5e8766688f014eb578581935dfa70cdf2c844f439e9544f8e29fb54d8f7133e83544f944d1ce9d4f663f9c79033c09075a9b620262ed0c8fdc28acb25727eff634d6ef1af37989c1c1be2866eb9010f559b24a2d2727d81dc924657d44e263f73bc1d66c26b39d4dbb5374d3e3b6af3e8b48ca96c005b1e3dd8bd1774a9a35e576ac02d304fb203fd8e8e8e0ace9e309b006c95c87a29bdb9d424ce5302d0acbef8ca2aff8ac43cbaa497aa3a353005630a3b0ad9051bbafc06d75d4f733b58c779eebf4469552ebebcb45689fa232071972d6425afbdff8b99a7c9005244bf805dcf6599f84e7e32c60d7049e2bd384cebddc4eaee75ef0f4adde73afcf098924549f7a46436201301c8495b859970219c8e2465e8636f74ff70a43ea0e6cf70aa6b8363acc21b903008d1b238d9a8acdf9154c4e5f2e0f783248c3abf206162327400a8178936df5b5fa6832602501b168eddda912b61b8d5035af5fb23d4704b51d775d2c76916a4646efdecb3b2c1979db1c3c1bc21634b730d17e5e7abc2b254acc1679006bb27fb0337c629352bfa623a6ac816c51a112c1376ad8009b5d2dfa2443f628cf576c519d64cd519898d8f54c5f6761c31c1b27da43235717924f657450a360b3d4c4377690274d25c80144c1bd472bb90838d8245c1ded3defb5da68f945e476793e89c90af91f8ac533ca32503e2aefcb0fb797342ae588f6280f796b1d34459f675e2c7a5bd60e8e15c80130c455599edf58f907849d7e8c93210cf04ebeb64583215f781960276db00b81999bdbc39f5bb4521bba2038ae79dedff95ff34055be8594ed53f976a31552224584e505b14bb18f11a28e848818d07cdef7c82f73a68614566c9269cc54f9bb0da12458302094d66111b4717112beadebd96a2855d030340d8766d5578e27acba2209dd945e32075a6c59c728afc1162035422e10ca79acc87bcd594da85b224b1c14f1f3bce9957fc8c58d596e441bfffdb41c1691ef0a90f261e25f5ce5267901863d3fa63c8111c50cc4d1cbd448bcde8603a1f119850e3f279d43b812620b952181b8c624b9f614c40e1667e2c2df930ad53946b35beb3581162ca6d69fca27ccf5b2143b566030e74eac790a0f9783af4125e348f89b3a8cb6f162d67c08cf467851c1132784c41166046309aa06817e0823765f537def3eeef68bc88cc75750e8ee34323464f6dd1dca438f9966a886162136e169e9a8a4a84c6b5e2f0314ee9d267eea7022c2639d10858a34872e5a2859be3bb764fb9c826a865f0d0d1ae8e35b9e94dc27149e8afc9798a8254d90ff928ec66467806d0b2f158c6a29d651cf7f4579d95f05c2d20e6b1fb84fc1ad7e383aacc861bbf5df07358b8036c113e9d448626d690bae8d08a928fb9f796d38bdefd9b9e4a417cc6af47280c9292f28166228835d0edb85cb3edd5558336578ee0a63888748ad5ce70cb44129405726f06020f67f424c1365921a26422bdba1bae98bcb7dad55b04ff03bc856c23cb879fe08a41689777b6bcccbcfc1ec45c0b6da8a1d20a34ed699ce9659e830714a18db0e947e62783517050434a9fc9def4f4d60ac8f3a046b339344c05dbc0224f67a30e9ee8626303c6d784f7dc1cb349b48de628983ead04d1b0624d063f1fa830d10577284334bfb4966596d005a3ea1e0338130208b429f4fbade2d0b52424b431ed806f604f62300926b62f106c4750659cf45f16e8f2608262c5a731ade9ecc110ed9152c66f1c5e3775aa1ea68ba047c70f5cfe0061b2f55e31da8570197eff734253d6b407c2b0a92b50b5840f28f0ff0ff2b68292d276128716c255935d89fe3514cd607cb2b27b33ede5d6eb7df6bb0e8e025ab704ab89328c9681a47f66b9d918a71267b2339f7a6dcc6dda9928417e43d26bb347e2ed665e36efe87da938132e4b2653e7c9075edf205aa90cb36f9c9ff79a4dbeea5cf5b76f14f048aa3c0dc7788b1e53da2dc430dfd28083e72cb237a3d189312e9801ec4391cf5af6f62269be9ee3457c50da54f6b1570e3618e46b0732ad6c4d62db1bde84872d31597770d3e55852fe82086b32274782cad0780aa9f5062822f958051092d4360767c92a88f7e14b13dae5bb59b739cd9837509769797ec51d2f091428445074ee0a485945add9db4d77a30aea7e9905e535fb592489b560996346807dad8856b696ef6c1fe77944de0b0ea1feb5d93e2a0009e472bdd3c57ac5e7452c731b71a4dd5bc976e2d549946570d9502250a21af4f41a957dc1beda30321d605dc40d116e226c0c2f2f911d38709ca5b5d08ea631bcae0419971f2bebab64519f60ab0c1b53c1512de36f615e8fb3717ab398f56206e3227d7a12006f89f7fc5772610e389559af6a9e45ee2ab6d6484f0f780cd9006747183bccbb1ae3d169a83f17e77dff1bfe68b2fdbf880294ead3895d380a5d17c7871e8caef46dc89d718eea8159b8ea7dbdbbedad1ad574c85a57522c200ff7c79dc9a1bd50d114daf1f81ad30f5fa3dc192e052ab3ff0ec8126263acf10c510d6f92c5892048582f0f32dae365a56b9896b9be974f8256ecb50dedf3bae606451247fbb7a3b2404fd8a29a4f07a15cbad1da21fce06ff5fbb8136338b42a49c9d8a5daa8cade9d307267f590e7916f76c4fc2150d8ee9f0195b3a45f42f239035a8ceb567a0e70cc498a5fd9814b4d1d67661aa9662c18329ef8a3db163515fa2a42de8abe058a22a271334478edc630bcb8b010075b8dab0004d419ea143c12a4f277841de6a64c17ad4ab54f61a9db1c238945c1d5a2d5eaf8ba73253dab1df5761743815cbc06feda85bef7191697a54e585e99be96aae335f287a5c7d632002e23b77a66d679757b6805cfcd934f3fa3cd1461e03665c28157819b7a8f7691fdab6b705f509ebedcb7ef44a2f9b0fb0555bcd57efe365d5bc6ad6f1c0789a63ad19f9f0ad629a6f740f604984a5c2d01700000000000000"}}}}}}, 0x0) 3m28.932408807s ago: executing program 32 (id=36): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000180)=0x55) syz_emit_ethernet(0xda, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "ccf0294e2a3bdb4aa40b249e"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}, "a815a23da43974ff"}}}}}, 0x0) io_setup(0x3, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setfsgid(0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x9, 0x2) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)=' ', 0x1}]) fcntl$setstatus(r0, 0x403, 0x26c00) syz_emit_ethernet(0x10b7, &(0x7f0000001240)={@local, @broadcast, @void, {@mpls_uc={0x8847, {[{0x4c, 0x0, 0x1}], @llc={@llc={0x4e, 0xff, "810e", "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"}}}}}}, 0x0) 3m4.828507789s ago: executing program 5 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x80) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0xb09, 0x70bd29, 0x25dfdbfd, {0x5}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800b0c1", @ANYRES8=r4, @ANYBLOB="010000000002000000000c000000180001801400020073797a5f74756e0000000000000000000c0003800800020000dd0800"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m4.767196469s ago: executing program 5 (id=146): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a373f00", @ANYRES32=0x0, @ANYBLOB="00000000140005000080"], 0x44}}, 0x0) 3m4.516103119s ago: executing program 5 (id=147): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) (async, rerun: 32) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) (rerun: 32) sendmmsg$sock(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x14}}], 0x18}}], 0x1, 0x0) 3m4.494429836s ago: executing program 5 (id=148): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xfc, 0x0, 0x7, 0xc, @tick=0x2, {0x10}, {}, @raw32={[0x0, 0x6]}}, {0x0, 0x0, 0x0, 0x9b, @time={0xb, 0x2}, {}, {}, @ext={0x9d, &(0x7f0000000ec0)="afaf1c35b9c61202794ecd7c75bef41fbe6807c79e45d2ac32e72ebe4057515d2b078ea3ca08aee6d6f3f4a15c1a7bc1cb74eef418e7d7b79dd00f2c7a2a4f08c2323dc151c03e374cf94be5302d2e052abda8e0356729dba1c6fee52467c99f8b08de9de05470dbb6976590941f0cd2580d0149f2c9da703d6686d161abcb71355acaee7890bb0bd59d29384fdd1fa3170c193fe8c325effced890bcc"}}], 0x38) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x1, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0xa010100}}}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x404c534a, &(0x7f00000000c0)={0x0, 0x1, {0x0, 0x1, 0x0, 0x3, 0x7}, 0x2}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast2, @empty}}}}) socket$inet6(0x10, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000cc0), 0x0, 0x931766f6339aad44) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000000f80)=""/4127, &(0x7f00000001c0)=0xffffffffffffff3e) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) socket$inet6(0xa, 0x3, 0x1) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0xffffffffffffffbe) syz_fuse_handle_req(r6, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x3, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000004300)={0x50, 0x0, r7, {0x7, 0x26, 0x8, 0x7322e646, 0x0, 0xfffc, 0x0, 0x80000000, 0x0, 0x0, 0x80, 0x10001}}, 0x50) r9 = open_tree(0xffffffffffffff9c, 0x0, 0x1100) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r6, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xfffffffffffffffc, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x1, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x0, 0x7, 0xffffffff, 0x0, 0x8000, 0x0, 0x0, 0xee01}}, {0x0, 0x10}}}, 0x0, 0x0}) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0xfffffffc, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}, 0x1c) 3m3.588958182s ago: executing program 5 (id=149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x13, "97be22472cc681c161e8792a898769692bbc9f"}, &(0x7f0000000280)=0x1b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x0, @local, 0x96}}, 0x1, 0x0, 0x4, 0x66e2, 0x0, 0x8, 0x3}, 0x9c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1f2}], 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xd03, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x54}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0xc, 0x2c, 0x1, 0x2, 0x2, 0xff, 0x6, 0x9, 0x2, 0x5, 0x7}, 0xe) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030000000000aed47da36d3750910300", @ANYRES32=r5, @ANYBLOB="1c005080040005000800088004000200090001002f2507fc28000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3m3.344008612s ago: executing program 5 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0x38, 0x0) (async) renameat2(r0, &(0x7f00000000c0)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4/file7/file6\x00', 0x5) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'l'}, @main=@item_012={0x2, 0x0, 0xb, "75c7"}, @local=@item_012={0x1, 0x2, 0x9, 'P'}]}}, 0x0}, 0x0) 3m3.216358082s ago: executing program 33 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') lseek(r0, 0x38, 0x0) (async) renameat2(r0, &(0x7f00000000c0)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4/file7/file6\x00', 0x5) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x2, 'l'}, @main=@item_012={0x2, 0x0, 0xb, "75c7"}, @local=@item_012={0x1, 0x2, 0x9, 'P'}]}}, 0x0}, 0x0) 1m0.653099143s ago: executing program 2 (id=192): unshare(0x22020600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x10d, 0xb, &(0x7f0000000040)=0x9, 0x4) timer_delete(r0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x13, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x60, r5, 0x8, 0x70bd26, 0x25dfdbfd, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r6, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x66}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9966122847de4b52}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8080) 59.315252126s ago: executing program 2 (id=196): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f00000004c0)=""/143) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 56.199033988s ago: executing program 2 (id=200): pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) r1 = gettid() (async) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvfrom(r2, 0x0, 0x0, 0x10140, 0x0, 0xffffffffffffff24) (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_open_procfs(r1, 0x0) fanotify_init(0x200, 0x40800) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000001580)=ANY=[@ANYBLOB="12010000686b26204f0801008c0b0102030109021b0001010400000904"], 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000feffff9c000040"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000340)) (async) lseek(0xffffffffffffffff, 0x0, 0x4) removexattr(&(0x7f0000000700)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001700)=ANY=[@ANYBLOB='seWurit:.)!\x00']) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x430105, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) (async) ioctl$PPPIOCSFLAGS1(r8, 0x4004743a, &(0x7f0000000300)) (async) write$binfmt_aout(r7, &(0x7f0000000100)=ANY=[], 0xfce1) (async) ioctl$TCFLSH(r3, 0x540b, 0x2) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmsg$nl_route_sched(r9, 0x0, 0x0) 55.565725354s ago: executing program 2 (id=205): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x24) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnexthop={0x30, 0x6a, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4040010) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000200)=0x0) statx(r0, &(0x7f0000000240)='./file1\x00', 0x400, 0x7ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x85080, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r3}}, {@dont_hash}, {@dont_appraise}]}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000580)={r0, 0x7, 0x100000000}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000005c0), &(0x7f0000000600)=0x8) (async) r5 = syz_clone3(&(0x7f00000008c0)={0x1800, &(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, {0x19}, &(0x7f0000000700)=""/84, 0x54, &(0x7f0000000780)=""/216, &(0x7f0000000880)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7, {r4}}, 0x58) r8 = syz_open_procfs(r5, &(0x7f0000000940)='net/udplite\x00') (async) r9 = syz_io_uring_setup(0x4405, &(0x7f0000000980)={0x0, 0x6654, 0x200, 0x0, 0x3d9, 0x0, r0}, &(0x7f0000000a00), &(0x7f0000000a40)) syz_io_uring_setup(0x4c1, &(0x7f0000000a80)={0x0, 0xa5b9, 0x1, 0x1, 0x232, 0x0, r9}, &(0x7f0000000b00), &(0x7f0000000b40)) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b80), 0x141041, 0x0) setsockopt(r10, 0x7, 0x2, &(0x7f0000000bc0)="4c729dcc8d15dd28a4d805be13ad9c41595023be52f501e8e335a2d35d706e5953335ed92a7c6bc7fc2d246058326cbe745a8fe8e241d20fee673ab50639a44dcbd6adca6591d3b7dfab78a3c2e17e23dbcb3b42a6a6da613f2b6d8228ffd368723ec3a74854bf926715519268b417ff6fd4d582ad4a336d72fa6a1b50503fefa98095790e4c6c9115be18e433f065bbd9563f01ae277ec2cef81fe55471f434ddca1ac06ce627314a806429f2b24c3830ac2af37c5c9d13aea88c7b4df47a3d6bdfb6642bc166198a2eb8d10b5bd45719f52a4f4bcea2c6e73744d82593f653aec891e6aa1059f7f103b5c5109ca5d43376c3c6125d", 0xf6) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000cc0)) r11 = syz_open_dev$vivid(&(0x7f0000000d40), 0x3, 0x2) lseek(r11, 0x9, 0x3) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000d80)={0x4, 0x5, '\x00', [@ra={0x5, 0x2, 0xfff9}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0xee}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, 0x38) (async) close_range(r4, r9, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000dc0)=@arm64={0x7, 0x7, 0x1, '\x00', 0x2}) (async) ptrace$getregset(0x4204, r6, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=""/36, 0x24}) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000e80)={0x1, 0x521, 0x8, 0x9}, 0x10) r12 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000000f00)={0x7, @pix={0x6d, 0x8, 0x35323645, 0x0, 0xfffffffb, 0x2, 0x4, 0x7, 0x0, 0x1, 0x2}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001040)={'veth1_to_hsr\x00', &(0x7f0000001000)=@ethtool_rxfh={0x46, 0x6, 0x4, 0x3ff, 0x0, "2ed145", 0x7f, [0x7, 0x8, 0x3, 0x1]}}) (async) sendmsg$nl_generic(r10, &(0x7f0000001480)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001440)={&(0x7f00000010c0)={0x36c, 0x15, 0x2, 0x70bd25, 0x25dfdbfe, {0x1e}, [@nested={0x50, 0x11b, 0x0, 0x1, [@typed={0x8, 0x5c, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0xa2, 0x0, 0x0, @ipv4=@loopback}, @typed={0x3b, 0x3e, 0x0, 0x0, @binary="c60036eb9311d2a9c4f3dab4348869d1d84053c3538adce12e1f9b340820e61dc0b478a3fad70468db18d806b42ee70b43eac6466add8a"}]}, @nested={0x8e, 0x9f, 0x0, 0x1, [@typed={0x4, 0xaf}, @nested={0x4, 0xae}, @generic="c2f19f6f53b09bde58fdf162727922a4fc508908a99b9437010fbbe309d1829ed2c52d068b151f2139c2a5b20efae533e55284814b0aa38745e2c1f7402eb496b4641d318d4866d8f3c5cdc3d7802f2b42c12c5be2e4a650f70ac47031a080e3467274c02292df82060551007df1d2b1727f7151652cfba058a2a2c96be9c113f1bc"]}, @typed={0x8, 0x19, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x98, 0x98, 0x0, 0x1, [@generic="6f5ce5e4542d3b", @generic="57ba88810f8d8c05a17a2177004f744431a5c69e2be7a1c8e87384524335434236e011ed372f0879d3c2305b7692cb7fe5df2b95ed92373a249f833e204fff9f043b81bc4d041d8eeea4aaf3b4ee91762f2afe72dea2bbfebaab66076923a03ed0f255414841047e1bc7158b207f7f801b2bf211d84bb2119c7c2144d2a4c1f57a968116cc", @typed={0x8, 0xf4, 0x0, 0x0, @pid=r7}]}, @generic="a839754db600c4519cd523858eb295a4b75373118195174e84945ef8d3227f13202d32c1b0c81cbf0ffa5e76f0837844d6751778925bd8d89285f12d764dc358c34c02903d05c40ee396dda09c424ee07eab0905a1da60eb3aa40426764f3ca44aa34d05958b1324c6f889772e907f0e74e3b459970c9f9dfc55f5f8769a1640bb47fdefd55ca79486b5735d64eb97013d97aa5bbc4147a5e53e2d2126ed3fe5aa625ceec822cd36722c031429b4d38da452958e58e1e178818c22d389c57e50101c33921a5ef891afcee281fba6f2ffd9608432074ae8f952a69bf5b725dc", @typed={0xc, 0x138, 0x0, 0x0, @u64=0x1}, @generic="221b87ca35f1a66143d6fe31ab2d70a2430b2bf9d9ecc13191f9a3ecb09d4f3258d554a6b4f127c416f8c882df3b9d4e52e7ab139050fb585617fcca9950869f354d54fb726ececd0adf925c4307fa8fe1189fbe751dcf18c13a87e1db6bf4e60cb3da8403d388e664c509e25d6ea9c2625159fdac9fd11dda25e76de8c3fcc7dd83d00c9adc13a1b7cb3beaae02d074a0df54b13aaf6909e51609e932b01b72c005028bc1cd385fdea733771a95e833b77e4d04c98eeb51d51ec07e30f3c4735c69cb4aae062263ae11b69a806e5c0eb4df2293fa5c03ef82dc9718bb6b45ee3b04", @generic="d27de3", @typed={0x6, 0x11, 0x0, 0x0, @str='!\x00'}]}, 0x36c}, 0x1, 0x0, 0x0, 0x10000}, 0x24000010) sendmsg$nl_generic(r4, &(0x7f00000018c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f0000001500)={0x364, 0x18, 0x9, 0x6, 0x25dfdbfb, {0x1b}, [@typed={0x8, 0x66, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xb, 0xb5, 0x0, 0x0, @str='](#/[+\x00'}, @nested={0x1cb, 0x71, 0x0, 0x1, [@nested={0x4, 0x23}, @generic="ec0dff2ebcbe62f2d9458c1971b0891241effb138d56ad8b7468745143084fd0b1cf3c7f4376c5fb13933dbc1f2765b4c88f55fc940fbbd43e68c062ff575ed2cc1aed254047198fe340c30d772e33975858e57a52322efc26", @typed={0x6c, 0xe1, 0x0, 0x0, @binary="125b33c59a966c4ccef381f25782e95e54b482af6a900aa8265c8e1248a3127cb6ac1c8ec801be7f1af7315a29bce9bb2df3b1e5481613002523453322ab1db040d3bc7c5416aea225babaceac4eda4d9d243d397b7c7bd29b5511e97542638586e8f312f4b8f3d1"}, @typed={0xe, 0x3f, 0x0, 0x0, @str='/dev/zero\x00'}, @generic="09325adcd8aa2311ec6c04b0001fcc70198656d16c33f6155078e4e187633f1053797d789e925a739b1a784d99a606f726f6ec928affc65d81ba5e2bd8e6cd592b022a83f568c1a171801b4ed546dcd8b615954561a1e46ebd76e497baccc736d1a3b43d697dd3b89b1beb916f9933717384e6280fee4aea03841f18beb1dd9ca13e6fef6485e2496ee692eeb59bfe3af737da8bc782a743677c18e470155cded2c77542688e4778f60cd45c55562d7ff2c1595aacfd24082b42a823527976fa21dc0554027798389f214dea6e03f7a0292626d1e1e2c8d7a88de4a35a7e32d30f96e5b54feaa22c72555b800a2a"]}, @generic="3c15705e5f431bf1088a51fcd049417013a6e4057e778fe4b664a71eb6a4e7f3bd954d16a26806de82c19bd323fd1cce190b3e24c477177f9e376fb0507e74556be2c22b11", @nested={0x128, 0x10d, 0x0, 0x1, [@generic="b5542c6fe272a80905be6fb964ee2308b723d5d0cdda86291e9b4c36bfffe900d9a30a6bf3eab786cfc7ea9c4d77ad475679b7e295ba1f2a97f3207e73", @generic="72e0232f909d90c848c41f8c9c52fc45111057b2e237d5f7056caf0a34b61d018c7dbbd7a439380bd5c9256e28c30a51236386e1b76fd4b3b329fa9adfe699a2c68d0848ee4f1f528511ce53065758863073bfc58b4b271b709c4fd380768ee43c168e723ffa30724dff242a91804409036d5197036004a767b94fba55f945fbe831fe2760029b0b00bbac258d33fc9d0657ca4e958b8f09daa9db4062c198349151c96ab816a8033d7c6a8071d8696b3e4877a040f3e91bf448592693e1f9db53d6d520c9f9f3331a60ade331654e5e16514ad68d6f22ccd4f3c7a11340c7cd2cc81041d47dda"]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4000800}, 0x8001) (async) ioctl$TCFLSH(r8, 0x540b, 0x2) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000001900)) (async) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000001940)="ffa1cd48de6ee7249c7e8008f688edb0918c67060ed13022b20dc2f6bbdd697ae2a6587a01c31aab9387ad0b3d118b807d0b8a236b46cf2cd2eca0d3e9d3507c635e6c5fb65ad4e6ab1014afa54320f05d41d083541581fadd892be13573363ff7eb9b7ffa93017ad2016634a27bfd69fa574e5c702735108c01652627530d6bbbcdfbc0fe135866fa40eed81d0f4cb235193bbb027e851731f624a279f4421cd0c26572268774f3aa6b8907fe5c1a426a7847b2009c41c9b2b2ef5aab765c1cb36b9ad073aa8a763098d96e31f802cddb1bf4179d7e3f04b8e120") 55.434575288s ago: executing program 2 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = io_uring_setup(0x6db7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x20, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="c27b8277"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) 55.232478547s ago: executing program 2 (id=207): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24004080}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000002400000000dbf31b0b040000ff070000020000000317e5523f73b2aa20e6be35482e000000080000"]) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000340)={{0xb, 0x8}, 'port0\x00', 0x32, 0x1410, 0x5, 0x0, 0x9e, 0x9, 0x300000, 0x0, 0x7, 0x9}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r4, &(0x7f0000000580)=""/39, 