last executing test programs: 10m23.321727153s ago: executing program 4 (id=2044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000040002"], 0xa4}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) 10m22.965381878s ago: executing program 4 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x5, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[], 0xfdef) 10m19.039577169s ago: executing program 4 (id=2062): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcf1fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d074af6e8dafe092302f5fb9887db5fdb899b64442c11a5c77671df9188f524169816d192902fb5"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 10m18.722193447s ago: executing program 4 (id=2067): r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x410}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000003c0)={[{@nodelalloc}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@test_dummy_encryption}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@minixdf}, {@mblk_io_submit}, {@delalloc}, {@dax_never}, {@acl}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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") r5 = gettid() write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0xffffffffffffffda, 0x0, {{0xe46, 0x9, 0x3, r5}}}, 0x28) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x40842300, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) 10m15.043714741s ago: executing program 4 (id=2091): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x8, 0x4, 0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f0000000340)=[{r2, 0x100}, {r1, 0x112}, {0xffffffffffffffff, 0x2000}, {r0, 0x80}], 0x4, 0x0, &(0x7f00000003c0)={[0xf]}, 0x8) 10m13.393281115s ago: executing program 4 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x2000c810) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 10m12.126161353s ago: executing program 32 (id=2099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, 0x0, 0x2000c810) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 8.622356595s ago: executing program 1 (id=5295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002f40)=@newqdisc={0x844, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4e, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1004, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x10, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x5, 0x33c7, 0xb7, 0x1000, 0x7, 0x0, 0x4, 0x7, 0x6, 0x86, 0x91, 0xd129, 0x401, 0x9, 0x4, 0x3, 0x1, 0x5, 0x798, 0x9, 0x0, 0x1, 0x0, 0x2, 0xb, 0x1, 0x2, 0x0, 0x2, 0x7, 0x4, 0x3, 0x6, 0x5, 0xd, 0x7, 0x1ff, 0xd3, 0xc, 0x67, 0x80000000, 0x85, 0x4, 0x5, 0x7fff, 0x0, 0x3ff, 0x6, 0x8, 0xa5f, 0x8e0a, 0x0, 0x7, 0x6, 0x5, 0x3, 0x4, 0x8, 0x7, 0x3, 0x81, 0x2, 0x2, 0x5, 0x4, 0x3, 0xda42, 0x955c, 0xfffffffd, 0x2, 0x3ff, 0x8, 0xf94e, 0x6, 0xfff, 0x6, 0x91, 0x2, 0x5, 0x879, 0x7fff, 0x76, 0xfbcc, 0x4, 0x25, 0xf, 0x6, 0x2, 0x3, 0x9, 0x7, 0x8, 0xfffffffe, 0x7f, 0x6, 0xfffffffa, 0xc, 0x3, 0x5, 0x2, 0x1, 0x4, 0x3, 0xffffffef, 0x80, 0xa, 0x7fff, 0x7, 0xd2, 0xffffff00, 0xd, 0x80000000, 0x101, 0x9, 0xff, 0x3, 0x1, 0x10001, 0x100, 0x6e, 0x1a, 0x35c2cf65, 0x9a, 0x40, 0x276, 0x7ff, 0x2000000, 0x5, 0x6a71, 0x8001, 0x3, 0x7ff, 0xed57, 0x10, 0x3, 0x9, 0x0, 0x2, 0x7fffffff, 0x4, 0x9, 0x7, 0xf, 0x0, 0xaa4, 0x5d, 0x0, 0x3, 0xffff8005, 0x40, 0x49, 0x3, 0x7, 0x5, 0x7fffffff, 0x5, 0x3, 0x3, 0x0, 0x1, 0x1aca, 0xa, 0x7f, 0xfffffff0, 0x25, 0xa, 0x4, 0x3ff, 0x2, 0x10001, 0x1, 0x3, 0x9364, 0xc0f, 0x6, 0x8, 0xa6, 0x6, 0x3ff, 0x5137d5a8, 0x100, 0x101, 0x4, 0x7, 0x800, 0x4, 0x0, 0x6, 0x1ff, 0x4, 0x0, 0x6, 0x8d1, 0x8, 0x33, 0x2, 0x7, 0x5, 0x7, 0x7, 0x9, 0x7ff, 0x7ff, 0x7ff, 0xa, 0x3, 0x80, 0x40, 0x10, 0xc1a, 0x0, 0x80, 0xf, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x5, 0x9, 0x80000001, 0x0, 0x55b16c35, 0x1ff, 0x4, 0x10000, 0x8, 0x5d, 0xb, 0x7c3, 0x2, 0x1000, 0x4, 0x0, 0x0, 0x13, 0x1, 0x7, 0x9, 0x2, 0x6, 0x800, 0x7, 0xc, 0x2, 0xf4, 0x80000001, 0x0, 0x9, 0x4, 0x5, 0xe0000000, 0x9, 0x5, 0x80000000]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x4e096f4882b4aac6}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 7.810149463s ago: executing program 1 (id=5301): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000400)={0x0, 0x30b5, 0x400, 0x2, 0x154}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, 0x0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r5}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f41, 0x200, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffe97d, 0x40000, 0x10001, 0x149}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x0, 0x0, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbc}}], 0x1, &(0x7f0000000340)={0x2e, 0x2b, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0x6a, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r6 = syz_open_dev$sg(0x0, 0xa, 0x28102) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(r7, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f00000002c0)={0x6, {0x0, 0x1, 0x4, 0x3, 0xffffffffffffffff}}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000640)={0x8, 0x2, 0x3, 0xca00}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 7.670592331s ago: executing program 6 (id=5302): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_usb_connect(0x5, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000024917720042322023f7701"], 0x0) 7.53169302s ago: executing program 3 (id=5303): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201100100000008790011000000000000010902"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) 6.937261074s ago: executing program 1 (id=5304): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x40, 0xc00, 0x0, 0x1, 0x0, 0x55, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x2, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 6.823338393s ago: executing program 1 (id=5305): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x604000) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407e04"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000040)=0x18) 6.478121236s ago: executing program 2 (id=5307): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 6.209739603s ago: executing program 5 (id=5310): syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xa8a40, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf25", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1e0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xa00, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r5, 0x1c, 0x900}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) 6.135404883s ago: executing program 5 (id=5311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x0, &(0x7f00000009c0)) io_pgetevents(r1, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x0, 0x0) shutdown(r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 4.929721208s ago: executing program 5 (id=5315): socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040000) 4.831470507s ago: executing program 5 (id=5316): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 4.542146713s ago: executing program 6 (id=5317): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x0) 4.317711895s ago: executing program 3 (id=5318): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead35a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000000000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc9634782", 0x149}], 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x6, 0x40000183, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 3.765795085s ago: executing program 0 (id=5319): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead35a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000000000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc9634782", 0x149}], 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x6, 0x40000183, 0x0, r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 3.728997934s ago: executing program 6 (id=5320): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000002020"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "ecaa25", 0x74, 0x29, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "f77f527c45266c967dbf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29397810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd1"}}}}}, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 3.641947319s ago: executing program 1 (id=5321): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x80000006) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x20000402, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x3e, 0x6, "06abf4e701c1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x48068, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x3, 0x9fd, 0x84, 0x105}, 0x50) read$eventfd(0xffffffffffffffff, &(0x7f0000000340), 0x8) readv(r1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r5, 0xc0086442, &(0x7f0000000980)) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d28f75d96a2566e506bce1e8", 0x14}], 0x1}, 0x0) 3.366696533s ago: executing program 6 (id=5322): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000180)={0x2, 0x2000}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x8, 0x0, &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 3.316230738s ago: executing program 2 (id=5323): syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xa8a40, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf25", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1e0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xa00, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r5, 0x1c, 0x900}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) 3.091060508s ago: executing program 2 (id=5324): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff000705810200020007050202000200"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000140)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x10000) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/15) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0xb9, 0x1, {0x22, 0x7b1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x9, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x3f, 0x6}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000240)={0xa, 0x6, 0xdbe338692840613e, 0x5, 0x7, 0x0, 0xf7}, 0x23, &(0x7f0000000280)={0x5, 0xf, 0x23, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x6, 0x1e000, 0x7, [0xf0]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x52, 0x26, 0xc, 0x7f, 0x8}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x42d}}]}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002212000000"], 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, &(0x7f0000000080)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x148, &(0x7f0000000980)={[{}, {0x20, 0x4e00, "e25343e21ff6d8c36e78c811627bc474855cafc6d4fa75e27d119406a485fa22"}, {0xc2, 0x4e00, "2d3b52ff913982e85609ae8d7587e642963f98682bd49a3c4220710a5a34d829b5e42291c876480e3113692165187293ee1c9ee71c15461ba08f2c26f91acab20c5514c6d9be7879f56530264eefabb825a7e35fa384a675eabd43702fbc8164f3d50e7824ae62f43e6741027c36448e74d02d8ec777df8961b557ba5e3868fa48336b2171652644d89567f4c5ae428e2bfaee2175080eb86de388b38742e2dcd1876b7cd2f74ab4172cd01884413dbe16996459e38f1099f88d604f4a2bb28dd3e2"}, {0x42, 0x4e00, "a9db9fbbf5a2a250751ee6902a7bb038d38a8ac193b32e57ede8c9987c591edcd9dc35548f892c7f330712576ff92ea71a6b06fd5bcc43fe8d1731f72512682f69be"}, {0x6, 0x4e00, "4454f6fe52ca"}, {}]}) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000000c0)={0x2, 0x2, 0x0, 0xd, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) syz_usb_ep_write(r0, 0x81, 0x17, &(0x7f0000000220)="830d00000000000000000000ff06fad50333010107ec00") 3.040136201s ago: executing program 3 (id=5325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29a}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffff4a2, 0x4, 0xa, 0x7}, 0xe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.983771995s ago: executing program 6 (id=5326): r0 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x4040) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.67416332s ago: executing program 3 (id=5327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_submit(r1, 0x0, &(0x7f00000009c0)) io_pgetevents(r1, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f00000000c0)=[0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x880, 0x0, 0x0) shutdown(r0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 2.322320544s ago: executing program 0 (id=5328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002f40)=@newqdisc={0x844, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x818, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4e, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1004, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x10, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x5, 0x33c7, 0xb7, 0x1000, 0x7, 0x0, 0x4, 0x7, 0x6, 0x86, 0x91, 0xd129, 0x401, 0x9, 0x4, 0x3, 0x1, 0x5, 0x798, 0x9, 0x0, 0x1, 0x0, 0x2, 0xb, 0x1, 0x2, 0x0, 0x2, 0x7, 0x4, 0x3, 0x6, 0x5, 0xd, 0x7, 0x1ff, 0xd3, 0xc, 0x67, 0x80000000, 0x85, 0x4, 0x5, 0x7fff, 0x0, 0x3ff, 0x6, 0x8, 0xa5f, 0x8e0a, 0x0, 0x7, 0x6, 0x5, 0x3, 0x4, 0x8, 0x7, 0x3, 0x81, 0x2, 0x2, 0x5, 0x4, 0x3, 0xda42, 0x955c, 0xfffffffd, 0x2, 0x3ff, 0x8, 0xf94e, 0x6, 0xfff, 0x6, 0x91, 0x2, 0x5, 0x879, 0x7fff, 0x76, 0xfbcc, 0x4, 0x25, 0xf, 0x6, 0x2, 0x3, 0x9, 0x7, 0x8, 0xfffffffe, 0x7f, 0x6, 0xfffffffa, 0xc, 0x3, 0x5, 0x2, 0x1, 0x4, 0x3, 0xffffffef, 0x80, 0xa, 0x7fff, 0x7, 0xd2, 0xffffff00, 0xd, 0x80000000, 0x101, 0x9, 0xff, 0x3, 0x1, 0x10001, 0x100, 0x6e, 0x1a, 0x35c2cf65, 0x9a, 0x40, 0x276, 0x7ff, 0x2000000, 0x5, 0x6a71, 0x8001, 0x3, 0x7ff, 0xed57, 0x10, 0x3, 0x9, 0x0, 0x2, 0x7fffffff, 0x4, 0x9, 0x7, 0xf, 0x0, 0xaa4, 0x5d, 0x0, 0x3, 0xffff8005, 0x40, 0x49, 0x3, 0x7, 0x5, 0x7fffffff, 0x5, 0x3, 0x3, 0x0, 0x1, 0x1aca, 0xa, 0x7f, 0xfffffff0, 0x25, 0xa, 0x4, 0x3ff, 0x2, 0x10001, 0x1, 0x3, 0x9364, 0xc0f, 0x6, 0x8, 0xa6, 0x6, 0x3ff, 0x5137d5a8, 0x100, 0x101, 0x4, 0x7, 0x800, 0x4, 0x0, 0x6, 0x1ff, 0x4, 0x0, 0x6, 0x8d1, 0x8, 0x33, 0x2, 0x7, 0x5, 0x7, 0x7, 0x9, 0x7ff, 0x7ff, 0x7ff, 0xa, 0x3, 0x80, 0x40, 0x10, 0xc1a, 0x0, 0x80, 0xf, 0x5, 0x5, 0x7ff, 0x9, 0x6, 0x5, 0x9, 0x80000001, 0x0, 0x55b16c35, 0x1ff, 0x4, 0x10000, 0x8, 0x5d, 0xb, 0x7c3, 0x2, 0x1000, 0x4, 0x0, 0x0, 0x13, 0x1, 0x7, 0x9, 0x2, 0x6, 0x800, 0x7, 0xc, 0x2, 0xf4, 0x80000001, 0x0, 0x9, 0x4, 0x5, 0xe0000000, 0x9, 0x5, 0x80000000]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x4e096f4882b4aac6}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2.293815944s ago: executing program 6 (id=5329): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4c, &(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES32=r0, @ANYRES32=r0], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf6}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_disconnect(r0) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xf9, 0x2, 0x9, 0xff, 0x5}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x812}}, {0x33, &(0x7f00000005c0)=ANY=[@ANYBLOB="3303d24500b80b4cbe2e7a975457bca622c852b3b54ddd0f64983c6e8276b47c3ae49128821f34fcf3b92d3a6c3343b6263db9d3b946defca727b8929437"]}, {0x0, 0x0}, {0x4f, &(0x7f0000000280)=@string={0x4f, 0x3, "d6bd65f07cd0a7adce08e28f540bb01147893d19e12c5555929d73785fdddecfe38b3a4f532b5fd685dea6b3df9112fc5fb650d36d0bef6e0ac3575757740077d8667aa8941cbd7bb57a757f09"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x80c}}, {0xd3, &(0x7f0000000340)=@string={0xd3, 0x3, "5d32b021d89d934acff3c513373a4ef9e28f050d3a9f1bf4c73ac4dea6e2e6757ca2027eb34464e9e0c6ea0daa7c433ada26ab39af68eeb092a019bd7b60cc35e8b0a81ee8124cfae6df50b4507c0b39ba8708b7245e18fdbb6f325b99d1d0e523193e86030873bc79c3d3ec25ed697e376771bc3297ac45936551a25c09836ead3f11a5e727ece484c478cc8b8c2de8827a92f0bf6c1be343d589257878b7ec091ff7ff176405769ed416ae9f7f1e9dad0490e90f4064b120950ef5ada759606d6d312d2ce70cdd6f67f35fc5d0646261"}}, {0xc1, &(0x7f0000000440)=@string={0xc1, 