0xfffffffffffffeae) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x103000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000040)="660f388106f34998460f1a6086da3f363e673e460fc77ebef2400fd6ee0f22c03e0fc75a8566470f3880649d050f3235004000000f30430f92c6", 0x3a}], 0x1, 0x44, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000000c001a800800058004000180"], 0x2c}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getdents(r4, &(0x7f0000000f80)=""/65, 0x41) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000a40)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000540)={0x1, 0x6, 0x2, 0x5, 'syz0\x00', 0x7}) 54.957139703s ago: executing program 34 (id=207): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24004080}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000002400000000dbf31b0b040000ff070000020000000317e5523f73b2aa20e6be35482e000000080000"]) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000340)={{0xb, 0x8}, 'port0\x00', 0x32, 0x1410, 0x5, 0x0, 0x9e, 0x9, 0x300000, 0x0, 0x7, 0x9}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r4, &(0x7f0000000580)=""/39, 0xfffffffffffffeae) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x103000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000040)="660f388106f34998460f1a6086da3f363e673e460fc77ebef2400fd6ee0f22c03e0fc75a8566470f3880649d050f3235004000000f30430f92c6", 0x3a}], 0x1, 0x44, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000000c001a800800058004000180"], 0x2c}}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getdents(r4, &(0x7f0000000f80)=""/65, 0x41) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000a40)={0x1, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000540)={0x1, 0x6, 0x2, 0x5, 'syz0\x00', 0x7}) 11.208093181s ago: executing program 6 (id=373): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast2}, 0xffffffffffffffff, 0x102}}, 0x48) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000040)=r1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000080)=@echo=0x1ff) r4 = syz_io_uring_setup(0x4171, &(0x7f0000000240)={0x0, 0x40, 0x4, 0x1, 0x37d}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0xd3d9089f51f018a, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x2b, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x0, 0x12345, {0x0, r7}}) (async) r9 = syz_io_uring_setup(0x390d, &(0x7f00000002c0)={0x0, 0xefe4, 0x400, 0x0, 0x2ba, 0x0, r4}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x6}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r9, 0x47bc, 0x0, 0x21, 0x0, 0x0) r12 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r12, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x3}, 0x10) 9.145396164s ago: executing program 6 (id=381): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x417, 0x4) (async) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r1, &(0x7f0000001180)=[{&(0x7f0000000040)='5j', 0x2}, {0x0}], 0x2, 0x7, 0x401, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x88, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x88}}, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async) write$binfmt_misc(r0, &(0x7f0000000080), 0x3a7) 8.991998346s ago: executing program 6 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB="0500000008ff"]) pipe2$9p(&(0x7f0000000600), 0x84000) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0400000000000000140012800b0001006272696467652000040002801400350062726964676530000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r2, 0x0, 0x0) io_uring_setup(0x307d, &(0x7f0000000480)={0x0, 0x929b, 0x80, 0x1, 0x20e}) io_uring_setup(0x5d5, &(0x7f0000000500)={0x0, 0x581b, 0x1, 0x20002, 0x20003b9}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000002060108000034e4cbc8d471b00f9bc90000000000000000050001000600ffff050004000000000009000073797a3100000000050005000a00000011000300686173683a69702c706f727400"], 0x50}}, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f00000005c0)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f000005000700880000002bb4959a6cc7c431050f234912cede38187ef25094bbe310471528e526919856e51c4c665f"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xe25, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc0505510, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a000008000500070000000800188004007280"], 0x34}}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x7, 0x8000, 0x99, 0x4, {{0x14, 0x4, 0x1, 0x29, 0x50, 0x67, 0x0, 0x5, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@lsrr={0x83, 0xb, 0xd8, [@multicast2, @private=0xa010101]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x50, 0x1, 0x0, [{@multicast2, 0x5}, {@loopback, 0x7ff}, {@local, 0x3}, {@loopback, 0xfff}, {@remote, 0x269}]}]}}}}}) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd2b, 0xf5, {0x0, 0x0, 0x0, r10, {0x3, 0x3}, {0x6, 0xb}, {0x6, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0xab, 0xfb, 0x1, 0x8}, {0x40, 0xd, 0xc, 0x69c}, {0x7, 0x3, 0x6, 0x5}]}) 8.662196865s ago: executing program 6 (id=384): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001bcd804f6c1e129d4ddd712492a57cf601b55ce3435345da4ea66f7e1e662270adc737272c24292cbbb293b5f071386d38eaa0db664bc584b89258bfd668c88262a0440dc3e32c4048eaf38c70e9e62cbfc259236bc72d4688354ce65945b8778ba91ebfec8494ee9973229a1665344edbfdce248c1245a61caa0e382f98156a9a79b10ae38445d273dd"], 0x30}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x12) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x4, 0x4, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004004}, 0x4040800) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}}, 0x20}}, 0x4000080) 8.352518169s ago: executing program 6 (id=386): mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) preadv(r4, &(0x7f0000000740)=[{&(0x7f0000000200)=""/183, 0xb7}, {0x0}], 0x2, 0x80000001, 0x3f7a) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r5, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r5, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendto$inet(r8, &(0x7f0000000000)="daf21d3fd2dc38098dc11fdb8da2a5f4a51b3aa377a6332d821dd1c73c1278e53773e66b405245ee850ad5d19721675d0feebe56b55d", 0x36, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000180)=""/240, 0xf0}], 0x2}}], 0x1, 0x21, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[], 0x8c0}, 0x1, 0x0, 0x0, 0x48800}, 0x4000) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x4084}, 0x40000c0) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r9, &(0x7f0000000180)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1, 0x8800000, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.993634555s ago: executing program 6 (id=390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f00000003c0)=""/236, 0xec}], 0x2, &(0x7f0000000840)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000540)=""/223, 0xdf}], 0x1}, 0x5}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000680)=""/82, 0x52}, {&(0x7f0000000700)=""/151, 0x97}, {&(0x7f0000001840)=""/50, 0x32}, {&(0x7f0000001880)=""/153, 0x99}, {&(0x7f0000001940)=""/200, 0xc8}], 0x5, &(0x7f0000001ac0)=""/98, 0x62}, 0x9}], 0x3, 0x40000002, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffffffffffc, 0xbffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getresgid(0x0, 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff7}, {0xf}, {0x8, 0x5}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x1000000, 0x38}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x20000050) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000003c000701fcffffff00000000227c000001004880140008800e0016002d265d46bc5af52d0154b10d2bc1cec18fdb30b6a267834d8da90a4e761a537009df6d3683e7289b5ec986df8f52d7b0a6d4c968377c028ac826c500008a0ab298f2cb33004b9af1ba5151df16cac0a45b0c9d13a0a65b62e38821848b5b77734634d0930731a668f073b895703ce1cc3c9a4ae3cbbf8ea84c5f6a31472b218f7b3d7d4239e652a9322478c2eabd616b0556560628fb76d5891a00"/196], 0x2c}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) (async) r5 = socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r2, &(0x7f0000001c00)={0xa, 0x4e24, 0x20000, @empty, 0x800}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000040)=0xffffffff, 0x4) (async) sched_setscheduler(r1, 0x6, &(0x7f0000000140)=0xfffffff7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = memfd_create(&(0x7f0000001cc0)='\x03\xa2\xeepsvH\xcbM?\xd2z\xaccQ2\xf7\x97\x1dt\xb0\xcbe\xf6\x85~\x1d\xdf\'\xa7\x8d\xd2\x0f\x1e\xf2\xe9SH\xd1?\x0e2\xea\x1eP\xb2o\xe1\bG\x02\xd0\xd3\xda\xeb\x04\x19\\oH)\xb8U\xbd\x1c\xb7\x01\xbeU\nuH\x1b\xbc&j\x87m\xbd-m@\f\xd0P*\x90\xf4iXb\xc4\x1e_\x9d\xd0gr\xcf\x19\xb5\x06\xf0A\xcb\xff\xff\a.', 0x3) ftruncate(r7, 0x7000000) (async) dup(r7) (async) preadv2(0xffffffffffffffff, &(0x7f0000001c40)=[{&(0x7f00000000c0)=""/83, 0x53}], 0x1, 0x37, 0x0, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x5) 6.07998198s ago: executing program 7 (id=397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x20, 0x8000, 0x6, 0x55, {{0x4c, 0x4, 0x2, 0x3, 0x130, 0x68, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @broadcast, {[@ssrr={0x89, 0xf, 0x7, [@loopback, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x39, 0x1, 0x5, [{@private=0xa010101, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@rand_addr=0x64010101}, {@multicast2, 0x5}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x81}, {@remote, 0xf}]}, @lsrr={0x83, 0xb, 0x3f, [@private=0xa010100, @remote]}, @ssrr={0x89, 0x13, 0xab, [@remote, @local, @broadcast, @private=0xa010101]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0xe2, 0x3, 0x5, [{@empty, 0x1ff}, {@local, 0xffffffff}, {@local, 0x800}, {@broadcast, 0x7}, {@multicast2, 0x6}, {@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x15}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @rr={0x7, 0x23, 0x62, [@empty, @multicast1, @multicast2, @local, @rand_addr=0x64010102, @local, @multicast2, @multicast1]}, @generic={0x44, 0x7, "4b6453f9d4"}, @timestamp_addr={0x44, 0x14, 0x63, 0x1, 0x5, [{@private=0xa010101, 0xfffffff4}, {@multicast2, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x66, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x18}}, {@private=0xa010102, 0x6}, {@remote, 0xf84}, {@remote, 0xffffffff}, {@remote, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x1d4, r2, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x458b}, @ETHTOOL_A_LINKMODES_OURS={0x190, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe252}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '@\xf8#$&@{}\x83^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb717}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc7a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "29d181afe7e97b25b3d1ab70012cdd41e072522b65be6dcb8b371e42a259bf983cad6484add95f91d9a437fbc17eb20106a3c146f9d38fc4432ad70b886f4e0594a74bbee9f08cdbd2cad5abe47861c476bc737516719cca4f167081bfec9a8b0caa21254c15729553e8ee82acfe0c9552331b67ea57ad62faf428a5edd797f4d5d9914ec5c346a615623c68a94969ad743da62bef17c7606272b4fc91fbf24c"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20004818}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000180)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="40090700000008000000ec74bc"], 0x0, 0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect(0x2, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acb"], 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 5.250950316s ago: executing program 4 (id=399): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x204100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) io_setup(0x7, 0x0) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='.\x00\x00'], 0x20) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.024191107s ago: executing program 4 (id=400): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000180)={0x0, 0x40000000, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r2, 0x701}, 0x14}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x7d, 0x9, 0x1, 0x51, @mcast2, @loopback={0x0, 0x460c6}, 0x8000, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3, @ANYRES8, @ANYRES32=r4, @ANYRESHEX=r3, @ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x7, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.505311802s ago: executing program 4 (id=402): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x4, 0x180, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x40}, [@extension_unit={0x8, 0x24, 0x8, 0x3, 0x6, 0x0, 'S'}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x4a, 0x1001}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x4, 0x1, 0x0, "b52dae51"}]}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x3, 0x9, 0x2, {0x7, 0x25, 0x1, 0x1, 0x8, 0x98bb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x202, 0xfb, "d2f14650f53f766db6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0xd, 0x9, {0x7, 0x25, 0x1, 0x2, 0x9d, 0xfff8}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x5, 0x5, 0x1, 0xff}, 0x2f, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2f000303100b03100b24100a0426000000000f0900f03fff000f3fff000000000700000000f000ff00cf000000"], 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000340)=@lang_id={0xffffffffffffffc0, 0x3, 0x44c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}, {0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="36037059f44df4dff7e4b470f0cd82e12163cc92c160045784a73403ef11644cf747efcdf2c8405de6d6a1c8ebebc79e626eb91c0a04cf2efd5f7a76f88c9ddf851f6d"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf8ff}}]}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'ip6gretap0\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0xffc, 0x1, 0xfffffffe, 0x0, 0x9a3}, 0x1c) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@dev, @dev={0xfe, 0x80, '\x00', 0x39}, @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r2}) (async, rerun: 64) r5 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x171, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15f, 0x1, 0x1, 0x3, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0xf4, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0xd9, 0x7, 0x4}, [@mdlm_detail={0x71, 0x24, 0x13, 0x1, "39cf4fba2351707774f4f8ca18680fea63d2157588876da69101a4262f76b99b5e3702b204efa5cd6fad0e7dafd36afec8e38b00412a5a989a1002d0f7f5a778d939ad9b073b44bb03f843b6bf07c219cb1efd245daa5b5f10e67375a0166f6709e3481b18a9da9c111e686453"}, @mdlm_detail={0x7c, 0x24, 0x13, 0x2, "4fa89e7bb721e62b5109f8ed4a108dc188269e8f7d0c58f81aff68b08a36ad1be40dea78f1b49936eaecd1903850eeeb20ffe4589b35b53c634ba3029253e9cd0ffdf7ec87ad72dfb4b73049a77780c079857f6bc339efa5c40689f1fc4359ef70904ad2b9ffb9eb1831ed20f7fb5baedcaee6c0dd1c4b31"}, @ncm={0x6, 0x24, 0x1a, 0xb0, 0xa}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x9, 0x10, 0x1}, @mdlm_detail={0x2a, 0x24, 0x13, 0x81, "04306535a0f9e3417e83f81144bbe09fd6f43ace75d516544f28b3130a01a6efc2fefa1be18a"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x7a, 0x80, 0x1}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x2, 0x1, 0x4, 0x10, 0x9}, 0x1f, &(0x7f0000000540)={0x5, 0xf, 0x1f, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0xfad9, 0xf00, 0x9, [0x3f00]}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x3, 0x1000}]}, 0x1, [{0x7d, &(0x7f0000000580)=@string={0x7d, 0x3, "afecd6b7ee5bbed0e7fc2d2958d86c9d349ceadacd4a2a2022fa2b34028a561448fb282a54769f776a046d04400d478580f6790149184878ea9364deb5ce392d5a51c8a0a8113455ecb1b734cc839dc6891e80fde6e88e59f52a073f557e852ea8c16418320cf18d5f237621660866c30427461250092cf531477b"}}]}) (async) r7 = socket$inet6(0xa, 0x80003, 0xff) r8 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r8, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async, rerun: 64) dup3(r8, r7, 0x80000) (rerun: 64) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000640)={@loopback, @local, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600087, r6}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async, rerun: 64) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r9, 0xc05c5340, &(0x7f00000002c0)={0x0, 0x20040, 0x6, {0x9, 0x2}, 0x34ce, 0x8}) (async, rerun: 32) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000140)={'batadv_slave_0\x00'}) 4.324355071s ago: executing program 3 (id=403): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000002c0)={0xa}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0xffffffffffffff03}], 0x1, 0xc) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) (async) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 4.155789112s ago: executing program 7 (id=405): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x4c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) 4.155412312s ago: executing program 3 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0xe}, {0xc, 0xc}, {0xffff, 0x7}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000700000002dbd7020fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="100001800c0004800800020013000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) getpeername(r6, 0x0, &(0x7f0000001740)=0xfffffffffffffdc7) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000740)={r7, 0x0, r7, 0x40000000, 0x5, 0x70000000, 0x0, 0x6, 0x3, 0x101, 0x80000000, 0x83e}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x28440, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r8, 0x541c, &(0x7f0000000180)={0xd, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x8840) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x610200, 0x0) syz_usb_connect(0x4, 0x4a, &(0x7f00000015c0)=ANY=[], 0x0) 3.923678309s ago: executing program 7 (id=407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x24) io_setup(0x488, &(0x7f0000000380)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r6 = io_uring_setup(0x4823, &(0x7f0000000240)={0x0, 0x2803, 0x800, 0x0, 0x6}) close_range(r6, 0xffffffffffffffff, 0x0) io_submit(r4, 0x97f, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x7f, @empty, 0x2}}, 0x5, 0x6}, &(0x7f00000002c0)=0x90) syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[], 0x0) 3.834829545s ago: executing program 0 (id=408): r0 = socket$inet6(0xa, 0xa, 0x8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000080), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x1f8, 0xc8, 0x8, 0x0, 0x5803, 0x358, 0x2e8, 0x2e8, 0x358, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket3={{0x28}, 0x5}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 3.620002624s ago: executing program 0 (id=409): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, &(0x7f0000000980)="feacc4e6c6475e7eeb743d1ac6de9dba31d6154d5bcf59671fff9c296bdcd4952e08abc376e8c7888d5c5954e9bdc8dbb871d6e5a42dd57665f82efa61ac0fffe84b64213ea1d0590bdac3d5bb5640cc341ac893d3e61527578b45ced9cc4e79bd4aafe77473413fdd9e287a67c63b926a4ee8f0c9836b6b508fbc4a06228a73472df1908d256eb5fdd7ae6c0207e4c753ed", 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100, 0x2, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) inotify_init() openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) socket$inet6(0xa, 0x800, 0x2) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000a40)=""/260, &(0x7f0000000300)=""/87, &(0x7f0000000480)=""/74, 0xf253c4fc331dcd9c}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x2000, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 3.278199789s ago: executing program 3 (id=410): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x204100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) io_setup(0x7, 0x0) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='.\x00\x00'], 0x20) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.128055625s ago: executing program 3 (id=411): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000000c0)={0x29, 0x2}) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x3, 0x0, &(0x7f0000000180)) 2.136129874s ago: executing program 4 (id=412): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xfffffbfb, 0x0, 0x4, 0xff}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001f00030000000800200006000000140012800900010076657468"], 0x4c}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/137) prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/31) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000040)={@local, @broadcast}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000012009702000000000000000007", @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) 1.998764543s ago: executing program 3 (id=413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x3, 0xfffffffe, @private1}}, 0x0, 0x0, 0x36, 0x0, "f1f7882eade7f9ed59dd754e93fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x7a, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r2 = fsmount(r1, 0x0, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = gettid() kcmp(r6, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(0x0) getpgrp(0x0) r7 = getpgrp(0x0) kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000540)={0x1, 0x1, 0x1000, 0x3, &(0x7f00000001c0)="1ddcdb", 0xf8, 0x0, &(0x7f0000000440)="f113ec370957868d28d5ad41025ed00854ad3ce12651464d09eb0438523545e6744d62e3781a7f95d1558197cd7f8d024bb79c7abc3aa9ae30a59a9abba65ab8927d24707c78d32cbabb37cee2ba33363ec48418e12b2ee391d3f1e27ebea71fd157a8c9f39fe094f9010fd68c02e22fe98ee75c8ee8910349082d5e9c9b99efd7c8a2a85da3ce0d7fc701b5e9f0d87f72612987c19b41fd480ae3dbdefb70376eda6320cb43cb44ef8e3ecfb3ca90dd763c96eb69a9ddd8e658c62917a17adc10c2e65788d7dae533240d103179cdfc2d7feaff80d3c526628c7203084eedc6ca8fab4230442a82b9498e10f278aab9d8c52c725d078af0"}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="83cd9b", 0x3}], 0x1}, 0x2000c815) ioctl$KVM_RUN(r8, 0xae80, 0x0) fchdir(r2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) 1.861522225s ago: executing program 4 (id=414): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x2b6, 0x0, 0x88a8}}, {0xfe9b, 0x1, {0x401, 0x42d, 0x9, 0x8100}}]}]}]}]}, 0x68}}, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) (async) ioctl$int_in(r1, 0x40000000af01, 0x0) r3 = eventfd2(0xc95, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r3}) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 1.563319562s ago: executing program 4 (id=415): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1a0100024f227610050b02924f940102030109021b000165db7c40525adf9501b7afe0fc090582024000000000"], 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)=@v2={0x2000000, [{0xed2, 0x2}, {0x5, 0x8}]}, 0x14, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x81) lsetxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000280)=@v2={0x2000000, [{0x544b}, {0x400, 0x3150}]}, 0x14, 0x1) r0 = socket$key(0xf, 0x3, 0x2) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100020a0000002cbd700000000000030006003200000002004e240000000000000000000000aa6d5cdc00020013000100000026bd700000000000030005000000000002004e24ac14142c0000000000000000"], 0x50}}, 0x0) 1.106845336s ago: executing program 0 (id=416): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x30, r5, 0x20, 0x0, 0x0, {{0x5}, {@val={0x8, 0x1, 0x74}, @val={0x8}, @val={0xc, 0x99, {0xa7, 0x27}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, r2, &(0x7f0000000000)) 906.973263ms ago: executing program 0 (id=417): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) bind$qrtr(r1, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x14) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000040)={0x4000000}) close(r3) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x1) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/202, 0xca}], 0x1, 0x1, 0x5) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) process_mrelease(0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006900030500000000000000000000fbffffffffff070001"], 0x20}}, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x0, &(0x7f0000008a40)=0x9, 0x0, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x6000) close_range(r2, 0xffffffffffffffff, 0x0) 685.863896ms ago: executing program 3 (id=418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060500000000000000000007d3b1ad698b4bd0020a600d00000014000780080008400000009808000640000a00000500010006000000050005000200000005000400005d00000900020073797a310000000010000300686173683a69702c6d6163", @ANYRES16=r0], 0x5c}, 0x1, 0x0, 0x0, 0x240400a5}, 0x20000000) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000004035bc60fb27276b1d01014000010203010902940003011010060904000000010100000a2401018000020102072408040100050c240703000000d8857005850904010000010200000904010101010200000c240201020303016251710909050109100014b483ddcdf3affb4500090402000001020000090402010101020000072401010502100f240202966802000078f4cd9535ca09058209080007040307"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$PPPIOCSMAXCID(r1, 0x4010744d, &(0x7f0000000000)=0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/nfsfs\x00') lseek(r2, 0x82e8, 0x0) eventfd2(0x80000001, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000080), 0x8) getdents64(r2, 0x0, 0x25) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000000)='{.%@,)**]:\\\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000380)={0xb, 0x100, 0x2, {0xb, 0x67, 0x6, 0x8}}) quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000301, r5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8300, 0x0) 440.020115ms ago: executing program 7 (id=419): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) (rerun: 64) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000140)=""/31, &(0x7f00000001c0)=0x1f) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x34, 0xec}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1103}}], 0x30}}], 0x1, 0x4000) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [], 0xa, "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"}, 0x1e9) (async) sendfile(r0, r1, 0x0, 0x8000002b) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x6, 0xfff}) 422.526983ms ago: executing program 0 (id=420): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}}, 0x18}}, 0x0) (async) r1 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000dbb000/0x1000)=nil) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r4, r5, 0xe90, 0x0, 0x4, 0x5, {0x2, 0x5, 0x5, 0xa, 0xa, 0x9, 0x2, 0x18, 0xb, 0xd25, 0x9, 0x60b, 0xffffffff, 0x10001, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) (async) unshare(0x24060400) (async) unshare(0x2a020400) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x6, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x244400) 252.98344ms ago: executing program 7 (id=421): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x204100, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) io_setup(0x7, 0x0) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='.\x00\x00'], 0x20) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 140.028983ms ago: executing program 0 (id=422): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000005b0c7dcbf30fda6ed09a7110530009000000060000000000b74dd2"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) unlink(&(0x7f00000001c0)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={0x0, r5, 0x0, 0x3}}, 0x20) 0s ago: executing program 7 (id=423): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r0, 0xb, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000800)=""/96, 0x60}, {&(0x7f00000014c0)=""/4085, 0xff5}, {&(0x7f0000001140)=""/94, 0x5e}, {&(0x7f00000036c0)=""/4089, 0xff9}, {&(0x7f0000001280)=""/191, 0xbf}, {&(0x7f0000000580)=""/130, 0x82}, {&(0x7f0000000000)=""/139, 0x8b}, {&(0x7f0000000240)=""/132, 0x84}], 0x9}, 0x4102) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000100), 0x315f, 0x2) sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x4, 0x4, 0x2, {0xa, 0x4e22, 0x4, @loopback, 0x80}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)="93a96c44d4f54e3af3d49187726ce0c8740c2f1bb8456ceed919654bdfd398c4cea727a2dfb02477594af830cc3f238bf5c56b4152f6de93c869bb00c6b38c8e795656e68baeb9ba393eaed6ecd71e9a690e7d5fd068782605fb70d7005f8d6dacfe69ef74ea69f7847a8adf61bf5c8b18290a779c7ac86686e42e4718d9601b61c157d841e22986", 0x88}, {&(0x7f0000000140)="a2", 0x1}, {&(0x7f0000000640)="69721765595b2b3168482717dd6945a8741a225df027136e75547c81385f06969edb487731119fd71391da6b75c3f8769b54176318a4be0e91ab8f15633c33462123e0b2ef12519320d25e3296f9c520e7661efa1549ae73f2", 0x59}, {&(0x7f0000000880)="8de89340a80bd490e344b42abb927559d04b3cafa37084d0695cafbf063602a5bd4290a2c03ceb9483db739220fc2d7f6499d628eb91b63187a8462b0f88ab120c5b40106727808503d7eaeea8bff8c622b8ec4e34a51d1a481c2302b9490fbf7a4d1bf1f5a2d534f18a68766d94d23e57fc09b5d9b149958a41bc4a3e587d15f16ba7dffde39b74309fc44be7edebd6f3adbcd4147f78a92347987df01536835d12b7c6f065e1f5dfb6215b007a2e910e1f9a531762837cf981c035e1d23f120c00f3f477dcab20e7d27183afd058f8242cca7528708ea84cceabaecdc67fccceecded3b83ddc218cca4ddcd55e7fe125ce7128", 0xf4}], 0x4}, 0x4080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40000002) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002) kernel console output (not intermixed with test programs): ub300 failed with error -22 [ 106.057733][ T6470] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'. [ 106.184775][ T6474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.222326][ T6474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.514887][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 106.581285][ T46] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 106.652231][ T5887] usb 6-1: device descriptor read/64, error -71 [ 106.721053][ T5912] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 106.749818][ T46] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 106.759039][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.768208][ T46] usb 4-1: Product: syz [ 106.773102][ T46] usb 4-1: Manufacturer: syz [ 106.777706][ T46] usb 4-1: SerialNumber: syz [ 106.792106][ T46] usb 4-1: config 0 descriptor?? [ 106.881044][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 106.890921][ T5887] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 106.895530][ T5912] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.910279][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.921433][ T5912] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.931592][ T5912] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.946416][ T5912] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.955838][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.007943][ T46] usb-storage 4-1:0.0: USB Mass Storage device detected [ 107.020969][ T5887] usb 6-1: device descriptor read/64, error -71 [ 107.135944][ T5887] usb usb6-port1: attempt power cycle [ 107.170024][ T5912] usb 3-1: GET_CAPABILITIES returned 0 [ 107.176055][ T5912] usbtmc 3-1:16.0: can't read capabilities [ 107.208112][ T5912] usb 4-1: USB disconnect, device number 15 [ 107.248533][ T46] usb 3-1: USB disconnect, device number 14 [ 107.361757][ T6506] pimreg: entered allmulticast mode [ 107.371752][ T6506] pimreg: left allmulticast mode [ 107.482350][ T5887] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 107.543631][ T5887] usb 6-1: device descriptor read/8, error -71 [ 107.621290][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.125'. [ 107.735614][ T6520] netlink: 92 bytes leftover after parsing attributes in process `syz.2.126'. [ 107.791428][ T5887] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 107.821485][ T5887] usb 6-1: device descriptor read/8, error -71 [ 107.941175][ T5887] usb usb6-port1: unable to enumerate USB device [ 108.134792][ T5906] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 108.290917][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 108.297840][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.308849][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8422, setting to 1024 [ 108.320104][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.333088][ T5906] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 108.342686][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.355512][ T5906] usb 4-1: config 0 descriptor?? [ 108.412357][ T46] usb 1-1: USB disconnect, device number 11 [ 108.575052][ T6530] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.775134][ T5906] elecom 0003:056E:00FD.0003: report_id 0 is invalid [ 108.791829][ T5906] elecom 0003:056E:00FD.0003: item 0 1 1 8 parsing failed [ 108.799570][ T5906] elecom 0003:056E:00FD.0003: probe with driver elecom failed with error -22 [ 108.983806][ T6526] xt_limit: Overflow, try lower: 65536/2147483648 [ 109.013201][ T6526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.043006][ T6526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.082912][ T1213] usb 4-1: USB disconnect, device number 16 [ 109.112340][ T6553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.131114][ T975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 109.136000][ T6553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.281619][ T975] usb 6-1: device descriptor read/64, error -71 [ 109.291927][ T5887] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 109.312164][ T5906] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 109.341049][ T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 109.450894][ T5887] usb 3-1: device descriptor read/64, error -71 [ 109.491398][ T46] usb 5-1: device descriptor read/64, error -71 [ 109.549740][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.572487][ T5906] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 109.587582][ T5906] usb 1-1: can't read configurations, error -71 [ 109.700972][ T5887] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 109.731210][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 109.845105][ T5887] usb 3-1: device descriptor read/64, error -71 [ 109.870936][ T46] usb 5-1: device descriptor read/64, error -71 [ 109.962324][ T5887] usb usb3-port1: attempt power cycle [ 109.982535][ T46] usb usb5-port1: attempt power cycle [ 110.050863][ T25] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 110.183222][ T25] usb 4-1: device descriptor read/64, error -71 [ 110.300979][ T5887] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 110.321354][ T46] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 110.342393][ T5887] usb 3-1: device descriptor read/8, error -71 [ 110.352521][ T46] usb 5-1: device descriptor read/8, error -71 [ 110.441044][ T25] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 110.575421][ T6583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.146'. [ 110.589178][ T5887] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 110.596946][ T25] usb 4-1: device descriptor read/64, error -71 [ 110.604557][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 110.631929][ T5887] usb 3-1: device descriptor read/8, error -71 [ 110.638812][ T46] usb 5-1: device descriptor read/8, error -71 [ 110.690932][ T5906] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 110.722644][ T25] usb usb4-port1: attempt power cycle [ 110.761124][ T5887] usb usb3-port1: unable to enumerate USB device [ 110.767879][ T46] usb usb5-port1: unable to enumerate USB device [ 110.853851][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.866527][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.876831][ T5906] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 110.885986][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.896818][ T5906] usb 1-1: config 0 descriptor?? [ 111.060922][ T25] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 111.091487][ T25] usb 4-1: device descriptor read/8, error -71 [ 111.313447][ T5906] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 111.330918][ T25] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 111.351925][ T25] usb 4-1: device descriptor read/8, error -71 [ 111.466217][ T25] usb usb4-port1: unable to enumerate USB device [ 111.515195][ T5906] cp2112 0003:10C4:EA90.0004: error requesting version [ 111.529671][ T5906] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -71 [ 111.540997][ T5906] usb 1-1: USB disconnect, device number 14 [ 111.944024][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.133151][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.277497][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.318355][ T6596] tipc: Started in network mode [ 112.325383][ T6596] tipc: Node identity ac141441, cluster identity 4711 [ 112.341983][ T6596] tipc: Enabled bearer , priority 10 [ 112.382585][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.461944][ T5912] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 112.530827][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.563577][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.578582][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.590282][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.601150][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.609665][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 112.619027][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.633177][ T5912] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 112.649728][ T5912] usb 3-1: config 0 has no interface number 0 [ 112.663598][ T5912] usb 3-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 112.683604][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.702000][ T5912] usb 3-1: Product: syz [ 112.706222][ T5912] usb 3-1: Manufacturer: syz [ 112.728635][ T5912] usb 3-1: SerialNumber: syz [ 112.741249][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 112.751726][ T52] bridge_slave_1: left allmulticast mode [ 112.752672][ T5912] usb 3-1: config 0 descriptor?? [ 112.771601][ T52] bridge_slave_1: left promiscuous mode [ 112.781718][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 112.783763][ T5912] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 112.792719][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.818968][ T25] usb 5-1: config 1 has an invalid interface number: 26 but max is 1 [ 112.828192][ T25] usb 5-1: config 1 has an invalid interface number: 89 but max is 1 [ 112.837100][ T25] usb 5-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 112.848670][ T25] usb 5-1: config 1 has no interface number 0 [ 112.859123][ T52] bridge_slave_0: left allmulticast mode [ 112.861673][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 112.881658][ T52] bridge_slave_0: left promiscuous mode [ 112.887395][ T25] usb 5-1: config 1 has no interface number 1 [ 112.894102][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.896281][ T5912] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 112.917560][ T25] usb 5-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023 [ 112.928728][ T5912] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 112.941998][ T46] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 112.981726][ T25] usb 5-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 112.991658][ T5912] usb 3-1: media controller created [ 112.998312][ T25] usb 5-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8 [ 113.019160][ T25] usb 5-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 113.033349][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.041015][ T25] usb 5-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 113.073556][ T5912] usb 3-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 113.089549][ T5912] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 113.111113][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 113.135983][ T46] usb 1-1: config 1 has an invalid descriptor of length 194, skipping remainder of the config [ 113.159827][ T25] usb 5-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.180779][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.201697][ T25] usb 5-1: config 1 interface 26 has no altsetting 0 [ 113.208446][ T25] usb 5-1: config 1 interface 89 has no altsetting 0 [ 113.238698][ T46] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.248532][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.248969][ T5912] rc_core: IR keymap rc-dtt200u not found [ 113.257930][ T25] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 113.273463][ T46] usb 1-1: Product: syz [ 113.277679][ T46] usb 1-1: Manufacturer: syz [ 113.282689][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.290930][ T46] usb 1-1: SerialNumber: syz [ 113.306720][ T5912] Registered IR keymap rc-empty [ 113.308393][ T25] usb 5-1: Product: syz [ 113.316039][ T25] usb 5-1: Manufacturer: syz [ 113.332657][ T25] usb 5-1: SerialNumber: syz [ 113.332920][ T975] tipc: Node number set to 2886997057 [ 113.354353][ T6598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.359885][ T5912] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 113.379343][ T5912] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 