0x3, "c663b4d617d6e6efd66c1b2e39c86db2f3921476a3a03ffac76c4e9904ae7550d11b6588f913c6320a96df64a5353dc5799de1811a2d0a3329497dbdbf6464c4531e0dd1d85836cdd45b163be6f24a4b20959d0739bd321ff75e6c5804c03b10710c91e9724482ec31e39f6703368f632c6d97220e6628c7bbb478e6c8f20ca79cc4e45c321227b1aa82134b7f924ba5e6c21caddb319b162b29edd68a126e05cd23f5b60f98a61afb9cd906308692a0d53fc7080f5ab59484d4fcc201c082"}}]}) 2.019917811s ago: executing program 1 (id=5330): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000000), 0x0, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 1.889352175s ago: executing program 0 (id=5331): syz_emit_ethernet(0x56, &(0x7f00000007c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x2, 0x3e, 0x34, 0x66, 0x0, 0x4, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xd, 0x3, 0x9, [{@multicast2, 0x4}, {@broadcast, 0x2}, {@rand_addr=0x64010102, 0x5}]}, @generic={0x83, 0x2}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x5, 0x0, 0x5dc}}}}}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r4, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r5, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r6, r11, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefffe, 0x800}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x40, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) socket(0x2, 0x80805, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r12, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) write$dsp(r2, &(0x7f0000000000)="20d3ff89946ae3268c918942064fa3708f55f65134c8477ce10c634aaa10a9cc09d6bf14af39641ad961d2797abad1ee8a45a3c558d9ce7024fa1fd6873dafeb216f02541a0e59fa59f3c84ce061dcb4401147e2d1c056838311fcab4d907470a24f75f31278140528c924936e1ba9662cd1935dd4406d0e490ba63cb9b87657cd1ec94fb324a4844f9c206f1b27ca067f9342fdef02b8d0651ac471bf63845ab6d4e4c461c2fb5cee2ede0ae28ee248ef67cef639e9cd079cca05b1774125f2", 0xc0) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x5, 0x1, 0x8, 0xa, 0x0, 0x70bd27, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0x0, @in={0x2, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0xfc, 0xe0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000500)="9782cb6183baff140baafd525288a1b362491b565d1a85c52048190229dd61ae237f476c76c1c98c7bbee445de2bd986aac68ab1062345fb4d8374b05beb3608592e198d72962bed0c5c796163b3f48c5bded4e7a9e54a676e0ebac7a9aeaf4afa3a0fd8426dff64a528c0fd55748b7e2b11a433397d3f8f72bbe725986a25c567cb7d38c17ada8695082fbfaaa535a760be67359459f99f6fd8565129ec", 0xff6f, 0xfffffffffffffffe) fcntl$notify(r0, 0x402, 0x8000003d) 1.71526556s ago: executing program 3 (id=5332): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e000100"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050020010000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x3ff}, 0x80, 0x0}, 0x0) 1.171568464s ago: executing program 5 (id=5333): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00', 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x40, 0xc00, 0x0, 0x1, 0x0, 0x55, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0xbdd6, 0x400, 0x10000, 0x5, 0x9d1f, 0x2, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 1.005009186s ago: executing program 2 (id=5334): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000002020"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0xc1, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @generic={0x4, 0x6, "ecaa25", 0x87, 0x29, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "f77f527c45266c967dbf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29397810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd12e1d6b67e0dc5eb7d3fa2885909cdb77c8e0c0"}}}}}, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 990.406959ms ago: executing program 5 (id=5335): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 686.648188ms ago: executing program 0 (id=5336): syz_ublk_setup_io_uring(0x1e, &(0x7f0000000040)={0x0, 0x2, 0x1, 0xfffffffc, 0x3ba}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xa8a40, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x44004) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf25", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1e0016005e"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0xa00, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x12, &(0x7f00000007c0)=0x40000401, 0x4) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r5, 0x1c, 0x900}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)) dup(0xffffffffffffffff) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) 650.867545ms ago: executing program 3 (id=5337): syz_usb_connect(0x0, 0x3f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="9daf5194d6ff2fb71e455a389b8ead15aebc12ea8ead35a3b45cb2f2603e607dfe3f1228fb0b1cd1968a9bcd1badfa49059ce704fa1228343bfe3f3600c5000000000000d09c5c82111202b07c1c755457049ad0ebcd70cbaa678adaa17831266adfc9fa04f5093b8c9fd353b714b22e5454084aa316bd17dbadd5a49b0dd3b073051bb901212a764a56d76d2ff9747d5cad8712e20378bbbcca075b5564a0b50df37294931900f48618135effbb4f2392455f6451fd556b02e166b774d78b8f419eebd9998b8d428dc4b2fcb57503d0eeba1a3280f447ccf7812d1895b6479c7059fe50fff0e5c7dcf0768191e9bcb9c2b1e58427a93a7396d404a4116c8cd5e00456979d2dce4347f00189da68317adf15ea9e728f1fb93db495bd754b84cfc923a1428c97643f05cf00000000000000000000000000005e2cd2cd53a53fab4d50415b7fc9634782", 0x149}], 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x6, 0x40000183, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 479.347427ms ago: executing program 2 (id=5338): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000180)={0x2, 0x2000}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x8, 0x0, &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 471.097856ms ago: executing program 0 (id=5339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x8c, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x5c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1a29a}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xfffff4a2, 0x4, 0xa, 0x7}, 0xe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 129.384813ms ago: executing program 2 (id=5340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="6e2d3c94288948959426d1de787672fa8d3705a324cefea880e8c0bd80226c9eb3d90a4e08c79410f56616b3a74447ce08834e294e4f434f3e4aea8add09078987227848f2f3afb37adb6af1bad9389c927333df0d9b7fb8ca914cbfeb6ebb21e2495be7c3d2c697c0c0ac2266181511a87dddd889f912df0822095bfea15a483a65d0b80e1a3f81a8748a6900683b154513e649542d8ffec2c058b20b55688dd5f01933a90fb1dcb5c990028e2e9b17d234a5470fe03290ff9c6b7f4333654564be0b5f074feee291dc5daf806c811fe508b19319cccaf2b0236d0c941b20ae95e047af56935bd8fc5f5101287a12623cee4de00cf3af4942a2fbadfb76e4f2cdb1089af1d79ee99a61b8003112c2d43ba025c6e4631d2a186fdf9c64ab60b8064b051343c313a28355ba59bb6ea25d668899af0d5bc16c40ce7ee8cd", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x207, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x6, 0x40000183, 0x0, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x6da0, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=5341): r0 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x4040) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0664] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1084.823938][T20665] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1084.884169][T20670] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1084.994517][ T5344] usb 4-1: USB disconnect, device number 89 [ 1085.024039][ T5344] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1085.151738][ T5344] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1085.152478][ T5344] visor 4-1:1.0: device disconnected [ 1085.350005][T20682] loop5: detected capacity change from 0 to 512 [ 1085.359351][T20682] EXT4-fs: Ignoring removed i_version option [ 1085.402753][T20683] syzkaller0: entered promiscuous mode [ 1085.408951][T20683] syzkaller0: entered allmulticast mode [ 1085.597919][T20682] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1085.627813][T20682] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4695: invalid indirect mapped block 2683928664 (level 1) [ 1085.627961][T20682] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1085.642672][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1085.642704][ C1] EXT4-fs (loop5): initial error at time 1788497155: ext4_free_branches:1023: inode 13 [ 1085.642741][ C1] EXT4-fs (loop5): last error at time 1788497155: ext4_free_branches:1023: inode 13 [ 1085.726225][T20682] EXT4-fs (loop5): 1 truncate cleaned up [ 1085.747896][T20682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.090399][ T31] audit: type=1800 audit(1788497157.770:152): pid=20682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4695" name="file0" dev="loop5" ino=13 res=0 errno=0 [ 1088.208571][T20686] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1088.234712][T20686] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1088.365627][T20693] netlink: 'syz.6.4700': attribute type 1 has an invalid length. [ 1088.437698][T20696] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4700'. [ 1088.463610][T20693] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1088.518449][T20693] bridge2: entered promiscuous mode [ 1088.567568][T20703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.574881][T20693] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1088.587321][T20703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.600916][ T5781] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1088.763480][ T5781] usb 2-1: Using ep0 maxpacket: 8 [ 1088.767172][ T5781] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1088.768332][ T5781] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1088.768385][ T5781] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1088.768417][ T5781] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1088.768447][ T5781] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1088.768479][ T5781] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1088.768508][ T5781] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1088.768556][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.857163][T20707] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4707'. [ 1088.881498][T20709] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1088.893992][T20709] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1089.027772][ T5781] usb 2-1: GET_CAPABILITIES returned 0 [ 1089.027841][ T5781] usbtmc 2-1:16.0: can't read capabilities [ 1089.074568][T20713] block nbd9: server does not support multiple connections per device. [ 1089.083608][T20713] block nbd9: shutting down sockets [ 1089.166115][T16841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.242306][ T5758] usb 2-1: USB disconnect, device number 84 [ 1089.416237][T20718] syzkaller0: entered promiscuous mode [ 1089.416294][T20718] syzkaller0: entered allmulticast mode [ 1089.571482][ T5344] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1089.637895][T20726] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1089.729882][ T5344] usb 6-1: Using ep0 maxpacket: 16 [ 1089.735726][ T5344] usb 6-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1089.750326][ T5344] usb 6-1: config 166 has an invalid interface number: 177 but max is 1 [ 1089.750381][ T5344] usb 6-1: config 166 has an invalid interface number: 34 but max is 1 [ 1089.750454][ T5344] usb 6-1: config 166 has no interface number 0 [ 1089.750484][ T5344] usb 6-1: config 166 has no interface number 1 [ 1089.750545][ T5344] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1089.750580][ T5344] usb 6-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1089.750627][ T5344] usb 6-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1089.750664][ T5344] usb 6-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1089.750701][ T5344] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1089.750740][ T5344] usb 6-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1089.750777][ T5344] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1089.750815][ T5344] usb 6-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1089.750848][ T5344] usb 6-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1089.750890][ T5344] usb 6-1: config 166 interface 177 has no altsetting 0 [ 1089.750921][ T5344] usb 6-1: config 166 interface 34 has no altsetting 0 [ 1089.930582][ T5344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.930644][ T5344] usb 6-1: Product: syz [ 1089.930686][ T5344] usb 6-1: Manufacturer: syz [ 1089.930713][ T5344] usb 6-1: SerialNumber: syz [ 1090.195620][T20736] loop0: detected capacity change from 0 to 512 [ 1090.203208][T20736] EXT4-fs: Ignoring removed i_version option [ 1090.411622][T20736] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1090.424702][T20736] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4715: invalid indirect mapped block 2683928664 (level 1) [ 1090.424802][T20736] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1090.441848][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1090.441880][ C1] EXT4-fs (loop0): initial error at time 1788497160: ext4_free_branches:1023: inode 13 [ 1090.441917][ C1] EXT4-fs (loop0): last error at time 1788497160: ext4_free_branches:1023: inode 13 [ 1090.447840][T20736] EXT4-fs (loop0): 1 truncate cleaned up [ 1090.461292][T20736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1092.040443][ T5344] ums-realtek 6-1:166.177: USB Mass Storage device detected [ 1093.364731][T20747] syzkaller0: entered promiscuous mode [ 1093.370703][T20747] syzkaller0: entered allmulticast mode [ 1093.464475][ T31] audit: type=1800 audit(1788497163.180:153): pid=20736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4715" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 1093.737811][ T5344] ums-realtek 6-1:166.34: USB Mass Storage device detected [ 1093.827460][ T5758] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1093.838913][ T5344] ums-realtek 6-1:166.34: probe with driver ums-realtek failed with error -5 [ 1093.853693][ T5344] uvcvideo 6-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1093.861376][ T5344] uvcvideo 6-1:166.34: No valid video chain found. [ 1093.880118][ T5344] usb 6-1: USB disconnect, device number 112 [ 1093.980600][ T5758] usb 3-1: Using ep0 maxpacket: 32 [ 1093.986952][ T5758] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1093.998240][ T5758] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1094.005763][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.017499][ T5758] usb 3-1: config 0 descriptor?? [ 1094.027139][ T5758] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1094.058450][ T5758] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1094.058842][ T5758] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1094.058921][ T5758] usb 3-1: media controller created [ 1094.096663][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1094.149972][ T122] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1094.211166][T20760] block nbd9: server does not support multiple connections per device. [ 1094.211549][T20760] block nbd9: shutting down sockets [ 1094.252917][ T5758] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1094.252973][ T5758] error writing reg: 0xff, val: 0x00 [ 1094.300974][ T122] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1094.317435][ T122] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.317518][ T122] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1094.317554][ T122] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1094.317592][ T122] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1094.317651][ T122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.365025][T20765] syzkaller0: entered promiscuous mode [ 1094.365053][T20765] syzkaller0: entered allmulticast mode [ 1094.391501][ T5758] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1094.481038][T20749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.483978][T20749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.485619][T20749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.494437][T20749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.501311][T20749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.517804][T20749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.544753][ T25] usb 3-1: USB disconnect, device number 109 [ 1094.719874][T15714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.928395][T20777] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1094.945203][T20777] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1095.046382][ T122] gud 2-1:1.0: Failed to add properties (error=-71) [ 1095.046445][ T122] gud 2-1:1.0: probe with driver gud failed with error -71 [ 1095.073773][ T25] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1095.121890][ T122] usb 2-1: USB disconnect, device number 85 [ 1095.265574][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 1095.266915][ T25] usb 3-1: config index 0 descriptor too short (expected 36, got 18) [ 1095.266968][ T25] usb 3-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1095.267001][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1095.267042][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.277748][ T25] usb 3-1: config 0 descriptor?? [ 1095.296705][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1095.820926][T20796] loop0: detected capacity change from 0 to 512 [ 1095.831801][T20796] EXT4-fs: Ignoring removed i_version option [ 1095.946964][T20796] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1095.968540][T20796] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4734: invalid indirect mapped block 2683928664 (level 1) [ 1095.968696][T20796] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1095.983409][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1095.983440][ C1] EXT4-fs (loop0): initial error at time 1788497165: ext4_free_branches:1023: inode 13 [ 1095.983476][ C1] EXT4-fs (loop0): last error at time 1788497165: ext4_free_branches:1023: inode 13 [ 1096.032042][T20796] EXT4-fs (loop0): 1 truncate cleaned up [ 1096.051908][T20796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.151211][T20798] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1097.166266][T20798] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1097.676025][ T122] usb 3-1: USB disconnect, device number 110 [ 1098.557107][T20803] syzkaller0: entered promiscuous mode [ 1098.563295][T20803] syzkaller0: entered allmulticast mode [ 1098.936947][ T31] audit: type=1800 audit(1788497168.650:154): pid=20796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4734" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 1099.510265][T20810] syzkaller0: entered promiscuous mode [ 1099.510321][T20810] syzkaller0: entered allmulticast mode [ 1099.570786][T20820] block nbd9: server does not support multiple connections per device. [ 1099.571392][T20820] block nbd9: shutting down sockets [ 1099.670057][T17498] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1100.025318][T17498] usb 2-1: Using ep0 maxpacket: 8 [ 1100.028021][T17498] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1100.030420][T17498] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1100.030520][T17498] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1100.030570][T17498] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1100.030608][T17498] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1100.030645][T17498] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1100.030680][T17498] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.030735][T17498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.809347][T17498] usb 2-1: GET_CAPABILITIES returned 0 [ 1100.809426][T17498] usbtmc 2-1:16.0: can't read capabilities [ 1100.940276][T15714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.036114][T17498] usb 2-1: USB disconnect, device number 86 [ 1101.208126][T20835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.208759][T20835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.257932][T20847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.268188][T20847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.282875][T20847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.292782][T20847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.304117][T20847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.313535][T20847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.322794][T20847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.332255][T20847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.549833][T20847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.560385][T20847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.238486][T20854] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4749'. [ 1104.366479][ T122] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1104.519970][ T122] usb 4-1: Using ep0 maxpacket: 32 [ 1104.520827][ T122] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1104.522673][ T122] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1104.525154][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.525502][ T122] usb 4-1: Product: syz [ 1104.525758][ T122] usb 4-1: Manufacturer: syz [ 1104.526038][ T122] usb 4-1: SerialNumber: syz [ 1104.560796][ T122] usb 4-1: config 0 descriptor?? [ 1104.787265][ T5894] usb 4-1: USB disconnect, device number 90 [ 1106.399135][T20825] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1106.408889][T20827] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1106.676604][T20872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.720264][T20872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.795213][T20875] syzkaller0: entered promiscuous mode [ 1106.795272][T20875] syzkaller0: entered allmulticast mode [ 1106.939942][ T5758] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1107.089958][ T5758] usb 6-1: Using ep0 maxpacket: 8 [ 1107.091120][ T5758] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1107.094420][ T5758] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1107.094487][ T5758] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1107.094545][ T5758] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1107.094586][ T5758] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1107.094626][ T5758] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1107.094665][ T5758] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.094724][ T5758] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.232260][ T5894] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1107.392224][T20888] loop1: detected capacity change from 0 to 512 [ 1107.398585][T20888] EXT4-fs: Ignoring removed i_version option [ 1107.422895][ T5894] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1107.430275][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1107.431465][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1107.432995][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1107.434111][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1107.436905][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.629428][T20888] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1107.645429][T20888] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4760: invalid indirect mapped block 2683928664 (level 1) [ 1107.645590][T20888] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1107.660198][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1107.660232][ C1] EXT4-fs (loop1): initial error at time 1788497177: ext4_free_branches:1023: inode 13 [ 1107.660269][ C1] EXT4-fs (loop1): last error at time 1788497177: ext4_free_branches:1023: inode 13 [ 1107.781441][T20888] EXT4-fs (loop1): 1 truncate cleaned up [ 1107.793526][T20888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.247913][ T122] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1109.278973][ T5758] usb 6-1: GET_CAPABILITIES returned 0 [ 1109.279067][ T5758] usbtmc 6-1:16.0: can't read capabilities [ 1109.293362][ T122] usb 3-1: Using ep0 maxpacket: 32 [ 1109.301085][ T122] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1109.319981][ T122] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1109.320056][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.712145][ T5894] usb 4-1: config 0 descriptor?? [ 1110.194974][ T122] usb 3-1: config 0 descriptor?? [ 1110.330848][ T122] usb 3-1: can't set config #0, error -71 [ 1110.350338][ T122] usb 3-1: USB disconnect, device number 111 [ 1110.650741][T20890] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1110.665436][T20890] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1110.706961][ T31] audit: type=1800 audit(1788497180.420:155): pid=20888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4760" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 1110.716363][ T5894] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1110.716392][ T5894] hdpvr 4-1:0.0: device init failed [ 1110.716482][ T5894] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 1110.722799][ T5894] usb 4-1: USB disconnect, device number 91 [ 1110.873744][ T122] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1110.932874][ T5894] usb 6-1: USB disconnect, device number 113 [ 1110.975782][T20902] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1111.001674][T20905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4767'. [ 1111.005307][T20903] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1111.050800][ T122] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1111.062301][ T122] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1111.062367][ T122] usb 3-1: can't read configurations, error -61 [ 1111.200409][ T122] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1111.269734][ T82] IPVS: starting estimator thread 0... [ 1111.293088][T20909] IPVS: rr: TCP 172.20.20.170:20000 - no destination available [ 1111.361845][T20917] IPVS: using max 27 ests per chain, 64800 per kthread [ 1111.368850][T20918] block nbd9: server does not support multiple connections per device. [ 1111.369206][T20918] block nbd9: shutting down sockets [ 1111.369480][ T122] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1111.401532][ T122] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1111.401615][ T122] usb 3-1: can't read configurations, error -61 [ 1111.416754][ T122] usb usb3-port1: attempt power cycle [ 1111.489142][T20907] syzkaller0: entered promiscuous mode [ 1111.495937][T20907] syzkaller0: entered allmulticast mode [ 1111.790453][ T122] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1111.871597][ T122] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1111.887018][ T122] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1111.913901][ T122] usb 3-1: can't read configurations, error -61 [ 1112.058483][ T122] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 1112.124196][ T122] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1112.141880][T17249] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1112.229769][ T122] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1112.229873][ T122] usb 3-1: can't read configurations, error -61 [ 1112.230267][ T122] usb usb3-port1: unable to enumerate USB device [ 1112.400052][ C0] IPVS: rr: TCP 172.20.20.170:20000 - no destination available [ 1114.306537][T20945] netlink: 'syz.2.4774': attribute type 1 has an invalid length. [ 1115.285119][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.285257][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.013168][T20945] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1116.092602][T20947] bridge1: entered promiscuous mode [ 1116.491843][ T5344] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1116.729720][T20968] loop0: detected capacity change from 0 to 512 [ 1116.740186][T20968] EXT4-fs: Ignoring removed i_version option [ 1117.577232][ T5344] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1117.596915][ T5344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1118.556869][ T122] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1118.557035][ T5344] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1118.557069][ T5344] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1118.557097][ T5344] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1118.557265][ T5344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.565498][ T5344] usb 6-1: config 0 descriptor?? [ 1118.599420][T20968] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1118.599979][T20968] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4779: invalid indirect mapped block 2683928664 (level 1) [ 1118.600018][T20968] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1118.613785][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1118.613815][ C1] EXT4-fs (loop0): initial error at time 1788497188: ext4_free_branches:1023: inode 13 [ 1118.613852][ C1] EXT4-fs (loop0): last error at time 1788497188: ext4_free_branches:1023: inode 13 [ 1118.616113][T20968] EXT4-fs (loop0): 1 truncate cleaned up [ 1118.630128][T20968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1119.682190][ T122] usb 3-1: Using ep0 maxpacket: 8 [ 1119.745914][ T31] audit: type=1800 audit(1788497189.460:156): pid=20968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4779" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 1119.980752][ T122] usb 3-1: device descriptor read/all, error -71 [ 1120.066451][ T5344] hdpvr 6-1:0.0: unexpected answer of status request, len -71 [ 1120.080040][ T5344] hdpvr 6-1:0.0: device init failed [ 1120.085820][ T5344] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1120.106636][ T5344] usb 6-1: USB disconnect, device number 114 [ 1120.213934][T20979] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1120.223364][T20979] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1120.555597][T20988] block nbd9: server does not support multiple connections per device. [ 1120.555993][T20988] block nbd9: shutting down sockets [ 1120.770183][T15714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1120.867164][T20991] syzkaller0: entered promiscuous mode [ 1120.873918][T20991] syzkaller0: entered allmulticast mode [ 1121.066751][T21003] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4782'. [ 1121.923419][T21016] netlink: 'syz.3.4792': attribute type 1 has an invalid length. [ 1124.980112][T21010] tipc: Enabling of bearer rejected, failed to enable media [ 1124.990259][T21016] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1125.057370][T21017] bond2: (slave veth0_to_bond): Releasing backup interface [ 1125.057419][T21017] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1125.189598][T21018] bridge5: entered promiscuous mode [ 1125.324459][T21025] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1125.458328][T21041] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1125.468171][T21046] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1125.485230][T21029] syzkaller0: entered promiscuous mode [ 1125.485295][T21029] syzkaller0: entered allmulticast mode [ 1125.505256][T21037] tipc: Enabled bearer , priority 0 [ 1125.506287][T21037] syzkaller0: entered promiscuous mode [ 1125.506330][T21037] syzkaller0: entered allmulticast mode [ 1125.564506][T21037] tipc: Resetting bearer [ 1125.585962][T21036] tipc: Resetting bearer [ 1125.718865][T21036] tipc: Disabling bearer [ 1125.902386][T21050] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1126.294233][T21070] netlink: 