113.381442][ T6598] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.407836][ T5912] dvb-usb: schedule remote query interval to 300 msecs. [ 113.417393][ T5912] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 113.438173][ T5912] usb 3-1: USB disconnect, device number 19 [ 113.516461][ T5912] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 113.555557][ T46] usb 1-1: 0:2 : does not exist [ 113.599591][ T46] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 113.663475][ T46] usb 1-1: USB disconnect, device number 15 [ 113.707289][ T6625] validate_nla: 14 callbacks suppressed [ 113.707338][ T6625] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 113.819222][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'. [ 113.891639][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.027102][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.034724][ T25] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 114.047663][ T25] usb 5-1: 26:2 : does not exist [ 114.056902][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.063767][ T25] usb 5-1: unknown interface protocol 0x13, assuming v1 [ 114.075690][ T52] bond0 (unregistering): Released all slaves [ 114.082964][ T25] usb 5-1: 89:2 : does not exist [ 114.092541][ T6618] netlink: 'syz.3.156': attribute type 5 has an invalid length. [ 114.128238][ T25] usb 5-1: USB disconnect, device number 13 [ 114.395678][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.591821][ T52] hsr_slave_0: left promiscuous mode [ 114.660923][ T5846] Bluetooth: hci1: command tx timeout [ 114.700332][ T52] hsr_slave_1: left promiscuous mode [ 114.729296][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.770025][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.821941][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.866499][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.919441][ T52] veth1_macvtap: left promiscuous mode [ 114.935789][ T52] veth0_macvtap: left promiscuous mode [ 114.941731][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 114.954592][ T52] veth1_vlan: left promiscuous mode [ 114.968403][ T52] veth0_vlan: left promiscuous mode [ 115.111238][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 115.172859][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 115.218512][ T5912] usb 3-1: config 38 interface 0 has no altsetting 0 [ 115.245969][ T5912] usb 3-1: New USB device found, idVendor=1cd2, idProduct=606f, bcdDevice=8b.89 [ 115.285976][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.313598][ T5912] usb 3-1: Product: syz [ 115.317802][ T5912] usb 3-1: Manufacturer: syz [ 115.344746][ T5912] usb 3-1: SerialNumber: syz [ 115.952052][ T52] team0 (unregistering): Port device team_slave_1 removed [ 115.995970][ T52] team0 (unregistering): Port device team_slave_0 removed [ 116.108780][ T5912] gs_usb 3-1:38.0: Required endpoints not found [ 116.136517][ T5912] usb 3-1: USB disconnect, device number 20 [ 116.439007][ T6673] hsr0: entered promiscuous mode [ 116.454767][ T6673] macsec1: entered allmulticast mode [ 116.460132][ T6673] hsr0: entered allmulticast mode [ 116.487065][ T6673] hsr_slave_0: entered allmulticast mode [ 116.493044][ T6673] hsr_slave_1: entered allmulticast mode [ 116.740846][ T5846] Bluetooth: hci1: command tx timeout [ 116.782594][ T6612] chnl_net:caif_netlink_parms(): no params data found [ 116.794651][ T6695] process 'syz.3.167' launched './file0' with NULL argv: empty string added [ 116.891187][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 117.015568][ T5846] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 117.065652][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 117.119653][ T46] usb 1-1: config 0 has an invalid interface number: 193 but max is 0 [ 117.161384][ T46] usb 1-1: config 0 has no interface number 0 [ 117.231335][ T46] usb 1-1: New USB device found, idVendor=1b3d, idProduct=930c, bcdDevice=bd.59 [ 117.240466][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.260288][ T46] usb 1-1: Product: syz [ 117.267209][ T6612] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.280410][ T6612] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.287735][ T46] usb 1-1: Manufacturer: syz [ 117.330787][ T46] usb 1-1: SerialNumber: syz [ 117.349544][ T6612] bridge_slave_0: entered allmulticast mode [ 117.362195][ T46] usb 1-1: config 0 descriptor?? [ 117.384478][ T6612] bridge_slave_0: entered promiscuous mode [ 117.394044][ T46] ftdi_sio 1-1:0.193: FTDI USB Serial Device converter detected [ 117.404524][ T6612] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.417713][ T6718] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 117.424720][ T6718] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.434644][ T46] ftdi_sio ttyUSB0: unknown device type: 0xbd59 [ 117.443490][ T6719] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 117.450132][ T6719] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.450937][ T6612] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.500938][ T6612] bridge_slave_1: entered allmulticast mode [ 117.518954][ T6612] bridge_slave_1: entered promiscuous mode [ 117.526720][ T6718] vhci_hcd vhci_hcd.0: Device attached [ 117.529619][ T6719] vhci_hcd vhci_hcd.0: Device attached [ 117.557728][ T6721] vhci_hcd: connection closed [ 117.557825][ T6720] vhci_hcd: connection closed [ 117.560666][ T6730] netlink: 'syz.2.173': attribute type 2 has an invalid length. [ 117.584819][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.584899][ T67] vhci_hcd: stop threads [ 117.610196][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.618979][ T67] vhci_hcd: release socket [ 117.641103][ T67] vhci_hcd: disconnect device [ 117.658894][ T67] vhci_hcd: stop threads [ 117.674022][ T5912] usb 1-1: USB disconnect, device number 16 [ 117.683072][ T5912] ftdi_sio 1-1:0.193: device disconnected [ 117.684027][ T67] vhci_hcd: release socket [ 117.706300][ T6612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.730334][ T67] vhci_hcd: disconnect device [ 117.779304][ T6730] f: entered promiscuous mode [ 117.839929][ T6612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.974789][ T6612] team0: Port device team_slave_0 added [ 118.017574][ T6612] team0: Port device team_slave_1 added [ 118.075483][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.151313][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.239641][ T6612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.313116][ T6612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.320124][ T6612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.565300][ T6612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.643404][ T6762] program syz.0.179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.690948][ T1213] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 118.820931][ T5846] Bluetooth: hci1: command tx timeout [ 118.891013][ T1213] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 118.901572][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.909616][ T1213] usb 5-1: Product: syz [ 118.938581][ T1213] usb 5-1: Manufacturer: syz [ 118.966975][ T1213] usb 5-1: SerialNumber: syz [ 119.042776][ T6612] hsr_slave_0: entered promiscuous mode [ 119.059497][ T6612] hsr_slave_1: entered promiscuous mode [ 119.091361][ T6612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.109290][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 119.118422][ T6612] Cannot create hsr debugfs directory [ 119.160425][ T6773] openvswitch: netlink: Tunnel attr 208 out of range max 16 [ 119.171053][ T1213] r8152-cfgselector 5-1: Unknown version 0x0000 [ 119.252144][ T1213] r8152-cfgselector 5-1: config 0 descriptor?? [ 120.573396][ T6788] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.583890][ T6788] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 120.623318][ T6788] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.645269][ T6788] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 120.688815][ T6612] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.704469][ T6788] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.729980][ T6788] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 120.764757][ T6612] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.778675][ T6612] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 120.795309][ T6788] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 120.815104][ T6612] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 120.839118][ T6788] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 120.912090][ T5846] Bluetooth: hci1: command tx timeout [ 120.939764][ T6788] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.040931][ T1213] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 121.089896][ T6788] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 121.140576][ T6612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.209771][ T6612] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.243218][ T25] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 121.269445][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.276686][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.284703][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 121.350913][ T1213] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.393466][ T1213] usb 3-1: config 0 has an invalid interface number: 82 but max is 2 [ 121.403240][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.410401][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.430974][ T1213] usb 3-1: config 0 has an invalid interface number: 159 but max is 2 [ 121.439234][ T1213] usb 3-1: config 0 has an invalid interface number: 156 but max is 2 [ 121.541286][ T1213] usb 3-1: config 0 has no interface number 0 [ 121.547481][ T1213] usb 3-1: config 0 has no interface number 1 [ 121.595966][ T1213] usb 3-1: config 0 has no interface number 2 [ 121.619429][ T6612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 121.633657][ T1213] usb 3-1: config 0 interface 82 has no altsetting 0 [ 121.690280][ T1213] usb 3-1: config 0 interface 159 has no altsetting 0 [ 121.693945][ T6612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.720825][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 121.730786][ T1213] usb 3-1: config 0 interface 156 has no altsetting 0 [ 121.802377][ T1213] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 121.829278][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.833574][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.884897][ T1213] usb 3-1: Product: 㥂蝛탉婒쵃쀍陽텼ᵨ弴揅禜鶛⪺ⷺ꜀ꐺ泇宝ᤵꊌ焯쫉엒⎡鿌谔遊㎚ﴞ퐄햵㺗㊇ᖩ䦰ޒ↱穂尩히ᬬ啻魾疺䄰 [ 121.899478][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 121.911012][ T5930] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 121.926246][ T1213] usb 3-1: Manufacturer: х [ 121.931090][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.932077][ T25] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 121.939847][ T1213] usb 3-1: SerialNumber: syz [ 121.967255][ T25] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 122.000900][ T25] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 122.033787][ T6612] veth0_vlan: entered promiscuous mode [ 122.036015][ T1213] usb 3-1: config 0 descriptor?? [ 122.054326][ T25] usb 5-1: config 128 has no interface number 0 [ 122.062264][ T25] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 122.080583][ T6612] veth1_vlan: entered promiscuous mode [ 122.081281][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 122.096612][ T25] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.119870][ T5930] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 122.130623][ T25] usb 5-1: config 128 interface 127 has no altsetting 0 [ 122.141307][ T5930] usb 4-1: config 0 has no interface number 0 [ 122.147516][ T5930] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 122.170832][ T25] usb 5-1: language id specifier not provided by device, defaulting to English [ 122.196265][ T6612] veth0_macvtap: entered promiscuous mode [ 122.200350][ T5930] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 122.202571][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 122.237131][ T6612] veth1_macvtap: entered promiscuous mode [ 122.244985][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.259290][ T5930] usb 4-1: config 0 interface 167 has no altsetting 0 [ 122.274811][ T25] usb 5-1: Product: syz [ 122.279037][ T25] usb 5-1: Manufacturer: syz [ 122.283845][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 122.283874][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.283894][ T5930] usb 4-1: Product: syz [ 122.283938][ T5930] usb 4-1: Manufacturer: syz [ 122.283956][ T5930] usb 4-1: SerialNumber: syz [ 122.310623][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.350880][ T5906] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 122.361670][ T25] usb 5-1: SerialNumber: syz [ 122.380828][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.386819][ T5930] usb 4-1: config 0 descriptor?? [ 122.390670][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.390691][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.407160][ T6818] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 122.431648][ T6818] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 122.468676][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.479804][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.498502][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.509510][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.537902][ T5906] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.558965][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.580923][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.597042][ T5906] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.611105][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.637995][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.655059][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.188'. [ 122.669357][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.685382][ T1213] usb 3-1: USB disconnect, device number 21 [ 122.690877][ T5906] usb 1-1: SerialNumber: syz [ 122.702511][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.703771][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.761353][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.818015][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.820021][ T5930] usbtest 4-1:0.167: couldn't get endpoints, -22 [ 122.858834][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.900535][ T5930] usbtest 4-1:0.167: probe with driver usbtest failed with error -22 [ 122.921239][ T6833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.931005][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.939472][ T5906] usb 1-1: 0:2 : does not exist [ 122.970965][ T6833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.981659][ T5930] usb 4-1: USB disconnect, device number 21 [ 123.001079][ T6612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.046890][ T6631] udevd[6631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 123.065276][ T5906] usb 1-1: USB disconnect, device number 17 [ 123.080903][ T6612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.130117][ T6612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.161618][ T6612] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.166696][ T6444] udevd[6444]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.181724][ T6612] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.191664][ T6836] udevd[6836]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 123.213625][ T6612] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.242033][ T6612] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.319026][ T6444] udevd[6444]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.622632][ T25] usb 5-1: USB disconnect, device number 16 [ 123.764905][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.793725][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.862073][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.869963][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.872519][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.983925][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.990281][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.438023][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.445092][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.966197][ T7209] netlink: 'syz.3.193': attribute type 39 has an invalid length. [ 235.120558][ T7211] vivid-000: disconnect [ 235.242007][ T7208] input: syz0 as /devices/virtual/input/input8 [ 236.337566][ T975] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 236.506804][ T975] usb 1-1: config 0 has no interfaces? [ 236.521645][ T975] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.536728][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.560991][ T975] usb 1-1: Product: syz [ 236.573140][ T975] usb 1-1: Manufacturer: syz [ 236.578315][ T975] usb 1-1: SerialNumber: syz [ 236.598254][ T975] usb 1-1: config 0 descriptor?? [ 236.833262][ T7219] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 236.864554][ T7220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.894601][ T7200] vivid-000: reconnect [ 237.193224][ T7219] team0: Port device netdevsim0 added [ 237.800979][ T5885] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.941229][ T5885] usb 7-1: device descriptor read/64, error -71 [ 238.180827][ T5885] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 238.501112][ T5885] usb 7-1: device descriptor read/64, error -71 [ 238.621340][ T5885] usb usb7-port1: attempt power cycle [ 238.936139][ T7238] geneve0: entered allmulticast mode [ 238.990877][ T5885] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 239.042569][ T5885] usb 7-1: device descriptor read/8, error -71 [ 239.152433][ T7237] geneve0: left allmulticast mode [ 239.317079][ T5885] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 239.363132][ T5885] usb 7-1: device descriptor read/8, error -71 [ 239.441732][ T975] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 239.496587][ T5885] usb usb7-port1: unable to enumerate USB device [ 239.513444][ T5885] usb 1-1: USB disconnect, device number 18 [ 239.660907][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 239.694685][ T46] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 239.835788][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.847521][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.859686][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.873289][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.873433][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 239.894648][ T25] usb 5-1: SerialNumber: syz [ 239.901533][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 169, changing to 11 [ 239.914217][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.932495][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 239.959272][ T46] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 239.969905][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.990932][ T1213] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 240.012583][ T46] usb 4-1: config 0 descriptor?? [ 240.067304][ T146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.140422][ T25] usb 5-1: 0:2 : does not exist [ 240.156958][ T25] usb 5-1: unit 5: unexpected type 0x0d [ 240.180822][ T1213] usb 1-1: Using ep0 maxpacket: 32 [ 240.203495][ T1213] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 240.214941][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.224336][ T1213] usb 1-1: Product: syz [ 240.237714][ T1213] usb 1-1: Manufacturer: syz [ 240.243296][ T146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.255496][ T25] usb 5-1: USB disconnect, device number 17 [ 240.257738][ T1213] usb 1-1: SerialNumber: syz [ 240.310293][ T1213] usb 1-1: config 0 descriptor?? [ 240.334333][ T1213] usb 1-1: no audio or video endpoints found [ 240.437742][ T146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.487340][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.575244][ T2153] usb 1-1: USB disconnect, device number 19 [ 240.630217][ T146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.684999][ T46] usb 4-1: string descriptor 0 read error: -71 [ 240.704089][ T46] uclogic 0003:5543:0045.0005: failed retrieving string descriptor #200: -71 [ 240.731360][ T46] uclogic 0003:5543:0045.0005: failed retrieving pen parameters: -71 [ 240.763084][ T46] uclogic 0003:5543:0045.0005: failed probing pen v2 parameters: -71 [ 240.780801][ T46] uclogic 0003:5543:0045.0005: failed probing parameters: -71 [ 240.800943][ T46] uclogic 0003:5543:0045.0005: probe with driver uclogic failed with error -71 [ 240.846223][ T46] usb 4-1: USB disconnect, device number 22 [ 240.931645][ T7268] use of bytesused == 0 is deprecated and will be removed in the future, [ 240.965449][ T7268] use the actual size instead. [ 241.031560][ T146] bridge_slave_1: left allmulticast mode [ 241.055104][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.055945][ T146] bridge_slave_1: left promiscuous mode [ 241.072414][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.092205][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.100026][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.111591][ T146] bridge_slave_0: left allmulticast mode [ 241.111655][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.127084][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.136568][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.161465][ T146] bridge_slave_0: left promiscuous mode [ 241.181956][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.201080][ T2153] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 241.388960][ T2153] usb 7-1: Using ep0 maxpacket: 8 [ 241.399636][ T2153] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 241.417791][ T2153] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 241.511891][ T2153] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.521415][ T2153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.529713][ T2153] usb 7-1: Product: 砚鈝梮䱏๎瑭䒾痲쁗ᛀᨾੂ୲饼Ⲷ࿅蟩泗 [ 241.550241][ T2153] usb 7-1: Manufacturer: ࠝ [ 241.558131][ T2153] usb 7-1: SerialNumber: О [ 241.600788][ T5930] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.740956][ T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 241.754539][ T5930] usb 4-1: device descriptor read/64, error -71 [ 241.909437][ T7270] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 241.926390][ T25] usb 1-1: config 1 interface 0 altsetting 159 bulk endpoint 0x1 has invalid maxpacket 64 [ 241.940902][ T25] usb 1-1: config 1 interface 0 altsetting 159 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.941478][ T7270] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 241.958217][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 242.006389][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.041380][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.055844][ T25] usb 1-1: Product: ࡡ [ 242.060530][ T25] usb 1-1: Manufacturer: І [ 242.066825][ T25] usb 1-1: SerialNumber: 쇹豭䶜馡៷襎隋Ռ뫃㤺럅섘봈எᢁ㏍뮥鐄⥍根㕦橠鄙ꤹ怿쯪鰇襁ڒ揻㎵먪짽좥蟧陽儱뚠剾惡译㇜敒۱粇퓫䐡ꭦ왩㑖㸓ᬄ蕦权勝틷ཌྷ渌栔㆚컁َ䮽㎴Ⅺ믥僧Ɠ誣縌⚺쨝똍鷴扱蛥喂鋕Ⲕꠘ [ 242.187621][ T5930] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 242.218399][ T7283] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 242.248502][ T7283] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 242.297433][ T7285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.330878][ T5930] usb 4-1: device descriptor read/64, error -71 [ 242.358451][ T7285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.491414][ T5930] usb usb4-port1: attempt power cycle [ 242.498190][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.531634][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.551296][ T146] bond0 (unregistering): Released all slaves [ 242.634194][ T2153] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 242.644126][ T2153] cdc_ncm 7-1:1.0: bind() failure [ 242.655545][ T146] f: left promiscuous mode [ 242.703967][ T2153] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 242.725250][ T25] usb 1-1: USB disconnect, device number 20 [ 242.770949][ T2153] cdc_ncm 7-1:1.1: bind() failure [ 242.842200][ T2153] usb 7-1: USB disconnect, device number 6 [ 242.847310][ T5930] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 242.945507][ T5930] usb 4-1: device descriptor read/8, error -71 [ 243.233595][ T5838] Bluetooth: hci4: command tx timeout [ 243.240911][ T5930] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 243.241899][ T2153] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 243.291758][ T5930] usb 4-1: device descriptor read/8, error -71 [ 243.420870][ T5930] usb usb4-port1: unable to enumerate USB device [ 243.440473][ T146] hsr_slave_0: left promiscuous mode [ 243.480202][ T146] hsr_slave_1: left promiscuous mode [ 243.495399][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.525103][ T2153] usb 7-1: not running at top speed; connect to a high speed hub [ 243.534647][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.550560][ T2153] usb 7-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 243.565067][ T146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.573763][ T2153] usb 7-1: config 1 interface 0 has no altsetting 0 [ 243.581610][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.599803][ T2153] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.624166][ T2153] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.640855][ T2153] usb 7-1: Product: syz [ 243.647215][ T146] veth1_macvtap: left promiscuous mode [ 243.653865][ T2153] usb 7-1: Manufacturer: syz [ 243.659838][ T146] veth0_macvtap: left promiscuous mode [ 243.666565][ T2153] usb 7-1: SerialNumber: syz [ 243.674544][ T146] veth1_vlan: left promiscuous mode [ 243.680061][ T146] veth0_vlan: left promiscuous mode [ 243.688585][ T7285] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 243.725262][ T7306] QAT: Invalid ioctl 1076925497 [ 243.741050][ T5885] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 243.910600][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.929944][ T5885] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.940802][ T5885] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.951142][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.960158][ T5885] usb 1-1: SerialNumber: syz [ 244.186932][ T5885] usb 1-1: 0:2 : does not exist [ 244.220075][ T5885] usb 1-1: USB disconnect, device number 21 [ 244.447314][ T2153] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 244.459950][ T7213] udevd[7213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.517782][ T2153] usb 7-1: USB disconnect, device number 7 [ 244.980947][ T2153] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 245.160832][ T2153] usb 7-1: Using ep0 maxpacket: 16 [ 245.198501][ T2153] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.242387][ T2153] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 245.254273][ T2153] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 245.282096][ T2153] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.291965][ T2153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.301499][ T2153] usb 7-1: SerialNumber: syz [ 245.312893][ T5838] Bluetooth: hci4: command tx timeout [ 245.325198][ T2153] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 245.340847][ T2153] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 245.351260][ T2153] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 245.618059][ T7319] netlink: 'syz.6.218': attribute type 2 has an invalid length. [ 245.953101][ T2153] usb 7-1: USB disconnect, device number 8 [ 246.111110][ T5839] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 246.230433][ T7272] chnl_net:caif_netlink_parms(): no params data found [ 246.300870][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 246.337334][ T5839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.401100][ T5839] usb 1-1: config 9 has an invalid interface number: 212 but max is 0 [ 246.466703][ T5839] usb 1-1: config 9 has no interface number 0 [ 246.550819][ T5839] usb 1-1: config 9 interface 212 has no altsetting 0 [ 246.630526][ T5839] usb 1-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=f3.5f [ 246.664697][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.687376][ T5839] usb 1-1: Product: syz [ 246.712038][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.719782][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.751018][ T5839] usb 1-1: Manufacturer: syz [ 246.756058][ T5839] usb 1-1: SerialNumber: syz [ 246.774280][ T7272] bridge_slave_0: entered allmulticast mode [ 246.782331][ T7272] bridge_slave_0: entered promiscuous mode [ 246.793256][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.840829][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.849942][ T7272] bridge_slave_1: entered allmulticast mode [ 246.917938][ T7272] bridge_slave_1: entered promiscuous mode [ 246.937585][ T7353] vivid-000: disconnect [ 246.986348][ T5839] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.212/input/input9 [ 247.046333][ T5195] bcm5974 1-1:9.212: could not read from device [ 247.130958][ T5839] usb 1-1: USB disconnect, device number 22 [ 247.253281][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.317520][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.362001][ T2153] IPVS: starting estimator thread 0... [ 247.391459][ T5838] Bluetooth: hci4: command tx timeout [ 247.521999][ T7368] IPVS: using max 20 ests per chain, 48000 per kthread [ 247.562755][ T7272] team0: Port device team_slave_0 added [ 247.590066][ T7272] team0: Port device team_slave_1 added [ 247.695137][ T7371] netlink: 56 bytes leftover after parsing attributes in process `syz.4.229'. [ 247.781209][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 247.815490][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.832836][ T7347] vivid-000: reconnect [ 247.848109][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.881188][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.905960][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.936215][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.982445][ T7382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.229'. [ 248.072324][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.411271][ T2153] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 248.424801][ T7272] hsr_slave_0: entered promiscuous mode [ 248.454109][ T7272] hsr_slave_1: entered promiscuous mode [ 248.482409][ T7272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.501808][ T7272] Cannot create hsr debugfs directory [ 248.550864][ T2153] usb 7-1: device descriptor read/64, error -71 [ 248.602129][ T1213] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 248.788230][ T1213] usb 4-1: Using ep0 maxpacket: 8 [ 248.822191][ T2153] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 248.831630][ T1213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.858212][ T1213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.883649][ T1213] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 248.904769][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.933983][ T1213] usb 4-1: config 0 descriptor?? [ 248.991719][ T2153] usb 7-1: device descriptor read/64, error -71 [ 249.022540][ T7272] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 249.040979][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 249.091753][ T7272] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 249.115872][ T7272] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 249.134873][ T7272] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 249.143656][ T2153] usb usb7-port1: attempt power cycle [ 249.223959][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 249.237839][ T46] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.258114][ T46] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.283884][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.297090][ T46] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.308689][ T46] usb 5-1: Product: syz [ 249.315053][ T46] usb 5-1: Manufacturer: syz [ 249.332553][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.341352][ T975] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 249.354737][ T46] hub 5-1:4.0: USB hub found [ 249.387584][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.439246][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.447360][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.471528][ T5838] Bluetooth: hci4: command tx timeout [ 249.489289][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.497546][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.507166][ T2153] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 249.521136][ T975] usb 1-1: Using ep0 maxpacket: 32 [ 249.540800][ T975] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 249.555180][ T46] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 249.563057][ T1213] steelseries 0003:1038:1410.0006: unbalanced collection at end of report description [ 249.571648][ T2153] usb 7-1: device descriptor read/8, error -71 [ 249.591490][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.647176][ T975] usb 1-1: config 0 descriptor?? [ 249.655094][ T1213] steelseries 0003:1038:1410.0006: parse failed [ 249.675697][ T1213] steelseries 0003:1038:1410.0006: probe with driver steelseries failed with error -22 [ 249.820910][ T2153] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 249.844306][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.852031][ T2153] usb 7-1: device descriptor read/8, error -71 [ 249.861101][ T46] usb 5-1: USB disconnect, device number 18 [ 249.889824][ T975] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 249.943733][ T975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.961238][ T2153] usb usb7-port1: unable to enumerate USB device [ 250.002359][ T975] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 250.041143][ T975] usb 1-1: media controller created [ 250.056956][ T7272] veth0_vlan: entered promiscuous mode [ 250.085923][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.091885][ T7419] dns_resolver: Unsupported server list version (0) [ 250.120933][ T7272] veth1_vlan: entered promiscuous mode [ 250.284201][ T7272] veth0_macvtap: entered promiscuous mode [ 250.326488][ T7272] veth1_macvtap: entered promiscuous mode [ 250.349263][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.361529][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.371807][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.435531][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.499645][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.566401][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.636669][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.691013][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.736042][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.758762][ T1213] usb 4-1: USB disconnect, device number 27 [ 250.807474][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.825524][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.839941][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.853156][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.864763][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.880390][ T975] az6027: usb out operation failed. (-71) [ 250.893645][ T975] stb0899_attach: Driver disabled by Kconfig [ 250.901069][ T975] az6027: no front-end attached [ 250.901069][ T975] [ 250.909368][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.927654][ T975] az6027: usb out operation failed. (-71) [ 250.939383][ T7445] vivid-000: disconnect [ 250.950647][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.970248][ T975] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 251.001555][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.016889][ T975] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 251.035879][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.069628][ T975] dvb-usb: schedule remote query interval to 400 msecs. [ 251.080953][ T975] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 251.116416][ T975] usb 1-1: USB disconnect, device number 24 [ 251.172733][ T7272] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.208279][ T7272] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.228153][ T7272] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.271017][ T7272] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.553346][ T975] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 251.852793][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.871774][ T1213] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 251.905970][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.932428][ T7458] loop6: detected capacity change from 0 to 524287999 [ 251.988787][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.998780][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.012341][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.024651][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.044358][ T1213] usb 7-1: Using ep0 maxpacket: 8 [ 252.060273][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.073989][ T7442] vivid-000: reconnect [ 252.123859][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.133437][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.144115][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.155872][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.165031][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.169680][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.175039][ T1213] usb 7-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 252.184030][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.208594][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.218159][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.236341][ T1213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.237112][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.245345][ T1213] usb 7-1: Product: syz [ 252.255347][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.276782][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.288108][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.298611][ T7458] ldm_validate_partition_table(): Disk read failed. [ 252.311905][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.321852][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.336254][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.346150][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 252.346212][ T1213] usb 7-1: Manufacturer: syz [ 252.361591][ T7458] Dev loop6: unable to read RDB block 0 [ 252.370609][ T7458] loop6: unable to read partition table [ 252.378537][ T7458] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 252.398865][ T7215] ldm_validate_partition_table(): Disk read failed. [ 252.407488][ T7215] Dev loop6: unable to read RDB block 0 [ 252.427791][ T1213] usb 7-1: SerialNumber: syz [ 252.433723][ T7215] loop6: unable to read partition table [ 252.503106][ T1213] usb 7-1: config 0 descriptor?? [ 252.545342][ T1213] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 252.811800][ T7470] netlink: 4668 bytes leftover after parsing attributes in process `syz.7.208'. [ 252.861399][ T7470] netlink: 4668 bytes leftover after parsing attributes in process `syz.7.208'. [ 252.892063][ T5885] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 253.001072][ T7478] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 253.084757][ T5885] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.115982][ T5885] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.137379][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.148996][ T46] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 253.170612][ T5885] usb 5-1: Product: syz [ 253.188826][ T5885] usb 5-1: Manufacturer: syz [ 253.195482][ T5885] usb 5-1: SerialNumber: syz [ 253.222405][ T5885] cdc_ncm 5-1:1.0: skipping garbage [ 253.241533][ T5885] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 253.253469][ T5885] cdc_ncm 5-1:1.0: bind() failure [ 253.263439][ T5885] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 253.287530][ T5885] cdc_ncm 5-1:1.1: bind() failure [ 253.301028][ T5912] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 253.307446][ T46] usb 1-1: device