'syz.3.4805': attribute type 1 has an invalid length. [ 1126.386133][T21074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4805'. [ 1126.439726][T21070] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1126.471721][T21078] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4807'. [ 1126.489360][T21075] bridge6: entered promiscuous mode [ 1126.522327][T21075] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1126.896097][T21081] syzkaller0: entered promiscuous mode [ 1126.896157][T21081] syzkaller0: entered allmulticast mode [ 1127.080056][ T122] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1127.161001][T21086] block nbd9: server does not support multiple connections per device. [ 1127.161411][T21086] block nbd9: shutting down sockets [ 1127.240944][ T122] usb 4-1: Using ep0 maxpacket: 32 [ 1127.280906][ T122] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1127.294739][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.303280][ T122] usb 4-1: Product: syz [ 1127.307624][ T122] usb 4-1: Manufacturer: syz [ 1127.317873][ T122] usb 4-1: SerialNumber: syz [ 1127.330201][ T122] usb 4-1: config 0 descriptor?? [ 1127.342492][ T122] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1127.350659][ T122] dvb-usb: bulk message failed: -22 (4/0) [ 1127.356493][ T122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1127.370276][ T122] dvb-usb: bulk message failed: -22 (5/0) [ 1127.376120][ T122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1127.391267][ T122] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1127.402398][ T122] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1127.412722][ T122] usb 4-1: media controller created [ 1127.431824][ T122] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1127.506395][ T122] usb 4-1: selecting invalid altsetting 3 [ 1127.513604][ T122] ttusb2: set interface to alts=3 failed [ 1127.677453][T21092] netlink: 'syz.5.4811': attribute type 1 has an invalid length. [ 1127.914102][ T122] DVB: Unable to find symbol tda10086_attach() [ 1127.920667][ T122] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1127.951865][ T122] dvb-usb: bulk message failed: -22 (4/0) [ 1127.953345][ T122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1128.037228][ T122] dvb-usb: bulk message failed: -22 (5/0) [ 1128.046670][ T122] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1128.057411][ T122] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1128.069686][ T122] usb 4-1: USB disconnect, device number 92 [ 1128.156094][ T122] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1132.389709][T21092] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1132.399868][T21095] bridge3: entered promiscuous mode [ 1132.403520][T21098] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1132.409027][T21100] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1132.502812][T21106] tipc: Enabling of bearer rejected, failed to enable media [ 1132.683635][T21144] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1132.760899][T21149] netlink: 'syz.2.4821': attribute type 1 has an invalid length. [ 1132.851621][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4821'. [ 1133.155584][T21149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1133.305292][T21160] bridge2: entered promiscuous mode [ 1133.333185][T21160] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1133.589646][T21173] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1133.696206][T17498] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1133.844044][T17498] usb 6-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.40 [ 1133.854507][T17498] usb 6-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 1133.854567][T17498] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1133.854601][T17498] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1133.859409][T17498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.859442][T17498] usb 6-1: Product: syz [ 1133.859460][T17498] usb 6-1: Manufacturer: syz [ 1133.859480][T17498] usb 6-1: SerialNumber: syz [ 1133.998114][T21186] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1134.056053][T21188] netlink: 'syz.0.4830': attribute type 1 has an invalid length. [ 1134.092118][T21188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1134.155816][T21188] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1134.165347][ T5344] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1134.203899][T21188] bridge2: entered promiscuous mode [ 1134.323165][ T5344] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1134.333694][ T5344] usb 3-1: config 0 has no interfaces? [ 1134.340886][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.367149][ T5344] usb 3-1: config 0 descriptor?? [ 1134.443230][T17498] usbhid 6-1:1.0: can't add hid device: -71 [ 1134.443362][T17498] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1134.453592][T17498] usb 6-1: USB disconnect, device number 115 [ 1134.495501][T21191] syzkaller0: entered promiscuous mode [ 1134.495559][T21191] syzkaller0: entered allmulticast mode [ 1134.596868][ T5344] usb 3-1: USB disconnect, device number 118 [ 1138.244580][T21195] tipc: Enabled bearer , priority 0 [ 1138.245589][T21196] syzkaller0: entered promiscuous mode [ 1138.245612][T21196] syzkaller0: entered allmulticast mode [ 1138.268430][T21198] tipc: Resetting bearer [ 1138.276261][T21193] tipc: Resetting bearer [ 1138.308063][T21193] tipc: Disabling bearer [ 1138.606461][T21238] netlink: 'syz.0.4839': attribute type 1 has an invalid length. [ 1138.658564][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1138.757280][T21238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1138.855284][T21244] bridge3: entered promiscuous mode [ 1138.914988][T21244] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1138.934025][T21250] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 1138.945427][T21252] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1138.945518][T21252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1139.227857][T21264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1139.239276][T21264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.270326][ T122] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1139.416501][T21270] block nbd9: server does not support multiple connections per device. [ 1139.416930][T21270] block nbd9: shutting down sockets [ 1139.435308][ T122] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1139.436069][ T122] usb 2-1: config 0 has no interfaces? [ 1139.436108][ T122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.445166][ T122] usb 2-1: config 0 descriptor?? [ 1139.643546][T21276] tipc: Enabled bearer , priority 0 [ 1139.645365][T21276] syzkaller0: entered promiscuous mode [ 1139.645389][T21276] syzkaller0: entered allmulticast mode [ 1139.676999][T16088] usb 2-1: USB disconnect, device number 87 [ 1139.709452][T21276] tipc: Resetting bearer [ 1139.726012][T21275] tipc: Resetting bearer [ 1139.771019][T21275] tipc: Disabling bearer [ 1140.095596][T21285] syzkaller0: entered promiscuous mode [ 1140.095659][T21285] syzkaller0: entered allmulticast mode [ 1140.460418][T21298] netlink: 'syz.0.4859': attribute type 1 has an invalid length. [ 1140.461570][T21296] netlink: 'syz.1.4860': attribute type 1 has an invalid length. [ 1140.516254][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4860'. [ 1140.605558][T21298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1140.695664][T21296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1140.732618][T21301] bond2: (slave veth0_to_bond): Releasing backup interface [ 1140.773360][T21301] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1140.834938][T21305] bridge2: entered promiscuous mode [ 1140.859277][T21305] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1140.930627][T21306] bridge4: entered promiscuous mode [ 1141.231860][T21323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.241337][T21323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.365139][T21325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.374479][T21325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.566802][T21331] block nbd9: server does not support multiple connections per device. [ 1141.567226][T21331] block nbd9: shutting down sockets [ 1142.428979][T21349] syzkaller0: entered promiscuous mode [ 1142.436384][T21349] syzkaller0: entered allmulticast mode [ 1142.619871][ T5627] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1142.633283][T21353] netlink: 'syz.5.4875': attribute type 1 has an invalid length. [ 1142.685542][T21355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4875'. [ 1142.722945][T21353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1142.770737][ T5627] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1142.781194][ T5627] usb 4-1: config 0 has no interfaces? [ 1142.784946][T21353] bridge4: entered promiscuous mode [ 1142.792991][ T5627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.804740][ T5627] usb 4-1: config 0 descriptor?? [ 1142.812002][T21353] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1143.042115][ T5627] usb 4-1: USB disconnect, device number 93 [ 1143.076651][T21369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.077248][T21369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.096935][T21369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.115279][T21369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1143.316113][T21373] block nbd9: server does not support multiple connections per device. [ 1143.316544][T21373] block nbd9: shutting down sockets [ 1144.387926][T21398] netlink: 'syz.1.4890': attribute type 1 has an invalid length. [ 1144.450336][T21403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'. [ 1144.527207][T21398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1144.614136][ T25] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1144.622994][T21406] bridge3: entered promiscuous mode [ 1144.651347][T21406] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1144.790380][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 1144.806720][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1144.814890][ T25] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1144.830485][ T25] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1144.830541][ T25] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1144.830605][ T25] usb 4-1: config 14 has no interface number 0 [ 1144.830634][ T25] usb 4-1: config 14 has no interface number 1 [ 1144.830739][ T25] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1144.830777][ T25] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1144.830815][ T25] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1144.830855][ T25] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1144.830896][ T25] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1144.830936][ T25] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.830976][ T25] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1144.831007][ T25] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1144.983544][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.983607][ T25] usb 4-1: Product: syz [ 1144.983651][ T25] usb 4-1: Manufacturer: syz [ 1144.983680][ T25] usb 4-1: SerialNumber: syz [ 1145.103556][T21420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.125475][T21420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.183832][T21423] block nbd9: server does not support multiple connections per device. [ 1145.185456][T21423] block nbd9: shutting down sockets [ 1145.445351][ T25] legousbtower 4-1:14.57: interrupt endpoints not found [ 1145.823435][T21434] x_tables: duplicate underflow at hook 1 [ 1145.846984][ T25] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1145.861484][ T25] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1145.879895][ T5344] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1146.033739][ T5344] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1146.035858][ T5344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.657053][ T122] usb 4-1: USB disconnect, device number 94 [ 1146.689146][ T122] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1146.868838][T21450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.869520][T21450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.028792][T21454] netlink: 'syz.6.4905': attribute type 1 has an invalid length. [ 1147.089597][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4905'. [ 1147.126768][ T5344] usb 3-1: NFC: Unable to get FW version [ 1147.136022][ T5344] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -71 [ 1147.158315][ T5344] usb 3-1: USB disconnect, device number 119 [ 1147.335905][T21454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1147.378234][T21459] syzkaller0: entered promiscuous mode [ 1147.378314][T21459] syzkaller0: entered allmulticast mode [ 1147.433477][T21458] bridge3: entered promiscuous mode [ 1147.445336][T21458] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1147.548345][T21469] block nbd9: server does not support multiple connections per device. [ 1147.623554][T21469] block nbd9: shutting down sockets [ 1147.934886][T21479] syzkaller0: entered promiscuous mode [ 1147.941255][T21479] syzkaller0: entered allmulticast mode [ 1148.099993][ T25] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1148.261962][ T25] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1148.273244][ T25] usb 3-1: config 0 has no interfaces? [ 1148.273310][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.293979][ T25] usb 3-1: config 0 descriptor?? [ 1148.407497][T21491] x_tables: duplicate underflow at hook 1 [ 1148.523753][ T25] usb 3-1: USB disconnect, device number 120 [ 1148.744590][T21499] fuse: Unknown parameter 'grou00000000000000000000' [ 1149.113573][T21510] netlink: 'syz.6.4921': attribute type 1 has an invalid length. [ 1149.175356][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4921'. [ 1149.233087][T21510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1149.251063][T16088] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1149.288272][T21510] bridge4: entered promiscuous mode [ 1149.335783][T21510] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1149.401325][T16088] usb 4-1: Using ep0 maxpacket: 32 [ 1149.415444][T16088] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1149.415548][T16088] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1149.425498][T16088] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1149.425532][T16088] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1149.425558][T16088] usb 4-1: config 14 has no interface number 0 [ 1149.425580][T16088] usb 4-1: config 14 has no interface number 1 [ 1149.425659][T16088] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1149.425689][T16088] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1149.425734][T16088] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1149.425767][T16088] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1149.425803][T16088] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1149.425836][T16088] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.425911][T16088] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1149.425936][T16088] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1149.433657][T16088] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.433699][T16088] usb 4-1: Product: syz [ 1149.433721][T16088] usb 4-1: Manufacturer: syz [ 1149.433745][T16088] usb 4-1: SerialNumber: syz [ 1149.593285][T21519] syzkaller0: entered promiscuous mode [ 1149.599021][T21519] syzkaller0: entered allmulticast mode [ 1149.893048][T16088] legousbtower 4-1:14.57: interrupt endpoints not found [ 1149.997538][T21525] block nbd9: server does not support multiple connections per device. [ 1149.997937][T21525] block nbd9: shutting down sockets [ 1150.333863][T16088] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1150.346666][T16088] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1150.857653][T21537] x_tables: duplicate underflow at hook 1 [ 1151.124224][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1151.158425][ C1] usb 4-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 1151.163027][ T5344] usb 4-1: USB disconnect, device number 95 [ 1151.208203][ T5344] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1151.441683][T21552] vivid-000: disconnect [ 1151.447166][T21547] vivid-000: reconnect [ 1151.620645][ T122] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1151.776480][ T122] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1151.777424][ T122] usb 6-1: config 0 has no interfaces? [ 1151.777463][ T122] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.806205][ T122] usb 6-1: config 0 descriptor?? [ 1151.898928][T21556] netlink: 'syz.1.4936': attribute type 1 has an invalid length. [ 1151.962603][T21556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1151.999262][T21556] bond1: (slave veth0_to_bond): Releasing backup interface [ 1151.999313][T21556] bond1: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1152.034403][T21556] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1152.038601][T16088] usb 6-1: USB disconnect, device number 116 [ 1152.120566][T21559] syzkaller0: entered promiscuous mode [ 1152.120615][T21559] syzkaller0: entered allmulticast mode [ 1152.147430][T21559] tipc: Enabling of bearer rejected, failed to enable media [ 1152.275905][T21562] tipc: Enabled bearer , priority 0 [ 1152.285176][T21566] syzkaller0: entered promiscuous mode [ 1152.285218][T21566] syzkaller0: entered allmulticast mode [ 1152.414623][T21564] tipc: Resetting bearer [ 1152.424728][T21560] tipc: Resetting bearer [ 1152.623163][T21560] tipc: Disabling bearer [ 1152.861623][T21574] block nbd9: server does not support multiple connections per device. [ 1152.862043][T21574] block nbd9: shutting down sockets [ 1153.065515][T21580] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4942'. [ 1153.087385][T21580] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1153.115943][T21582] fuse: Unknown parameter 'grou00000000000000000000' [ 1153.512367][T21590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.524376][T21590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.671066][T16088] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1153.850305][T16088] usb 6-1: Using ep0 maxpacket: 32 [ 1153.857766][T16088] usb 6-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1153.870041][T16088] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1153.876840][T16088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.892092][T16088] usb 6-1: config 0 descriptor?? [ 1153.911127][T16088] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1153.942570][T16088] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1153.942968][T16088] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1153.943048][T16088] usb 6-1: media controller created [ 1153.992800][T16088] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.039756][T21598] netlink: 'syz.6.4948': attribute type 1 has an invalid length. [ 1154.095521][T21598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1154.109393][T16088] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1154.116704][T16088] error writing reg: 0xff, val: 0x00 [ 1154.185843][T21606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.188091][T21606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.251591][T16088] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1154.283224][T21610] fuse: Bad value for 'fd' [ 1154.325607][T21598] bridge5: entered promiscuous mode [ 1154.373527][T21587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.376068][T21587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.386713][T21587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.404345][T21598] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1154.404943][T21587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.421858][T21587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.422526][T21587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.457427][ T25] usb 6-1: USB disconnect, device number 117 [ 1154.510015][ T5344] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1154.669952][ T5344] usb 4-1: Using ep0 maxpacket: 8 [ 1154.676047][ T5344] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1154.688826][ T5344] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.720549][ T5344] usb 4-1: config 0 descriptor?? [ 1154.732434][ T5344] usb 4-1: probing VID:PID(0424:012C) [ 1154.750016][ T5344] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 1154.750077][ T5344] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1154.750126][ T5344] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 1154.750159][ T5344] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1154.750191][ T5344] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1154.956301][T21627] block nbd9: server does not support multiple connections per device. [ 1154.967702][T21627] block nbd9: shutting down sockets [ 1155.004098][ T25] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1155.137574][ T5344] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1155.175248][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 1155.181408][ T25] usb 6-1: config index 0 descriptor too short (expected 36, got 18) [ 1155.181468][ T25] usb 6-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1155.181505][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1155.181549][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.226276][ T25] usb 6-1: config 0 descriptor?? [ 1155.274086][ T25] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1155.347905][ T5344] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1155.560402][ T122] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1155.721097][ T122] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1155.734685][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1155.734748][ T122] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1155.734799][ T122] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1155.734834][ T122] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1155.734891][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.790705][ T122] usb 3-1: config 0 descriptor?? [ 1156.013545][ T122] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 1156.013599][ T122] hdpvr 3-1:0.0: device init failed [ 1156.013712][ T122] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1156.350073][ T122] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1156.500647][ T122] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1156.501971][ T122] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.501997][ T122] usb 2-1: config 0 has no interfaces? [ 1156.506327][ T122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.506360][ T122] usb 2-1: Product: syz [ 1156.506378][ T122] usb 2-1: Manufacturer: syz [ 1156.506396][ T122] usb 2-1: SerialNumber: syz [ 1156.514767][ T122] usb 2-1: config 0 descriptor?? [ 1156.542679][T21652] fuse: Unknown parameter 'grou00000000000000000000' [ 1156.725539][ T5627] usb 2-1: USB disconnect, device number 88 [ 1157.211245][ T122] usb 6-1: USB disconnect, device number 118 [ 1157.266216][T21655] fuse: Bad value for 'fd' [ 1157.342903][T21658] netlink: 'syz.5.4967': attribute type 1 has an invalid length. [ 1157.467476][T21658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1157.517994][T21658] bridge5: entered promiscuous mode [ 1157.532187][T21658] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1157.575156][T21665] syzkaller0: entered promiscuous mode [ 1157.575232][T21665] syzkaller0: entered allmulticast mode [ 1157.807209][T21674] block nbd9: server does not support multiple connections per device. [ 1157.816909][T21674] block nbd9: shutting down sockets [ 1157.870665][ T5781] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1158.013994][T21681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1158.027538][ T5781] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1158.028514][ T5781] usb 2-1: config 0 has no interfaces? [ 1158.028555][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.040673][ T5781] usb 2-1: config 0 descriptor?? [ 1158.056832][T21681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4974'. [ 1158.211283][ T5344] usb 4-1: USB disconnect, device number 96 [ 1158.224127][ T5758] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1158.232841][ T5758] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1158.253880][ T5627] usb 2-1: USB disconnect, device number 89 [ 1158.340040][ T25] usb 3-1: USB disconnect, device number 121 [ 1159.067437][T21699] fuse: Unknown parameter 'grou00000000000000000000' [ 1159.210029][ T25] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1159.210971][T21703] netlink: 'syz.6.4983': attribute type 1 has an invalid length. [ 1159.278488][T21703] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1159.339619][T21703] bridge6: entered promiscuous mode [ 1159.372496][T21703] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 1159.384425][ T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1159.395349][ T25] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1159.395405][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.395455][ T25] usb 2-1: config 0 has no interface number 0 [ 1159.425462][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.435155][ T25] usb 2-1: Product: syz [ 1159.439454][ T25] usb 2-1: Manufacturer: syz [ 1159.444471][ T25] usb 2-1: SerialNumber: syz [ 1159.457250][ T25] usb 2-1: config 0 descriptor?? [ 1159.481736][ T25] yurex 2-1:0.50: Could not find endpoints [ 1159.628784][T21710] syzkaller0: entered promiscuous mode [ 1159.634518][T21710] syzkaller0: entered allmulticast mode [ 1159.733670][ T5781] usb 2-1: USB disconnect, device number 90 [ 1159.738711][T21714] block nbd9: server does not support multiple connections per device. [ 1159.741651][T21714] block nbd9: shutting down sockets [ 1160.200836][T16088] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1160.362240][T16088] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1160.363687][T16088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1160.363719][T16088] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1160.363758][T16088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1160.363786][T16088] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1160.363832][T16088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.367476][T16088] usb 3-1: config 0 descriptor?? [ 1160.550225][ T25] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1160.574090][T16088] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 1160.574129][T16088] hdpvr 3-1:0.0: device init failed [ 1160.574238][T16088] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1160.733933][ T25] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1160.743919][ T25] usb 2-1: config 0 has no interfaces? [ 1160.743996][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.751155][ T25] usb 2-1: config 0 descriptor?? [ 1160.863546][T21733] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1160.863679][T21733] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1160.876338][T21733] 0ªî{X¹¦: entered allmulticast mode [ 1160.973559][T16088] usb 2-1: USB disconnect, device number 91 [ 1161.917619][T21745] netlink: 'syz.0.4998': attribute type 1 has an invalid length. [ 1162.013338][T21745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1162.079275][T21745] bridge5: entered promiscuous mode [ 1162.114534][T21745] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1162.243965][T21751] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4999'. [ 1162.477731][T21755] syzkaller0: entered promiscuous mode [ 1162.477797][T21755] syzkaller0: entered allmulticast mode [ 1162.650675][T21757] fuse: Unknown parameter 'group_i00000000000000000000' [ 1162.708508][T21759] block nbd9: server does not support multiple connections per device. [ 1162.717012][T21761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.721771][T21761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.735014][T21759] block nbd9: shutting down sockets [ 1162.994775][ T122] usb 3-1: USB disconnect, device number 122 [ 1163.100204][T21769] syzkaller0: entered promiscuous mode [ 1163.100259][T21769] syzkaller0: entered allmulticast mode [ 1163.261056][ T5745] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1163.390978][ T5745] usb 6-1: device descriptor read/64, error -71 [ 1163.426814][T21780] netlink: 'syz.2.5011': attribute type 1 has an invalid length. [ 1163.541563][T21780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1163.581806][T21786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.582394][T21786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.630169][ T5745] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1163.643245][T21780] bridge3: entered promiscuous mode [ 1163.707359][T21780] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 1163.762310][ T5745] usb 6-1: device descriptor read/64, error -71 [ 1163.819679][T21792] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1163.873336][ T5745] usb usb6-port1: attempt power cycle [ 1164.211382][ T5745] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1164.231618][ T5745] usb 6-1: device descriptor read/8, error -71 [ 1164.269928][ T122] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1164.419957][ T122] usb 3-1: Using ep0 maxpacket: 32 [ 1164.428728][ T122] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1164.428836][ T122] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1164.451118][ T122] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1164.451176][ T122] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1164.451223][ T122] usb 3-1: config 14 has no interface number 0 [ 1164.451259][ T122] usb 3-1: config 14 has no interface number 1 [ 1164.451337][ T122] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1164.451378][ T122] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1164.451420][ T122] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1164.451463][ T122] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1164.451508][ T122] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1164.451566][ T122] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1164.451610][ T122] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1164.451642][ T122] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1164.470923][ T5745] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1164.546826][T21805] block nbd9: server does not support multiple connections per device. [ 1164.548047][T21805] block nbd9: shutting down sockets [ 1164.606103][ T5745] usb 6-1: device descriptor read/8, error -71 [ 1164.614637][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.614695][ T122] usb 3-1: Product: syz [ 1164.614752][ T122] usb 3-1: Manufacturer: syz [ 1164.614781][ T122] usb 3-1: SerialNumber: syz [ 1164.710396][ T5745] usb usb6-port1: unable to enumerate USB device [ 1165.026804][T21816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.028606][T21816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.060065][ T122] legousbtower 3-1:14.57: interrupt endpoints not found [ 1165.460182][ T122] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1165.462484][ T122] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1165.570091][ T25] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1165.740277][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1165.747303][ T25] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1165.749616][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1165.749669][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.771405][ T25] usb 2-1: config 0 descriptor?? [ 1165.986117][ T25] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1166.167283][T21841] fuse: Unknown parameter 'group_i00000000000000000000' [ 1166.234386][ T5745] usb 3-1: USB disconnect, device number 123 [ 1166.259692][ T5745] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1166.446157][T21849] netlink: 'syz.0.5027': attribute type 1 has an invalid length. [ 1166.473895][T21849] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1166.504243][T21849] bridge6: entered promiscuous mode [ 1166.508501][ T25] usb 2-1: USB disconnect, device number 92 [ 1166.521264][T21849] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1167.130470][ T25] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1167.290301][T21864] block nbd9: server does not support multiple connections per device. [ 1167.291009][T21864] block nbd9: shutting down sockets [ 1167.299987][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 1167.304487][ T25] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1167.308256][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1167.321554][ T25] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1167.321599][ T25] usb 3-1: Product: syz [ 1167.321623][ T25] usb 3-1: Manufacturer: syz [ 1167.321651][ T25] usb 3-1: SerialNumber: syz [ 1167.570250][ T25] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1167.570311][ T25] usb 3-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1167.570337][ T25] usb 3-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1167.570359][ T25] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1167.806905][ T25] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1167.807023][ T25] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1167.816207][ T25] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1167.839020][ T25] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1167.864327][ T25] usb 3-1: USB disconnect, device number 124 [ 1167.895862][T21877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.903865][ T25] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1167.942083][T21877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.954698][ T25] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1167.955478][ T25] visor 3-1:1.0: device disconnected [ 1167.987459][T21879] loop9: detected capacity change from 0 to 7 [ 1167.997203][ C1] blk_print_req_error: 10 callbacks suppressed [ 1167.997278][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1167.997363][ C1] buffer_io_error: 10 callbacks suppressed [ 1167.997379][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.023591][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.023680][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.023945][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.024019][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.026479][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.026570][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.031690][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.031780][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.032818][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.032893][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.033458][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.033549][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.041209][T21879] ldm_validate_partition_table(): Disk read failed. [ 1168.041558][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.041638][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.049547][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.049670][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.053036][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1168.053137][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1168.056715][T21879] Dev loop9: unable to read RDB block 0 [ 1168.074421][T21879] loop9: unable to read partition table [ 1168.074662][T21879] loop9: partition table beyond EOD, truncated [ 1168.074703][T21879] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1168.492683][T21890] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1168.522235][ T6041] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1168.572879][T21893] netlink: 'syz.1.5040': attribute type 1 has an invalid length. [ 1168.614619][T21893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1168.619228][T21893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5040'. [ 1168.632405][T21893] bridge4: entered promiscuous mode [ 1168.645950][T21893] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 1168.680920][ T6041] usb 6-1: Using ep0 maxpacket: 8 [ 1168.686934][ T6041] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1168.697792][ T6041] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1168.712038][ T6041] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1168.712095][ T6041] usb 6-1: Product: syz [ 1168.712123][ T6041] usb 6-1: Manufacturer: syz [ 1168.712148][ T6041] usb 6-1: SerialNumber: syz [ 1169.209939][ T25] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1169.364372][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1169.368458][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1169.368517][ T25] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1169.369913][ T25] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1169.369941][ T25] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1169.369967][ T25] usb 2-1: config 14 has no interface number 0 [ 1169.369988][ T25] usb 2-1: config 14 has no interface number 1 [ 1169.370056][ T25] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1169.370087][ T25] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1169.370119][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1169.370152][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1169.370188][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1169.370222][ T25] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1169.370256][ T25] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1169.370280][ T25] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1169.379063][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.379100][ T25] usb 2-1: Product: syz [ 1169.379121][ T25] usb 2-1: Manufacturer: syz [ 1169.379143][ T25] usb 2-1: SerialNumber: syz [ 1169.616235][T21924] block nbd9: server does not support multiple connections per device. [ 1169.617830][T21924] block nbd9: shutting down sockets [ 1169.860718][ T25] legousbtower 2-1:14.57: interrupt endpoints not found [ 1170.270302][ T25] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1170.274681][ T25] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1171.061323][ T6041] usb 2-1: USB disconnect, device number 93 [ 1171.086811][ T6041] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1171.432146][ T5781] usb 6-1: USB disconnect, device number 123 [ 1171.534622][T21947] loop9: detected capacity change from 0 to 7 [ 1171.552626][T21947] ldm_validate_partition_table(): Disk read failed. [ 1171.561405][T21947] Dev loop9: unable to read RDB block 0 [ 1171.569054][T21947] loop9: unable to read partition table [ 1171.576898][T21947] loop9: partition table beyond EOD, truncated [ 1171.584830][T21947] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1172.034723][T21957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.035385][T21957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.060213][ T5627] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1172.110017][ T6041] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1172.209980][ T5627] usb 2-1: Using ep0 maxpacket: 8 [ 1172.211119][ T5627] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1172.212904][ T5627] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1172.215858][ T5627] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1172.215889][ T5627] usb 2-1: Product: syz [ 1172.215908][ T5627] usb 2-1: Manufacturer: syz [ 1172.215928][ T5627] usb 2-1: SerialNumber: syz [ 1172.242419][ T6041] usb 6-1: device descriptor read/64, error -71 [ 1172.428690][ T5627] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1172.428737][ T5627] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1172.428795][ T5627] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1172.428817][ T5627] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1172.480454][ T6041] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1172.610012][ T6041] usb 6-1: device descriptor read/64, error -71 [ 1172.683888][ T5627] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1172.684013][ T5627] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1172.695461][ T5627] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1172.720193][ T6041] usb usb6-port1: attempt power cycle [ 1172.729122][ T5627] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1172.738142][ T5627] usb 2-1: USB disconnect, device number 94 [ 1172.755010][ T5627] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1172.767207][ T5627] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1172.768437][ T5627] visor 2-1:1.0: device disconnected [ 1173.061813][ T6041] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1173.092830][ T6041] usb 6-1: device descriptor read/8, error -71 [ 1173.103756][T21965] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5058'. [ 1173.330565][ T6041] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1173.351501][ T6041] usb 6-1: device descriptor read/8, error -71 [ 1173.418713][T21974] block nbd9: server does not support multiple connections per device. [ 1173.428207][T21974] block nbd9: shutting down sockets [ 1173.461542][ T6041] usb usb6-port1: unable to enumerate USB device [ 1173.806697][T21984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.807241][T21984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.270675][ T5627] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1174.408128][T21996] loop9: detected capacity change from 0 to 7 [ 1174.417041][ C0] blk_print_req_error: 32 callbacks suppressed [ 1174.417093][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.417174][ C0] buffer_io_error: 30 callbacks suppressed [ 1174.417190][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.423531][ T5627] usb 3-1: Using ep0 maxpacket: 8 [ 1174.427546][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.427654][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.434673][ T5627] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1174.435005][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.435085][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.461114][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.461241][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.462178][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.462255][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.462654][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.462728][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.463045][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.463156][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.463822][T21996] ldm_validate_partition_table(): Disk read failed. [ 1174.465711][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.465793][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.465962][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.466030][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.466220][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1174.466253][ T5627] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1174.466290][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1174.466522][T21996] Dev loop9: unable to read RDB block 0 [ 1174.470546][T21996] loop9: unable to read partition table [ 1174.470823][T21996] loop9: partition table beyond EOD, truncated [ 1174.477461][T21996] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1174.591165][ T5627] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1174.591201][ T5627] usb 3-1: Product: syz [ 1174.591230][ T5627] usb 3-1: Manufacturer: syz [ 1174.591249][ T5627] usb 3-1: SerialNumber: syz [ 1174.906775][ T5627] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 1174.915553][ T5627] visor 3-1:1.0: probe with driver visor failed with error -32 [ 1174.960115][ T5627] usb 3-1: USB disconnect, device number 125 [ 1175.122855][T22010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.137244][T22010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.546211][T22021] block nbd9: server does not support multiple connections per device. [ 1175.547343][T22021] block nbd9: shutting down sockets [ 1175.699898][ T6041] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1175.846751][T22026] syzkaller0: entered promiscuous mode [ 1175.846810][T22026] syzkaller0: entered allmulticast mode [ 1175.852646][ T6041] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1175.857726][ T6041] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.857753][ T6041] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1175.866869][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.866899][ T6041] usb 2-1: Product: syz [ 1175.866917][ T6041] usb 2-1: Manufacturer: syz [ 1175.866936][ T6041] usb 2-1: SerialNumber: syz [ 1176.158430][T22028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.159107][T22028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.185155][T22034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5072'. [ 1176.525449][ T6041] usb 2-1: USB disconnect, device number 95 [ 1176.600014][ T5781] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1176.724443][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.724591][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.762447][ T5781] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1176.773699][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1176.783614][ T5781] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1176.783643][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1176.783665][ T5781] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1176.783714][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.824274][ T5781] usb 3-1: config 0 descriptor?? [ 1177.038342][ T5781] hdpvr 3-1:0.0: firmware version 0x0 dated [ 1177.038389][ T5781] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 1177.135688][T22044] loop9: detected capacity change from 0 to 7 [ 1177.145793][T22044] ldm_validate_partition_table(): Disk read failed. [ 1177.146846][T22044] Dev loop9: unable to read RDB block 0 [ 1177.147833][T22044] loop9: unable to read partition table [ 1177.148117][T22044] loop9: partition table beyond EOD, truncated [ 1177.148155][T22044] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1177.487641][ T5781] hdpvr 3-1:0.0: max device number reached, device register failed [ 1177.540279][ T5781] usb 3-1: USB disconnect, device number 126 [ 1177.760316][ T5627] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1177.891177][ T5627] usb 2-1: device descriptor read/64, error -71 [ 1178.129983][ T5627] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1178.250329][T22064] block nbd9: server does not support multiple connections per device. [ 1178.260007][ T5627] usb 2-1: device descriptor read/64, error -71 [ 1178.268109][T22064] block nbd9: shutting down sockets [ 1178.380275][ T5627] usb usb2-port1: attempt power cycle [ 1178.457392][T22070] loop5: detected capacity change from 0 to 7 [ 1178.466215][T22070] loop5: [ 1178.469353][T22070] loop5: partition table partially beyond EOD, truncated [ 1178.657035][T22079] loop9: detected capacity change from 0 to 7 [ 1178.666928][T22079] ldm_validate_partition_table(): Disk read failed. [ 1178.675032][T22079] Dev loop9: unable to read RDB block 0 [ 1178.683828][T22079] loop9: unable to read partition table [ 1178.690373][T22079] loop9: partition table beyond EOD, truncated [ 1178.696684][T22079] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1178.720085][ T5627] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1178.742384][ T5627] usb 2-1: device descriptor read/8, error -71 [ 1178.813785][ T5781] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1178.965241][ T5781] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1178.966611][ T5781] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.966638][ T5781] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1178.966679][ T5781] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.981555][ T5627] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1178.988938][ T5781] usb 6-1: config 0 descriptor?? [ 1179.001197][ T5627] usb 2-1: device descriptor read/8, error -71 [ 1179.111061][ T5627] usb usb2-port1: unable to enumerate USB device [ 1179.121292][ T5894] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1179.270439][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 1179.275054][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1179.275109][ T5894] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1179.276277][ T5894] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 1179.276306][ T5894] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 1179.276331][ T5894] usb 3-1: config 14 has no interface number 0 [ 1179.276351][ T5894] usb 3-1: config 14 has no interface number 1 [ 1179.276418][ T5894] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1179.276447][ T5894] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1179.276478][ T5894] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1179.276510][ T5894] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1179.276544][ T5894] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1179.276576][ T5894] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1179.276610][ T5894] usb 3-1: config 14 interface 57 has no altsetting 0 [ 1179.276632][ T5894] usb 3-1: config 14 interface 228 has no altsetting 0 [ 1179.280504][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.280532][ T5894] usb 3-1: Product: syz [ 1179.280551][ T5894] usb 3-1: Manufacturer: syz [ 1179.280569][ T5894] usb 3-1: SerialNumber: syz [ 1179.610360][T22086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.620251][T22086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.704346][ T5894] legousbtower 3-1:14.57: interrupt endpoints not found [ 1180.108110][ T5894] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1180.118804][ T5894] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1180.215893][T22096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.224989][T22096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.880369][ T5894] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1181.045850][ T5894] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1181.047913][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.047970][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1181.048002][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1181.048107][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1181.048135][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1181.053873][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1181.053904][ T5894] usb 2-1: Product: syz [ 1181.053923][ T5894] usb 2-1: Manufacturer: syz [ 1181.053941][ T5894] usb 2-1: SerialNumber: syz [ 1181.078402][ T5894] usb 2-1: config 0 descriptor?? [ 1181.305648][ T5894] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1181.305813][ T5894] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1181.512699][ T5894] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 1181.512754][ T5894] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1181.513709][ T5894] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1181.721619][ T5894] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1181.818655][T22115] block nbd9: server does not support multiple connections per device. [ 1181.828483][T22115] block nbd9: shutting down sockets [ 1181.906617][ T5781] usb 6-1: USB disconnect, device number 2 [ 1181.985709][ T5745] usb 3-1: USB disconnect, device number 127 [ 1182.030864][ T5745] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 1182.083516][T22120] loop9: detected capacity change from 0 to 7 [ 1182.090188][ C1] blk_print_req_error: 52 callbacks suppressed [ 1182.090228][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.090316][ C1] buffer_io_error: 50 callbacks suppressed [ 1182.090332][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.092900][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.093002][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.093199][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.093309][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.093565][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.093682][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.096911][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.096997][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.097344][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.097442][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.097638][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.097745][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.097892][T22120] ldm_validate_partition_table(): Disk read failed. [ 1182.098082][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.098167][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.098324][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.098392][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.098580][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1182.098670][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1182.099589][T22120] Dev loop9: unable to read RDB block 0 [ 1182.108031][T22120] loop9: unable to read partition table [ 1182.108332][T22120] loop9: partition table beyond EOD, truncated [ 1182.108355][T22120] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1182.157607][ T5894] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1182.157947][ T5894] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1182.197739][ T5894] usb 2-1: USB disconnect, device number 100 [ 1183.210132][ T5745] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1183.370552][ T5745] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1183.381392][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1183.381444][ T5745] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1183.381481][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1183.381515][ T5745] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1183.381598][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.435108][ T5745] usb 2-1: config 0 descriptor?? [ 1183.647752][ T5745] hdpvr 2-1:0.0: firmware version 0x0 dated [ 1183.647790][ T5745] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1183.761783][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1183.921830][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1183.922936][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.922988][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1183.923040][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.928589][ T5894] usb 3-1: config 0 descriptor?? [ 1183.939702][ T5894] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 1183.941526][ T5894] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1184.069396][ T5745] hdpvr 2-1:0.0: max device number reached, device register failed [ 1184.105285][ T5745] usb 2-1: USB disconnect, device number 101 [ 1184.540590][T22161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.542502][T22161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.664293][T22165] syzkaller0: entered promiscuous mode [ 1184.669958][T22165] syzkaller0: entered allmulticast mode [ 1184.693607][T22168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.694149][T22168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.725684][T22169] block nbd9: server does not support multiple connections per device. [ 1184.734503][T22169] block nbd9: shutting down sockets [ 1185.300261][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1185.461790][ T25] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1185.463565][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1185.463596][ T25] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1185.466850][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.466879][ T25] usb 6-1: Product: syz [ 1185.466897][ T25] usb 6-1: Manufacturer: syz [ 1185.466916][ T25] usb 6-1: SerialNumber: syz [ 1185.708851][ T25] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1186.324393][ T5745] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1186.440819][ T5781] usb 6-1: USB disconnect, device number 3 [ 1186.478042][ T5781] usblp0: removed [ 1186.491231][ T5745] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1186.502115][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1186.512109][ T5745] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1186.512151][ T5745] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1186.512179][ T5745] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1186.512231][ T5745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.562305][ T5745] usb 2-1: config 0 descriptor?? [ 1186.658937][ T25] usb 3-1: USB disconnect, device number 2 [ 1186.788293][ T5745] hdpvr 2-1:0.0: firmware version 0x0 dated [ 1186.796210][ T5745] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 1186.834543][T22208] syzkaller0: entered promiscuous mode [ 1186.834597][T22208] syzkaller0: entered allmulticast mode [ 1186.876546][T22210] block nbd9: server does not support multiple connections per device. [ 1186.894612][T22210] block nbd9: shutting down sockets [ 1187.299097][ T5745] hdpvr 2-1:0.0: max device number reached, device register failed [ 1187.355757][ T5745] usb 2-1: USB disconnect, device number 102 [ 1187.433468][T22223] fuse: Bad value for 'fd' [ 1187.618294][ T5781] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1187.771649][ T5781] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1187.772814][ T5781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.772864][ T5781] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1187.772895][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1187.772926][ T5781] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1187.772953][ T5781] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1187.778094][ T5781] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1187.778122][ T5781] usb 3-1: Product: syz [ 1187.779634][ T5781] usb 3-1: Manufacturer: syz [ 1187.779656][ T5781] usb 3-1: SerialNumber: syz [ 1187.787549][ T5781] usb 3-1: config 0 descriptor?? [ 1187.990534][ T6041] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1188.070686][ T5781] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1188.070748][ T5781] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1188.149879][ T6041] usb 6-1: device descriptor read/64, error -71 [ 1188.279373][ T5781] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1188.279435][ T5781] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1188.285051][ T5781] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 1188.303454][ T5781] usb 3-1: USB disconnect, device number 3 [ 1188.400733][ T6041] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1188.531461][ T6041] usb 6-1: device descriptor read/64, error -71 [ 1188.640524][ T6041] usb usb6-port1: attempt power cycle [ 1188.860104][T22245] loop0: detected capacity change from 0 to 512 [ 1188.870165][T22245] EXT4-fs: Ignoring removed i_version option [ 1189.004525][T22245] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1189.020407][T22245] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.5149: invalid indirect mapped block 2683928664 (level 1) [ 1189.020508][T22245] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1189.026285][T22245] EXT4-fs (loop0): 1 truncate cleaned up [ 1189.046936][T22245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1190.689500][ T6041] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1190.722639][ T6041] usb 6-1: device descriptor read/8, error -71 [ 1191.533932][ T31] audit: type=1800 audit(1788497261.250:157): pid=22245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5149" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 1191.570036][T16088] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1191.578766][ T6041] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1191.731875][ T6041] usb 6-1: device descriptor read/8, error -71 [ 1191.841489][ T6041] usb usb6-port1: unable to enumerate USB device [ 1191.900126][T22252] block nbd9: server does not support multiple connections per device. [ 1191.909043][T22252] block nbd9: shutting down sockets [ 1192.054746][T22256] syzkaller0: entered promiscuous mode [ 1192.054819][T22256] syzkaller0: entered allmulticast mode [ 1192.097680][T22262] fuse: Bad value for 'fd' [ 1192.140476][ T5781] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1192.317615][ T5781] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1192.318660][ T5781] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1192.318731][ T5781] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1192.318786][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.329365][ T5781] usb 3-1: config 0 descriptor?? [ 1192.358634][ T5781] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 1192.358717][ T5781] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1192.864837][T15714] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1192.986701][T22279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.987264][T22279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.657716][T22294] fuse: Bad value for 'fd' [ 1193.960558][T22301] fuse: Bad value for 'fd' [ 1194.374932][T22310] syzkaller0: entered promiscuous mode [ 1194.374982][T22310] syzkaller0: entered allmulticast mode [ 1194.490186][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1194.660435][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 1194.667805][ T25] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1194.681568][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.681629][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.681674][ T25] usb 6-1: config 0 has no interface number 0 [ 1194.681725][ T25] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1194.681781][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.732863][ T25] usb 6-1: config 0 descriptor?? [ 1194.750749][ T25] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 1194.848852][T22318] netlink: 'syz.3.5175': attribute type 1 has an invalid length. [ 1194.978258][ T5781] usb 3-1: USB disconnect, device number 4 [ 1195.057085][T22318] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1195.186323][T22322] bridge7: entered promiscuous mode [ 1195.236217][T22322] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1195.393779][T22327] vivid-000: disconnect [ 1195.662011][T22315] vivid-000: reconnect [ 1195.951398][T22338] syzkaller0: entered promiscuous mode [ 1195.957379][T22338] syzkaller0: entered