descriptor read/64, error -71 [ 253.500764][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 253.514744][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.537400][ T5912] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 253.560941][ T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 253.585194][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.605265][ T5912] usb 4-1: config 0 descriptor?? [ 253.701630][ T46] usb 1-1: device descriptor read/64, error -71 [ 253.821266][ T46] usb usb1-port1: attempt power cycle [ 253.827132][ T7478] netlink: 68 bytes leftover after parsing attributes in process `syz.3.249'. [ 253.981182][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 254.088540][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 254.103769][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 254.115223][ T1213] gspca_sonixj: reg_w1 err -110 [ 254.120585][ T1213] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 254.144173][ T5912] usb 4-1: USB disconnect, device number 28 [ 254.151945][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 254.172455][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 254.191808][ T25] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.217717][ T25] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 254.241347][ T46] usb 1-1: device descriptor read/8, error -71 [ 254.258779][ T25] usb 8-1: config 0 interface 0 has no altsetting 0 [ 254.266846][ T25] usb 8-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 254.278401][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.303195][ T25] usb 8-1: config 0 descriptor?? [ 254.490893][ T46] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 254.531628][ T46] usb 1-1: device descriptor read/8, error -71 [ 254.652216][ T46] usb usb1-port1: unable to enumerate USB device [ 254.715957][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 254.736172][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 254.757922][ T25] usb 8-1: USB disconnect, device number 2 [ 254.858246][ T46] usb 7-1: USB disconnect, device number 13 [ 255.030970][ T5912] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 255.201305][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 255.210030][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.236730][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.265238][ T5912] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.266412][ T46] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 255.284132][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.284166][ T5912] usb 4-1: Product: syz [ 255.284191][ T5912] usb 4-1: Manufacturer: syz [ 255.284209][ T5912] usb 4-1: SerialNumber: syz [ 255.441523][ T46] usb 7-1: device descriptor read/64, error -71 [ 255.530638][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.561688][ T7542] vivid-000: disconnect [ 255.580956][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.690882][ T46] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 255.841090][ T46] usb 7-1: device descriptor read/64, error -71 [ 255.875323][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883391][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.952390][ T46] usb usb7-port1: attempt power cycle [ 256.105994][ T5930] usb 5-1: USB disconnect, device number 19 [ 256.142429][ T5912] usb 4-1: 0:2 : does not exist [ 256.210627][ T5912] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 256.320870][ T46] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 256.341756][ T46] usb 7-1: device descriptor read/8, error -71 [ 256.354054][ T7538] vivid-000: reconnect [ 256.370073][ T5912] usb 4-1: USB disconnect, device number 29 [ 256.403647][ T7561] trusted_key: syz.4.257 sent an empty control message without MSG_MORE. [ 256.605405][ T46] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 256.661362][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.663494][ T46] usb 7-1: device descriptor read/8, error -71 [ 256.774997][ T46] usb usb7-port1: unable to enumerate USB device [ 256.778380][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 256.779108][ T7573] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:0 [ 256.779423][ T7573] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:0 [ 256.804619][ T7575] netlink: 28 bytes leftover after parsing attributes in process `syz.7.261'. [ 257.731034][ T46] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 257.757398][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 257.885405][ T7618] netlink: 'syz.4.272': attribute type 10 has an invalid length. [ 257.902367][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.933375][ T46] usb 4-1: config 0 has no interfaces? [ 257.944339][ T7618] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.952290][ T46] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 257.973185][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.983105][ T7618] bond0: (slave team0): Enslaving as an active interface with an up link [ 257.994391][ T46] usb 4-1: config 0 descriptor?? [ 258.002495][ T25] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 258.173173][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 258.187569][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 258.197963][ T25] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 258.212109][ T25] usb 1-1: Product: syz [ 258.216541][ T25] usb 1-1: Manufacturer: syz [ 258.225499][ T25] usb 1-1: SerialNumber: syz [ 258.228870][ T5930] usb 4-1: USB disconnect, device number 30 [ 258.235508][ T25] usb 1-1: config 0 descriptor?? [ 258.252479][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 258.331475][ T46] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 258.421360][ T1213] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 258.491082][ T46] usb 8-1: Using ep0 maxpacket: 32 [ 258.511626][ T46] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.523779][ T46] usb 8-1: config 0 interface 0 has no altsetting 0 [ 258.532053][ T46] usb 8-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00 [ 258.542151][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.567297][ T46] usb 8-1: config 0 descriptor?? [ 258.585533][ T1213] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.597057][ T1213] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 258.609234][ T1213] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 258.619849][ T1213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.632556][ T1213] usb 7-1: config 0 descriptor?? [ 258.853481][ T1213] Bluetooth: Can't get state to change to load ram patch err [ 258.869703][ T1213] Bluetooth: Loading patch file failed [ 258.880777][ T1213] ath3k 7-1:0.0: probe with driver ath3k failed with error -71 [ 258.896375][ T25] gspca_zc3xx: reg_w_i err -71 [ 258.913575][ T25] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 258.921982][ T1213] usb 7-1: USB disconnect, device number 18 [ 258.969285][ T25] usb 1-1: USB disconnect, device number 29 [ 258.999535][ T46] wacom 0003:056A:00ED.0007: unknown main item tag 0x0 [ 259.025297][ T46] wacom 0003:056A:00ED.0007: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.7-1/input0 [ 259.390864][ T2153] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 259.528831][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.279'. [ 259.545707][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.279'. [ 259.595076][ T2153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.615008][ T2153] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 259.634250][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.667999][ T2153] usb 5-1: config 0 descriptor?? [ 259.678271][ T2153] pwc: Askey VC010 type 2 USB webcam detected. [ 259.720916][ T46] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 259.861088][ T46] usb 4-1: device descriptor read/64, error -71 [ 259.883462][ T975] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 260.040881][ T975] usb 1-1: device descriptor read/64, error -71 [ 260.087041][ T2153] pwc: recv_control_msg error -32 req 02 val 2b00 [ 260.098862][ T2153] pwc: recv_control_msg error -32 req 02 val 2700 [ 260.108726][ T46] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 260.125724][ T2153] pwc: recv_control_msg error -32 req 02 val 2c00 [ 260.136004][ T2153] pwc: recv_control_msg error -32 req 04 val 1000 [ 260.149805][ T2153] pwc: recv_control_msg error -32 req 04 val 1300 [ 260.159598][ T2153] pwc: recv_control_msg error -32 req 04 val 1400 [ 260.176627][ T2153] pwc: recv_control_msg error -32 req 02 val 2000 [ 260.186958][ T2153] pwc: recv_control_msg error -32 req 02 val 2100 [ 260.197930][ T2153] pwc: recv_control_msg error -32 req 04 val 1500 [ 260.210012][ T2153] pwc: recv_control_msg error -32 req 02 val 2500 [ 260.264463][ T46] usb 4-1: device descriptor read/64, error -71 [ 260.282128][ T975] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 260.381845][ T46] usb usb4-port1: attempt power cycle [ 260.428098][ T2153] pwc: recv_control_msg error -71 req 02 val 2600 [ 260.438368][ T2153] pwc: recv_control_msg error -71 req 02 val 2900 [ 260.458831][ T975] usb 1-1: device descriptor read/64, error -71 [ 260.458899][ T2153] pwc: recv_control_msg error -71 req 02 val 2800 [ 260.494984][ T2153] pwc: recv_control_msg error -71 req 04 val 1100 [ 260.505136][ T2153] pwc: recv_control_msg error -71 req 04 val 1200 [ 260.535837][ T2153] pwc: Registered as video103. [ 260.544387][ T2153] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 260.567216][ T2153] usb 5-1: USB disconnect, device number 20 [ 260.598815][ T975] usb usb1-port1: attempt power cycle [ 260.751341][ T46] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 260.792024][ T46] usb 4-1: device descriptor read/8, error -71 [ 260.892176][ T29] audit: type=1326 audit(1739969578.869:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 260.918421][ T29] audit: type=1326 audit(1739969578.899:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 260.962995][ T29] audit: type=1326 audit(1739969578.899:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 260.992816][ T975] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 261.004461][ T5906] usb 8-1: USB disconnect, device number 3 [ 261.040861][ T975] usb 1-1: device descriptor read/8, error -71 [ 261.048549][ T29] audit: type=1326 audit(1739969578.899:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 261.072249][ T46] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 261.114770][ T46] usb 4-1: device descriptor read/8, error -71 [ 261.131032][ T29] audit: type=1326 audit(1739969578.899:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 261.189043][ T29] audit: type=1326 audit(1739969578.899:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 261.261916][ T29] audit: type=1326 audit(1739969578.899:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 261.271335][ T46] usb usb4-port1: unable to enumerate USB device [ 261.299692][ T29] audit: type=1326 audit(1739969578.899:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 261.325671][ T975] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 261.344627][ T29] audit: type=1326 audit(1739969578.899:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 261.370464][ T29] audit: type=1326 audit(1739969578.899:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7651 comm="syz.6.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7718cde9 code=0x7ffc0000 [ 261.398621][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.410748][ T975] usb 1-1: device descriptor read/8, error -71 [ 261.521213][ T975] usb usb1-port1: unable to enumerate USB device [ 262.201183][ T5885] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 262.300904][ T5930] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 262.362722][ T5885] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 262.391591][ T5885] usb 5-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 262.402207][ T5885] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 262.415236][ T5885] usb 5-1: config 220 has no interface number 2 [ 262.422731][ T5885] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 262.439020][ T5885] usb 5-1: config 220 interface 0 has no altsetting 0 [ 262.446892][ T5885] usb 5-1: config 220 interface 76 has no altsetting 0 [ 262.454980][ T5885] usb 5-1: config 220 interface 1 has no altsetting 0 [ 262.465766][ T5885] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 262.474901][ T5930] usb 8-1: Using ep0 maxpacket: 16 [ 262.476225][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.503317][ T5930] usb 8-1: config 0 has an invalid interface number: 39 but max is 0 [ 262.520858][ T5930] usb 8-1: config 0 has no interface number 0 [ 262.530254][ T5885] usb 5-1: Product: syz [ 262.549410][ T5885] usb 5-1: Manufacturer: syz [ 262.549949][ T5930] usb 8-1: config 0 interface 39 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 262.569693][ T5885] usb 5-1: SerialNumber: syz [ 262.621229][ T5930] usb 8-1: config 0 interface 39 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 262.682403][ T5930] usb 8-1: New USB device found, idVendor=0c52, idProduct=2212, bcdDevice= 1.ca [ 262.711204][ T5930] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.720296][ T5930] usb 8-1: Product: syz [ 262.757676][ T5930] usb 8-1: Manufacturer: syz [ 262.767624][ T5930] usb 8-1: SerialNumber: syz [ 262.778548][ T5930] usb 8-1: config 0 descriptor?? [ 262.791546][ T7682] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 262.838609][ T5930] ftdi_sio 8-1:0.39: FTDI USB Serial Device converter detected [ 262.885287][ T5930] usb 8-1: Detected SIO [ 262.915994][ T5930] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 262.991792][ T1213] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 263.114803][ T5906] usb 8-1: USB disconnect, device number 4 [ 263.178378][ T5906] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 263.205832][ T5906] ftdi_sio 8-1:0.39: device disconnected [ 263.240762][ T1213] usb 7-1: Using ep0 maxpacket: 16 [ 263.255982][ T1213] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 263.280431][ T1213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 263.298848][ T5930] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 263.344362][ T1213] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 263.354301][ T1213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.368374][ T1213] usb 7-1: Product: syz [ 263.378289][ T1213] usb 7-1: Manufacturer: syz [ 263.394654][ T1213] usb 7-1: SerialNumber: syz [ 263.409360][ T1213] usb 7-1: config 0 descriptor?? [ 263.480928][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 263.514374][ T5930] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.572682][ T5930] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.612520][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 263.658250][ T5930] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 263.677850][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.700460][ T1213] appledisplay 7-1:0.0: Error while getting initial brightness: -110 [ 263.712041][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.723208][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.732019][ C0] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 263.766970][ T5930] usb 4-1: config 0 descriptor?? [ 263.776017][ T1213] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -110 [ 264.037181][ T975] usb 7-1: USB disconnect, device number 19 [ 264.215536][ T5930] kye 0003:0458:4018.0008: unknown main item tag 0x0 [ 264.248670][ T5930] kye 0003:0458:4018.0008: unknown main item tag 0xe [ 264.272902][ T5930] kye 0003:0458:4018.0008: item fetching failed at offset 15/133 [ 264.294319][ T5930] kye 0003:0458:4018.0008: parse failed [ 264.318129][ T5930] kye 0003:0458:4018.0008: probe with driver kye failed with error -22 [ 264.418303][ T5930] usb 4-1: USB disconnect, device number 35 [ 264.811912][ T5885] usb 5-1: selecting invalid altsetting 0 [ 264.820506][ T5885] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 264.864073][ T5885] usb 5-1: No valid video chain found. [ 264.896040][ T5885] usb 5-1: selecting invalid altsetting 0 [ 264.925057][ T5885] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 265.003496][ T5885] usb 5-1: USB disconnect, device number 21 [ 265.050953][ T5930] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 265.163865][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 265.243710][ T5930] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 265.275000][ T5930] usb 7-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.335713][ T5930] usb 7-1: config 2 interface 0 has no altsetting 0 [ 265.363721][ T5930] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 265.397114][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.424304][ T5930] usb 7-1: Product: syz [ 265.445720][ T5930] usb 7-1: Manufacturer: syz [ 265.451184][ T5930] usb 7-1: SerialNumber: syz [ 265.619207][ T7743] fuse: Bad value for 'fd' [ 265.728684][ T5930] usb 7-1: USB disconnect, device number 20 [ 265.848124][ T7730] team0 (unregistering): Port device team_slave_0 removed [ 265.881622][ T7730] team0 (unregistering): Port device team_slave_1 removed [ 266.028485][ T7735] batman_adv: batadv0: Adding interface: dummy0 [ 266.038327][ T7735] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.089597][ T7735] batman_adv: batadv0: Interface activated: dummy0 [ 266.151185][ T7738] batadv0: mtu less than device minimum [ 266.159108][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.173585][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.187539][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.201269][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.214957][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.228520][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.242990][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.258142][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.271696][ T7738] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.349909][ T7740] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 266.373041][ T46] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 266.558737][ T46] usb 1-1: not running at top speed; connect to a high speed hub [ 266.574430][ T46] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 266.613193][ T46] usb 1-1: config 1 interface 0 has no altsetting 0 [ 266.629610][ T46] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.40 [ 266.642366][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.651527][ T46] usb 1-1: Product: syz [ 266.656240][ T46] usb 1-1: Manufacturer: 豯ㆢ荧入謗铈篗獶䠜ꅣ▘瓖ꕦ㺄욡馇菳ὡ翼੕䂄탲꫃푤팩û箱⫙ﷻ㻨﹝Ⲧ鲐竆暰ꮎ샪䨱理汰ꎉ朶ぽ᪀휆뛸弒츣壍땫ᔳ聚䘳䳖텔퐍㏲຋袗ꓔ䥭ᜇ≥餪⪺증递ﴑ붗됿Ꮫ됁□ഷ颛뵿걁孇兝ሲ쫪䗓揟ᄈ﵄汽펶備 [ 266.660789][ T5930] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 266.689302][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.698950][ T46] usb 1-1: SerialNumber: syz [ 266.756986][ T7747] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 266.906900][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 266.922893][ T5930] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 266.932534][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.947994][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.958200][ T5930] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.973116][ T5930] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.992237][ T5930] usb 7-1: config 0 has no interface number 0 [ 267.007187][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 267.007226][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.007252][ T5930] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.007282][ T5930] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.007313][ T5930] usb 7-1: config 0 interface 125 has no altsetting 0 [ 267.029860][ T5930] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 267.029898][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.029923][ T5930] usb 7-1: Product: syz [ 267.029941][ T5930] usb 7-1: Manufacturer: syz [ 267.029958][ T5930] usb 7-1: SerialNumber: syz [ 267.033785][ T5930] usb 7-1: config 0 descriptor?? [ 267.190859][ T975] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 267.209854][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.210129][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.212929][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.213196][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.226662][ T46] usbhid 1-1:1.0: can't add hid device: -71 [ 267.226782][ T46] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 267.229573][ T46] usb 1-1: USB disconnect, device number 34 [ 267.350363][ T975] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 267.350401][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.353424][ T975] usb 4-1: config 0 descriptor?? [ 267.357477][ T975] cp210x 4-1:0.0: cp210x converter detected [ 267.563166][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.577442][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.763734][ T975] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 267.778831][ T975] usb 4-1: cp210x converter now attached to ttyUSB0 [ 267.792472][ C0] usb 7-1: async_complete: urb error -71 [ 267.798907][ C0] usb 7-1: async_complete: urb error -71 [ 267.806368][ C0] usb 7-1: async_complete: urb error -71 [ 267.812917][ C0] usb 7-1: async_complete: urb error -71 [ 267.842812][ T5930] get_1284_register: usb error -71 [ 267.852498][ T5930] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 267.900993][ T5930] usb 7-1: USB disconnect, device number 21 [ 267.974084][ T5839] usb 4-1: USB disconnect, device number 36 [ 268.004204][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 268.097284][ T5839] cp210x 4-1:0.0: device disconnected [ 268.200255][ T7777] netlink: 20 bytes leftover after parsing attributes in process `syz.7.309'. [ 268.300967][ T46] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 268.470896][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 268.503259][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.536497][ T46] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 268.581040][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.622341][ T46] usb 1-1: config 0 descriptor?? [ 268.670870][ T5885] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 268.889252][ T5885] usb 8-1: config 0 has no interfaces? [ 268.949102][ T5885] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 269.000631][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.009482][ T5885] usb 8-1: Product: syz [ 269.015451][ T5930] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 269.053571][ T46] nzxt-smart2 0003:1E71:2011.0009: collection stack underflow [ 269.088373][ T5885] usb 8-1: Manufacturer: syz [ 269.099097][ T5885] usb 8-1: SerialNumber: syz [ 269.104778][ T46] nzxt-smart2 0003:1E71:2011.0009: item 0 0 0 12 parsing failed [ 269.127353][ T5885] usb 8-1: config 0 descriptor?? [ 269.159780][ T46] nzxt-smart2 0003:1E71:2011.0009: probe with driver nzxt-smart2 failed with error -22 [ 269.230889][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 269.253146][ T5906] usb 1-1: USB disconnect, device number 35 [ 269.280345][ T5930] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 269.302619][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.436638][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 269.436662][ T29] audit: type=1326 audit(1739969587.329:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 269.466656][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.564716][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.584116][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.700753][ T5930] usb 5-1: string descriptor 0 read error: -71 [ 269.712310][ T29] audit: type=1326 audit(1739969587.469:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 269.734794][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.742458][ T5930] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 269.792715][ T5930] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 269.803828][ T5930] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 269.812233][ T29] audit: type=1326 audit(1739969587.469:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 269.837722][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.109636][ T29] audit: type=1326 audit(1739969587.469:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 270.134220][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.296120][ T29] audit: type=1326 audit(1739969587.469:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 270.319946][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.414966][ T29] audit: type=1326 audit(1739969587.469:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 270.440642][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.596253][ T29] audit: type=1326 audit(1739969587.469:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 270.619902][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.823632][ T29] audit: type=1326 audit(1739969587.469:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 271.002566][ T29] audit: type=1326 audit(1739969587.469:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 271.168715][ T5906] usb 8-1: USB disconnect, device number 5 [ 271.210382][ T29] audit: type=1326 audit(1739969587.469:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.6.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9f77128fb9 code=0x7ffc0000 [ 271.234591][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.607695][ T7826] x_tables: duplicate underflow at hook 2 [ 271.968390][ T975] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 272.180845][ T975] usb 7-1: Using ep0 maxpacket: 16 [ 272.197891][ T975] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=31.79 [ 272.240494][ T975] usb 7-1: New USB device strings: Mfr=223, Product=2, SerialNumber=3 [ 272.273741][ T975] usb 7-1: Product: syz [ 272.305017][ T975] usb 7-1: Manufacturer: syz [ 272.314051][ T5885] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 272.370855][ T975] usb 7-1: SerialNumber: syz [ 272.468501][ T975] usb 7-1: config 0 descriptor?? [ 272.484687][ T5885] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 272.542742][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.588171][ T5885] usb 8-1: Product: syz [ 272.598148][ T5885] usb 8-1: Manufacturer: syz [ 272.613745][ T5885] usb 8-1: SerialNumber: syz [ 272.660435][ T5885] usb 8-1: config 0 descriptor?? [ 272.745151][ T975] usb 7-1: Cannot retrieve CPort count: -71 [ 272.840933][ T975] usb 7-1: Cannot retrieve CPort count: -71 [ 272.919656][ T975] es2_ap_driver 7-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 272.929536][ T5885] usb-storage 8-1:0.0: USB Mass Storage device detected [ 273.059518][ T975] usb 7-1: USB disconnect, device number 22 [ 273.406071][ T5885] usb 8-1: USB disconnect, device number 6 [ 273.665034][ T7911] can: request_module (can-proto-3) failed. [ 273.717328][ T7914] can: request_module (can-proto-3) failed. [ 273.820870][ T5906] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 274.038591][ T5906] usb 7-1: Using ep0 maxpacket: 8 [ 274.099073][ T5906] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.152851][ T5906] usb 7-1: config 1 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.196426][ T5906] usb 7-1: config 1 interface 0 has no altsetting 0 [ 274.259868][ T5906] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 274.326489][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.380938][ T5906] usb 7-1: Product: syz [ 274.400863][ T5906] usb 7-1: Manufacturer: syz [ 274.430234][ T5906] usb 7-1: SerialNumber: syz [ 274.440919][ T46] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 274.498954][ T5906] usb 7-1: bad CDC descriptors [ 274.561976][ T5906] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 274.585988][ T5906] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 274.782870][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.847259][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.106954][ T7953] kvm: pic: single mode not supported [ 275.107078][ T7953] kvm: pic: level sensitive irq not supported [ 275.147581][ T7953] kvm: pic: single mode not supported [ 275.161830][ T7953] kvm: pic: non byte read [ 275.221449][ T5912] usb 4-1: new low-speed USB device number 37 using dummy_hcd [ 275.371017][ T5912] usb 4-1: device descriptor read/64, error -71 [ 275.652608][ T5912] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 275.830924][ T5912] usb 4-1: device descriptor read/64, error -71 [ 275.972619][ T5912] usb usb4-port1: attempt power cycle [ 275.992334][ T7974] input: syz0 as /devices/virtual/input/input15 [ 276.360968][ T5912] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 276.392529][ T5912] usb 4-1: device descriptor read/8, error -71 [ 276.640998][ T5912] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 276.683014][ T5906] usb 7-1: USB disconnect, device number 23 [ 276.696439][ T5912] usb 4-1: device descriptor read/8, error -71 [ 276.842710][ T5912] usb usb4-port1: unable to enumerate USB device [ 277.300882][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 277.624220][ T9] usb 1-1: config 0 has no interfaces? [ 277.648289][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 277.743050][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.000961][ T46] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 278.039018][ T9] usb 1-1: Product: syz [ 278.050586][ T9] usb 1-1: Manufacturer: syz [ 278.086826][ T9] usb 1-1: SerialNumber: syz [ 278.114649][ T9] usb 1-1: config 0 descriptor?? [ 278.137407][ T8026] syz.3.347 (8026): drop_caches: 0 [ 278.150945][ T46] usb 7-1: device descriptor read/64, error -71 [ 278.392843][ T5839] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 278.431971][ T46] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 278.570930][ T46] usb 7-1: device descriptor read/64, error -71 [ 278.570930][ T5839] usb 8-1: device descriptor read/64, error -71 [ 278.680990][ T46] usb usb7-port1: attempt power cycle [ 278.723362][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 278.820951][ T5839] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 278.885357][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 278.898498][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 226 [ 278.913189][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 278.923638][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.935499][ T8036] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 278.979969][ T5839] usb 8-1: device descriptor read/64, error -71 [ 279.021206][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.030450][ T9] usb 4-1: invalid MIDI out EP 0 [ 279.050871][ T46] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 279.084012][ T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 279.087476][ T46] usb 7-1: device descriptor read/8, error -71 [ 279.112137][ T5839] usb usb8-port1: attempt power cycle [ 279.159767][ T2153] usb 4-1: USB disconnect, device number 41 [ 279.168564][ T7560] udevd[7560]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 279.351168][ T46] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 279.381866][ T46] usb 7-1: device descriptor read/8, error -71 [ 279.471249][ T5839] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 279.491609][ T46] usb usb7-port1: unable to enumerate USB device [ 279.501990][ T5839] usb 8-1: device descriptor read/8, error -71 [ 279.761212][ T5839] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 279.800885][ T5839] usb 8-1: device descriptor read/8, error -71 [ 279.935775][ T5839] usb usb8-port1: unable to enumerate USB device [ 280.098388][ T46] usb 1-1: USB disconnect, device number 36 [ 280.120901][ T9] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 280.312513][ T9] usb 4-1: config 64 has an invalid interface number: 19 but max is 0 [ 280.323296][ T9] usb 4-1: config 64 has no interface number 0 [ 280.331347][ T9] usb 4-1: config 64 interface 19 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 280.355553][ T9] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 280.374979][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.397348][ T9] usb 4-1: probing VID:PID(2201:012C) [ 280.412952][ T9] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 02 [ 280.421082][ T9] usb 4-1: vub300 ignoring EndPoint(0) 02 [ 280.427005][ T9] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 280.471879][ T9] vub300 4-1:64.19: probe with driver vub300 failed with error -22 [ 280.510886][ T46] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 280.598599][ T5885] usb 4-1: USB disconnect, device number 42 [ 280.678108][ T46] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 280.687593][ T46] usb 1-1: config 0 has no interface number 0 [ 280.694446][ T46] usb 1-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 280.706796][ T46] usb 1-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 280.721414][ T46] usb 1-1: config 0 interface 153 has no altsetting 0 [ 280.732625][ T46] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 280.743084][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.752076][ T46] usb 1-1: Product: syz [ 280.756948][ T46] usb 1-1: Manufacturer: syz [ 280.763091][ T46] usb 1-1: SerialNumber: syz [ 280.770273][ T46] usb 1-1: config 0 descriptor?? [ 280.988959][ T46] hub 1-1:0.153: bad descriptor, ignoring hub [ 280.999558][ T46] hub 1-1:0.153: probe with driver hub failed with error -5 [ 281.011031][ T46] sierra 1-1:0.153: Sierra USB modem converter detected [ 281.041739][ T46] usb 1-1: USB disconnect, device number 37 [ 281.059434][ T46] sierra 1-1:0.153: device disconnected [ 281.390836][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 281.573409][ T9] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 281.594700][ T9] usb 7-1: config 160 has no interface number 0 [ 281.602660][ T9] usb 7-1: config 160 interface 200 has no altsetting 0 [ 281.616679][ T9] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 281.627025][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.635954][ T9] usb 7-1: Product: syz [ 281.640557][ T9] usb 7-1: Manufacturer: syz [ 281.646562][ T9] usb 7-1: SerialNumber: syz [ 281.937101][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.948897][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 282.008994][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 282.009011][ T29] audit: type=1326 audit(1739969599.979:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.0.364" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f814618cde9 code=0x0 [ 282.097237][ T8093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.364'. [ 282.123687][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 282.190951][ T8093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.364'. [ 282.202419][ T9] usb 7-1: USB disconnect, device number 28 [ 282.242501][ T8093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.364'. [ 282.462118][ T7560] udevd[7560]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.610808][ T46] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 282.658402][ T8099] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 282.683010][ T8099] PKCS7: Only support pkcs7_signedData type [ 282.712222][ T8101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 282.773718][ T46] usb 8-1: config 2 has an invalid interface number: 1 but max is 0 [ 282.790766][ T46] usb 8-1: config 2 has no interface number 0 [ 282.797359][ T46] usb 8-1: config 2 interface 1 has no altsetting 0 [ 282.808472][ T46] usb 8-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 282.818767][ T46] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.827399][ T46] usb 8-1: Product: syz [ 282.832383][ T46] usb 8-1: Manufacturer: syz [ 282.842832][ T46] usb 8-1: SerialNumber: syz [ 282.965482][ T8109] netlink: 'syz.0.369': attribute type 2 has an invalid length. [ 283.082313][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.103515][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.199047][ T46] snd-usb-audio 8-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 283.223561][ T46] snd-usb-us122l 8-1:2.1: usb_set_interface error [ 283.224537][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'. [ 283.230596][ T46] snd-usb-us122l 8-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 283.261361][ T46] usb 8-1: USB disconnect, device number 12 [ 283.266437][ T8113] bond_slave_0: entered promiscuous mode [ 283.273796][ T8113] bond_slave_1: entered promiscuous mode [ 283.280883][ T5885] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 283.294087][ T8113] bond_slave_0: left promiscuous mode [ 283.299887][ T8113] bond_slave_1: left promiscuous mode [ 283.432349][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.455787][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 283.466209][ T5885] usb 1-1: config 0 has an invalid interface number: 81 but max is 0 [ 283.478066][ T5885] usb 1-1: config 0 has no interface number 0 [ 283.491106][ T5885] usb 1-1: config 0 interface 81 altsetting 0 endpoint 0x4 has invalid maxpacket 65280, setting to 1024 [ 283.530797][ T5885] usb 1-1: config 0 interface 81 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 283.543524][ T5885] usb 1-1: config 0 interface 81 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 283.575984][ T5885] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=60.3a [ 283.598707][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.613206][ T5885] usb 1-1: Product: syz [ 283.620949][ T5885] usb 1-1: Manufacturer: syz [ 283.629098][ T5885] usb 1-1: SerialNumber: syz [ 283.643716][ T5885] usb 1-1: config 0 descriptor?? [ 283.649620][ T8109] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 283.660274][ T8109] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 283.683214][ T5885] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 283.827683][ T8120] loop6: detected capacity change from 0 to 64 [ 283.848601][ C0] blk_print_req_error: 26 callbacks suppressed [ 283.848625][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 283.875361][ T5885] gspca_sonixj: reg_w1 err -71 [ 283.882644][ T5885] sonixj 1-1:0.81: probe with driver sonixj failed with error -71 [ 283.888102][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.900180][ C0] buffer_io_error: 25 callbacks suppressed [ 283.900197][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 283.916047][ T5885] usb 1-1: USB disconnect, device number 38 [ 283.922965][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.932599][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 284.032813][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 284.045139][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.054552][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.072709][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.082177][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.093873][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.103772][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.120735][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.130160][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.150101][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.159560][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.561106][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 284.582738][ T975] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 284.780744][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 284.787185][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 284.804104][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.816391][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 284.834534][ T9] usb 8-1: config 249 has an invalid interface number: 99 but max is 0 [ 284.850840][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.877145][ T9] usb 8-1: config 249 has an invalid interface number: 8 but max is 0 [ 284.900977][ T975] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 284.931800][ T9] usb 8-1: config 249 has 2 interfaces, different from the descriptor's value: 1 [ 284.943241][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.960872][ T9] usb 8-1: config 249 has no interface number 0 [ 284.972072][ T975] usb 4-1: config 0 descriptor?? [ 284.979020][ T9] usb 8-1: config 249 has no interface number 1 [ 284.998523][ T9] usb 8-1: config 249 interface 99 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.031125][ T9] usb 8-1: too many endpoints for config 249 interface 8 altsetting 6: 50, using maximum allowed: 30 [ 285.075298][ T9] usb 8-1: config 249 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 50 [ 285.141707][ T9] usb 8-1: config 249 interface 99 has no altsetting 0 [ 285.169545][ T9] usb 8-1: config 249 interface 8 has no altsetting 0 [ 285.193500][ T9] usb 8-1: New USB device found, idVendor=0499, idProduct=1036, bcdDevice=82.ef [ 285.224019][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.241095][ T9] usb 8-1: Product: syz [ 285.251173][ T9] usb 8-1: Manufacturer: syz [ 285.265794][ T9] usb 8-1: SerialNumber: syz [ 285.341689][ T8145] program syz.0.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.389475][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.412545][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.469244][ T975] uclogic 0003:5543:0004.000A: unknown main item tag 0x0 [ 285.522964][ T8127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.543182][ T975] uclogic 0003:5543:0004.000A: item fetching failed at offset 5/7 [ 285.548365][ T8127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.591494][ T975] uclogic 0003:5543:0004.000A: parse failed [ 285.598617][ T975] uclogic 0003:5543:0004.000A: probe with driver uclogic failed with error -22 [ 285.643150][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.682218][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.690537][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.732623][ T9] snd-usb-audio 8-1:249.99: probe with driver snd-usb-audio failed with error -2 [ 285.791752][ T9] hub 8-1:249.8: Invalid hub with more than one config or interface [ 285.828715][ T9] hub 8-1:249.8: probe with driver hub failed with error -22 [ 285.848162][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 285.940783][ T9] usb 8-1: USB disconnect, device number 13 [ 285.950883][ T5885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 286.087552][ T8160] gre1: entered promiscuous mode [ 286.110941][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 286.124645][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.154736][ T5885] usb 1-1: config index 0 descriptor too short (expected 40313, got 1251) [ 286.200913][ T5885] usb 1-1: config 131 has too many interfaces: 98, using maximum allowed: 32 [ 286.230264][ T7222] udevd[7222]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:249.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.252118][ T5885] usb 1-1: config 131 has an invalid descriptor of length 0, skipping remainder of the config [ 286.264485][ T5885] usb 1-1: config 131 has 0 interfaces, different from the descriptor's value: 98 [ 286.278310][ T5885] usb 1-1: New USB device found, idVendor=1410, idProduct=a007, bcdDevice=6e.07 [ 286.291400][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.304365][ T5885] usb 1-1: Product: syz [ 286.333194][ T5885] usb 1-1: Manufacturer: syz [ 286.352818][ T5885] usb 1-1: SerialNumber: syz [ 286.435625][ T8168] netlink: 60 bytes leftover after parsing attributes in process `syz.6.382'. [ 286.467775][ T8172] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 286.768008][ T8177] warning: `syz.4.385' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 286.867393][ T5885] usb 1-1: USB disconnect, device number 39 [ 286.950811][ T6612] cgroup: fork rejected by pids controller in /syz6 [ 287.531358][ T9] usb 4-1: USB disconnect, device number 43 [ 287.623270][ T7889] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.718730][ T5839] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 287.845520][ T7889] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.869284][ T8192] program syz.0.391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.930939][ T5839] usb 8-1: Using ep0 maxpacket: 8 [ 287.941822][ T5839] usb 8-1: unable to get BOS descriptor or descriptor too short [ 287.967994][ T5839] usb 8-1: config 129 has an invalid interface number: 234 but max is 0 [ 287.980881][ T5839] usb 8-1: config 129 has no interface number 0 [ 287.997457][ T5839] usb 8-1: config 129 interface 234 altsetting 135 has an endpoint descriptor with address 0x57, changing to 0x7 [ 288.032971][ T5839] usb 8-1: config 129 interface 234 altsetting 135 bulk endpoint 0x7 has invalid maxpacket 16 [ 288.082720][ T7889] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.084189][ T5839] usb 8-1: config 129 interface 234 altsetting 135 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 288.167183][ T5839] usb 8-1: config 129 interface 234 has no altsetting 0 [ 288.192967][ T5839] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=73.05 [ 288.212806][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.240949][ T5839] usb 8-1: Product: syz [ 288.250216][ T5839] usb 8-1: Manufacturer: syz [ 288.274659][ T5839] usb 8-1: SerialNumber: syz [ 288.311155][ T8185] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 288.324832][ T7889] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.525959][ T5839] kvaser_usb 8-1:129.234: error -ENODEV: Cannot get usb endpoint(s) [ 288.582618][ T5839] usb 8-1: USB disconnect, device number 14 [ 288.630773][ T975] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 288.650040][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.672889][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.682935][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.700754][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.713671][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.723550][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.777722][ T7889] bridge_slave_1: left allmulticast mode [ 288.804319][ T7889] bridge_slave_1: left promiscuous mode [ 288.810270][ T7889] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.821015][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 288.832517][ T975] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 288.849655][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.865846][ T975] usb 1-1: Product: syz [ 288.870274][ T975] usb 1-1: Manufacturer: syz [ 288.875079][ T975] usb 1-1: SerialNumber: syz [ 288.882751][ T975] usb 1-1: config 0 descriptor?? [ 288.893452][ T7889] bridge_slave_0: left allmulticast mode [ 288.899537][ T7889] bridge_slave_0: left promiscuous mode [ 288.906743][ T7889] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.913321][ T8203] fuse: Unknown parameter 'no' [ 289.109356][ T975] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 289.432109][ T8213] syz.3.398 uses obsolete (PF_INET,SOCK_PACKET) [ 289.481676][ T5839] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 289.669505][ T5839] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 289.678425][ T5839] usb 8-1: config 0 has no interface number 0 [ 289.685930][ T5839] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 289.698435][ T5839] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 289.711480][ T5839] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 289.730719][ T5839] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 289.749399][ T5839] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 289.759797][ T5839] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.794130][ T5839] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 289.810761][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.821685][ T5839] usb 8-1: Product: syz [ 289.825998][ T5839] usb 8-1: Manufacturer: syz [ 289.839614][ T5839] usb 8-1: SerialNumber: syz [ 289.855478][ T5839] usb 8-1: config 0 descriptor?? [ 289.867942][ T8209] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 289.876334][ T7889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.896294][ T7889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.914043][ T7889] bond0 (unregistering): Released all slaves [ 290.104908][ T5839] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 290.319830][ T5839] usb 8-1: USB disconnect, device number 15 [ 290.328492][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.369729][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.455451][ T975] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 290.472758][ T975] usb 1-1: USB disconnect, device number 40 [ 290.814539][ T7889] hsr_slave_0: left promiscuous mode [ 290.821098][ T5846] Bluetooth: hci1: command tx timeout [ 290.828617][ T7889] hsr_slave_1: left promiscuous mode [ 290.839010][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.883674][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.946257][ T7889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.975910][ T7889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.099422][ T7889] veth1_macvtap: left promiscuous mode [ 291.118989][ T7889] veth0_macvtap: left promiscuous mode [ 291.131414][ T7889] veth1_vlan: left promiscuous mode [ 291.138420][ T7889] veth0_vlan: left promiscuous mode [ 291.669884][ T8276] xt_hashlimit: size too large, truncated to 1048576 [ 291.900989][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 292.061271][ T9] usb 8-1: device descriptor read/64, error -71 [ 292.270195][ T7889] team0 (unregistering): Port device team_slave_1 removed [ 292.302713][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 292.338989][ T7889] team0 (unregistering): Port device team_slave_0 removed [ 292.444748][ T9] usb 8-1: device descriptor read/64, error -71 [ 292.566067][ T9] usb usb8-port1: attempt power cycle [ 292.900017][ T8204] chnl_net:caif_netlink_parms(): no params data found [ 292.915953][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 292.923842][ T5846] Bluetooth: hci1: command tx timeout [ 292.948520][ T9] usb 8-1: device descriptor read/8, error -71 [ 293.121335][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.412'. [ 293.130587][ T8290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 293.190981][ T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 293.211458][ T9] usb 8-1: device descriptor read/8, error -71 [ 293.321098][ T9] usb usb8-port1: unable to enumerate USB device [ 293.561532][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.568729][ T8204] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.610249][ T8204] bridge_slave_0: entered allmulticast mode [ 293.632276][ T8204] bridge_slave_0: entered promiscuous mode [ 293.681027][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.702235][ T8204] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.752811][ T8204] bridge_slave_1: entered allmulticast mode [ 293.760046][ T8204] bridge_slave_1: entered promiscuous mode [ 293.834695][ T7889] IPVS: stop unused estimator thread 0... [ 293.887416][ T8204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.932815][ T8204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.030297][ T8204] team0: Port device team_slave_0 added [ 294.056361][ T8204] team0: Port device team_slave_1 added [ 294.193335][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.207196][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.271895][ T8204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.348788][ T8204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.373207][ T8204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.415412][ T8204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.558660][ T8204] hsr_slave_0: entered promiscuous mode [ 294.598982][ T8204] hsr_slave_1: entered promiscuous mode [ 294.613413][ T8204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.630882][ T8204] Cannot create hsr debugfs directory [ 294.649921][ T8328] netlink: 72 bytes leftover after parsing attributes in process `syz.3.418'. [ 294.691447][ T8325] netlink: 'syz.0.417': attribute type 1 has an invalid length. [ 294.917315][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 294.982909][ T5846] Bluetooth: hci1: command tx timeout [ 295.106823][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.122538][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.135531][ T9] usb 4-1: can't read configurations, error -61 [ 295.234629][ T8347] ================================================================== [ 295.242766][ T8347] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.251404][ T8347] Write of size 1440 at addr ffffc9000c181b40 by task vivid-000-vid-c/8347 [ 295.260009][ T8347] [ 295.262356][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: vivid-000-vid-c Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 295.262378][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 295.262393][ T8347] Call Trace: [ 295.262405][ T8347] [ 295.262413][ T8347] dump_stack_lvl+0x241/0x360 [ 295.262440][ T8347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.262460][ T8347] ? __pfx__printk+0x10/0x10 [ 295.262477][ T8347] ? _printk+0xd5/0x120 [ 295.262498][ T8347] print_report+0x169/0x550 [ 295.262522][ T8347] ? __virt_addr_valid+0xbd/0x530 [ 295.262541][ T8347] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.262560][ T8347] kasan_report+0x143/0x180 [ 295.262582][ T8347] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.262604][ T8347] kasan_check_range+0x282/0x290 [ 295.262625][ T8347] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.262644][ T8347] __asan_memcpy+0x40/0x70 [ 295.262662][ T8347] tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.262706][ T8347] vivid_thread_vid_cap_tick+0xfbc/0x6090 [ 295.262754][ T8347] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 295.262782][ T8347] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.262801][ T8347] ? lockdep_hardirqs_on+0x99/0x150 [ 295.262826][ T8347] vivid_thread_vid_cap+0x8aa/0xf30 [ 295.262855][ T8347] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 295.262875][ T8347] kthread+0x7a9/0x920 [ 295.262902][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.262929][ T8347] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 295.262949][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.262975][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.263003][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.263028][ T8347] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.263046][ T8347] ? lockdep_hardirqs_on+0x99/0x150 [ 295.263066][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.263092][ T8347] ret_from_fork+0x4b/0x80 [ 295.263116][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.263143][ T8347] ret_from_fork_asm+0x1a/0x30 [ 295.263171][ T8347] [ 295.263177][ T8347] [ 295.308439][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 295.309778][ T8347] The buggy address belongs to the virtual mapping at [ 295.309778][ T8347] [ffffc9000c181000, ffffc9000c183000) created by: [ 295.309778][ T8347] vb2_vmalloc_alloc+0xf2/0x340 [ 295.478088][ T8347] [ 295.480417][ T8347] The buggy address belongs to the physical page: [ 295.486967][ T8347] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7 pfn:0x350ab [ 295.496124][ T8347] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 295.503279][ T8347] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 295.511975][ T8347] raw: 0000000000000007 0000000000000000 00000001ffffffff 0000000000000000 [ 295.520561][ T8347] page dumped because: kasan: bad access detected [ 295.526985][ T8347] page_owner tracks the page as allocated [ 295.532701][ T8347] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 8346, tgid 8343 (syz.0.422), ts 295163161863, free_ts 295143173887 [ 295.551831][ T8347] post_alloc_hook+0x1f4/0x240 [ 295.556787][ T8347] get_page_from_freelist+0x365c/0x37a0 [ 295.562341][ T8347] __alloc_frozen_pages_noprof+0x292/0x710 [ 295.568165][ T8347] alloc_pages_bulk_noprof+0x847/0xae0 [ 295.573629][ T8347] alloc_pages_bulk_mempolicy_noprof+0x8db/0x1640 [ 295.580054][ T8347] __vmalloc_node_range_noprof+0x6ed/0x1380 [ 295.586138][ T8347] vmalloc_user_noprof+0x74/0x80 [ 295.591302][ T8347] vb2_vmalloc_alloc+0xf2/0x340 [ 295.596285][ T8347] __vb2_queue_alloc+0xa0b/0x16f0 [ 295.601325][ T8347] vb2_core_reqbufs+0xd2e/0x17c0 [ 295.606269][ T8347] __vb2_init_fileio+0x319/0xf90 [ 295.611213][ T8347] vb2_core_poll+0x45a/0x7a0 [ 295.615821][ T8347] vb2_fop_poll+0x170/0x360 [ 295.620328][ T8347] v4l2_poll+0x140/0x2b0 [ 295.624584][ T8347] __io_read+0x375/0x1280 [ 295.628917][ T8347] io_read+0x1e/0x60 [ 295.632834][ T8347] page last free pid 16 tgid 16 stack trace: [ 295.638813][ T8347] free_frozen_pages+0xe0d/0x10e0 [ 295.643885][ T8347] __tlb_remove_table+0x33c/0x420 [ 295.648920][ T8347] tlb_remove_table_rcu+0x76/0xf0 [ 295.654036][ T8347] rcu_core+0xaaa/0x17a0 [ 295.658290][ T8347] handle_softirqs+0x2d4/0x9b0 [ 295.663081][ T8347] run_ksoftirqd+0xca/0x130 [ 295.668028][ T8347] smpboot_thread_fn+0x544/0xa30 [ 295.672979][ T8347] kthread+0x7a9/0x920 [ 295.677148][ T8347] ret_from_fork+0x4b/0x80 [ 295.681662][ T8347] ret_from_fork_asm+0x1a/0x30 [ 295.686443][ T8347] [ 295.688774][ T8347] Memory state around the buggy address: [ 295.694590][ T8347] ffffc9000c181f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 295.702751][ T8347] ffffc9000c181f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 295.710824][ T8347] >ffffc9000c182000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.718910][ T8347] ^ [ 295.723007][ T8347] ffffc9000c182080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.731257][ T8347] ffffc9000c182100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 295.739344][ T8347] ================================================================== [ 295.747496][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.872471][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 295.887210][ T8353] netlink: 60 bytes leftover after parsing attributes in process `syz.7.423'. [ 295.888172][ T8347] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 295.888194][ T8347] CPU: 1 UID: 0 PID: 8347 Comm: vivid-000-vid-c Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 295.888225][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 295.888240][ T8347] Call Trace: [ 295.888251][ T8347] [ 295.888260][ T8347] dump_stack_lvl+0x241/0x360 [ 295.888292][ T8347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.888317][ T8347] ? __pfx__printk+0x10/0x10 [ 295.888337][ T8347] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.888376][ T8347] ? vscnprintf+0x5d/0x90 [ 295.888398][ T8347] panic+0x349/0x880 [ 295.888420][ T8347] ? check_panic_on_warn+0x21/0xb0 [ 295.888455][ T8347] ? __pfx_panic+0x10/0x10 [ 295.888479][ T8347] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 295.888504][ T8347] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.888541][ T8347] check_panic_on_warn+0x86/0xb0 [ 295.888574][ T8347] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.888597][ T8347] end_report+0x77/0x160 [ 295.888625][ T8347] kasan_report+0x154/0x180 [ 295.888653][ T8347] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.888679][ T8347] kasan_check_range+0x282/0x290 [ 295.888707][ T8347] ? tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.888730][ T8347] __asan_memcpy+0x40/0x70 [ 295.888753][ T8347] tpg_fill_plane_buffer+0x1ad6/0x5ca0 [ 295.888808][ T8347] vivid_thread_vid_cap_tick+0xfbc/0x6090 [ 295.888861][ T8347] ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10 [ 295.888896][ T8347] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.888919][ T8347] ? lockdep_hardirqs_on+0x99/0x150 [ 295.888948][ T8347] vivid_thread_vid_cap+0x8aa/0xf30 [ 295.888985][ T8347] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 295.889011][ T8347] kthread+0x7a9/0x920 [ 295.889043][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.889077][ T8347] ? __pfx_vivid_thread_vid_cap+0x10/0x10 [ 295.889102][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.889134][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.889169][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.889200][ T8347] ? _raw_spin_unlock_irq+0x23/0x50 [ 295.889223][ T8347] ? lockdep_hardirqs_on+0x99/0x150 [ 295.889249][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.889282][ T8347] ret_from_fork+0x4b/0x80 [ 295.889312][ T8347] ? __pfx_kthread+0x10/0x10 [ 295.889346][ T8347] ret_from_fork_asm+0x1a/0x30 [ 295.889381][ T8347] [ 295.896414][ T8347] Kernel Offset: disabled