allmulticast mode [ 1196.509570][T22342] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5182'. [ 1196.731041][ T5781] usb 6-1: USB disconnect, device number 8 [ 1197.072465][T22352] fuse: Bad value for 'fd' [ 1197.249390][T22356] syzkaller0: entered promiscuous mode [ 1197.249447][T22356] syzkaller0: entered allmulticast mode [ 1197.684371][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.697427][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.741467][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.755550][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.784360][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.799367][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.812253][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.817662][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.063112][T22374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.078062][T22374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.241821][T22383] fuse: Bad value for 'fd' [ 1198.291701][ T6041] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1198.450821][ T6041] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1198.454890][ T6041] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1198.454918][ T6041] usb 3-1: config 0 has no interface number 0 [ 1198.454964][ T6041] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1198.458691][ T6041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.458718][ T6041] usb 3-1: Product: syz [ 1198.458736][ T6041] usb 3-1: Manufacturer: syz [ 1198.458755][ T6041] usb 3-1: SerialNumber: syz [ 1198.471278][ T6041] usb 3-1: config 0 descriptor?? [ 1198.517083][ T6041] yurex 3-1:0.50: Could not find endpoints [ 1198.643867][T22395] fuse: Invalid rootmode [ 1198.687892][ T6041] usb 3-1: USB disconnect, device number 5 [ 1198.838458][T22402] syzkaller0: entered promiscuous mode [ 1198.844865][T22402] syzkaller0: entered allmulticast mode [ 1198.949107][T22406] vivid-000: disconnect [ 1198.957710][T22399] vivid-000: reconnect [ 1199.935689][T22428] syzkaller0: entered promiscuous mode [ 1199.935746][T22428] syzkaller0: entered allmulticast mode [ 1200.626813][T22452] fuse: Invalid rootmode [ 1200.749067][T22449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1200.749611][T22449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.910716][T22456] syzkaller0: entered promiscuous mode [ 1200.910774][T22456] syzkaller0: entered allmulticast mode [ 1201.661000][ T5781] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1201.800151][ T5781] usb 2-1: device descriptor read/64, error -71 [ 1202.040286][ T5781] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1202.180287][ T5781] usb 2-1: device descriptor read/64, error -71 [ 1202.300238][ T5781] usb usb2-port1: attempt power cycle [ 1202.602035][T22496] syzkaller0: entered promiscuous mode [ 1202.609388][T22496] syzkaller0: entered allmulticast mode [ 1202.620253][T16088] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1202.649939][ T5781] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1202.670559][ T5781] usb 2-1: device descriptor read/8, error -71 [ 1202.780842][T16088] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1202.782125][T16088] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.782176][T16088] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1202.782203][T16088] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1202.782231][T16088] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1202.782278][T16088] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.811343][T16088] usb 3-1: config 0 descriptor?? [ 1202.835510][T16088] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 1202.835596][T16088] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 1202.920284][ T5781] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1202.951993][ T5781] usb 2-1: device descriptor read/8, error -71 [ 1203.060169][ T5781] usb usb2-port1: unable to enumerate USB device [ 1203.233705][T22513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.234793][T22513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.439114][T22521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.449232][T22521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.453550][T22519] syzkaller0: entered promiscuous mode [ 1203.453575][T22519] syzkaller0: entered allmulticast mode [ 1204.763984][T22561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1204.776861][T22561] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5241'. [ 1204.880233][ T5627] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1205.039951][ T5627] usb 6-1: Using ep0 maxpacket: 32 [ 1205.047635][ T5627] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1205.047732][ T5627] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1205.066883][ T5627] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1205.066939][ T5627] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1205.066986][ T5627] usb 6-1: config 14 has no interface number 0 [ 1205.067012][ T5627] usb 6-1: config 14 has no interface number 1 [ 1205.067085][ T5627] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1205.067122][ T5627] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1205.067161][ T5627] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1205.067201][ T5627] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1205.067242][ T5627] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1205.067282][ T5627] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.067323][ T5627] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1205.067353][ T5627] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1205.094129][ T5781] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1205.185293][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.185330][ T5627] usb 6-1: Product: syz [ 1205.185348][ T5627] usb 6-1: Manufacturer: syz [ 1205.185367][ T5627] usb 6-1: SerialNumber: syz [ 1205.274993][ T5781] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1205.283511][ T5781] usb 2-1: New USB device found, idVendor=100d, idProduct=3342, bcdDevice=99.ba [ 1205.298048][ T5781] usb 2-1: config 8 has an invalid interface number: 129 but max is 1 [ 1205.298101][ T5781] usb 2-1: config 8 has an invalid interface number: 158 but max is 1 [ 1205.298170][ T5781] usb 2-1: config 8 has no interface number 0 [ 1205.298198][ T5781] usb 2-1: config 8 has no interface number 1 [ 1205.298261][ T5781] usb 2-1: config 8 interface 158 has no altsetting 0 [ 1205.338673][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.338752][ T5781] usb 2-1: Product: syz [ 1205.338794][ T5781] usb 2-1: Manufacturer: syz [ 1205.338825][ T5781] usb 2-1: SerialNumber: syz [ 1205.464575][ T122] usb 3-1: USB disconnect, device number 6 [ 1205.555074][T22571] syzkaller0: entered promiscuous mode [ 1205.555130][T22571] syzkaller0: entered allmulticast mode [ 1205.606207][T22561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.607640][T22561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.636344][ T5781] cxacru 2-1:8.129: cxacru_bind: interface has incorrect endpoints [ 1205.644894][ T5781] cxacru 2-1:8.129: usbatm_usb_probe: bind failed: -19! [ 1205.654477][ T5627] legousbtower 6-1:14.57: interrupt endpoints not found [ 1205.684601][ T5781] cxacru 2-1:8.158: cxacru_bind: interface has incorrect endpoints [ 1205.684787][ T5781] cxacru 2-1:8.158: usbatm_usb_probe: bind failed: -19! [ 1205.712005][ T5781] usb 2-1: USB disconnect, device number 108 [ 1206.062787][ T5627] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1206.076289][ T5627] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1206.983975][T22597] netlink: 'syz.6.5251': attribute type 1 has an invalid length. [ 1207.144443][T22597] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1207.206076][T22599] bridge7: entered promiscuous mode [ 1207.259127][T22599] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 1207.825807][ T122] usb 6-1: USB disconnect, device number 9 [ 1207.888890][ T122] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1208.597014][T22641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.608950][T22641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.995098][T22669] netlink: 'syz.0.5268': attribute type 1 has an invalid length. [ 1210.061677][T22671] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5268'. [ 1210.178076][T22669] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1210.220941][T22672] bridge7: entered promiscuous mode [ 1210.247843][T22672] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 1210.348957][T22674] syzkaller0: entered promiscuous mode [ 1210.349033][T22674] syzkaller0: entered allmulticast mode [ 1210.513544][T22682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1210.522810][T22682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1210.951789][T22698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1210.961470][T22698] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1211.621278][ T122] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1211.792971][ T122] usb 3-1: Using ep0 maxpacket: 8 [ 1211.799120][ T122] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1211.815041][ T122] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1211.836216][ T122] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1211.836271][ T122] usb 3-1: Product: syz [ 1211.836309][ T122] usb 3-1: Manufacturer: syz [ 1211.836334][ T122] usb 3-1: SerialNumber: syz [ 1212.073647][ T122] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1212.073701][ T122] usb 3-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1212.073749][ T122] usb 3-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1212.073782][ T122] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1212.291654][ T122] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1212.291761][ T122] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1212.312654][ T122] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1212.330730][ T122] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1212.346578][ T122] usb 3-1: USB disconnect, device number 7 [ 1212.366133][ T122] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1212.386926][ T122] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1212.401365][ T122] visor 3-1:1.0: device disconnected [ 1213.191384][T22742] syzkaller0: entered promiscuous mode [ 1213.191441][T22742] syzkaller0: entered allmulticast mode [ 1213.300033][ T25] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1213.463135][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1213.467228][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1213.467283][ T25] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1213.468482][ T25] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1213.468511][ T25] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1213.468536][ T25] usb 2-1: config 14 has no interface number 0 [ 1213.468558][ T25] usb 2-1: config 14 has no interface number 1 [ 1213.468633][ T25] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1213.468663][ T25] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1213.468695][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1213.468728][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1213.468762][ T25] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1213.468795][ T25] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1213.468861][ T25] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1213.468891][ T25] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1213.474319][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.474351][ T25] usb 2-1: Product: syz [ 1213.474370][ T25] usb 2-1: Manufacturer: syz [ 1213.474389][ T25] usb 2-1: SerialNumber: syz [ 1213.908344][ T25] legousbtower 2-1:14.57: interrupt endpoints not found [ 1216.222395][ T25] legousbtower 2-1:14.228: get version request failed: -110 [ 1216.222618][ T25] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -110 [ 1216.428855][T16088] usb 2-1: USB disconnect, device number 109 [ 1216.655308][T22765] syzkaller0: entered promiscuous mode [ 1216.655372][T22765] syzkaller0: entered allmulticast mode [ 1217.451993][ T122] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1217.621000][ T122] usb 6-1: Using ep0 maxpacket: 8 [ 1217.628117][ T122] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1217.645141][ T122] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1217.662146][ T122] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1217.662229][ T122] usb 6-1: Product: syz [ 1217.662276][ T122] usb 6-1: Manufacturer: syz [ 1217.662303][ T122] usb 6-1: SerialNumber: syz [ 1217.906927][ T122] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 1217.916877][ T122] usb 6-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1217.926203][ T122] usb 6-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1217.935951][ T122] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1218.146923][ T122] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 1218.147034][ T122] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 1218.178338][ T122] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1218.227046][ T122] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1218.241745][ T122] usb 6-1: USB disconnect, device number 10 [ 1218.255931][ T122] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1218.275532][ T122] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1218.287021][ T122] visor 6-1:1.0: device disconnected [ 1218.564382][T22804] block nbd9: server does not support multiple connections per device. [ 1218.565810][T22804] block nbd9: shutting down sockets [ 1218.773032][T22811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.773575][T22811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.802719][T22811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1218.811470][ T122] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1218.813773][T22813] netlink: 'syz.5.5309': attribute type 1 has an invalid length. [ 1218.819677][T22811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1218.848448][T22813] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1218.854221][T22813] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5309'. [ 1218.866733][T22813] bridge6: entered promiscuous mode [ 1218.873442][T22813] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 1218.981363][ T122] usb 2-1: New USB device found, idVendor=047e, idProduct=0000, bcdDevice= 0.00 [ 1218.990927][ T122] usb 2-1: no configurations [ 1218.990949][ T122] usb 2-1: can't read configurations, error -22 [ 1219.139907][ T122] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1219.290861][ T122] usb 2-1: New USB device found, idVendor=047e, idProduct=0000, bcdDevice= 0.00 [ 1219.300600][ T122] usb 2-1: no configurations [ 1219.305862][ T122] usb 2-1: can't read configurations, error -22 [ 1219.313238][ T122] usb usb2-port1: attempt power cycle [ 1219.680762][ T122] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1219.724492][ T122] usb 2-1: New USB device found, idVendor=047e, idProduct=0000, bcdDevice= 0.00 [ 1219.726235][ T122] usb 2-1: no configurations [ 1219.728118][ T122] usb 2-1: can't read configurations, error -22 [ 1219.890959][ T122] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1219.922281][ T122] usb 2-1: New USB device found, idVendor=047e, idProduct=0000, bcdDevice= 0.00 [ 1219.932350][ T122] usb 2-1: no configurations [ 1219.932415][ T122] usb 2-1: can't read configurations, error -22 [ 1219.943812][ T122] usb usb2-port1: unable to enumerate USB device [ 1220.615945][T22845] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5317'. [ 1220.625239][T16088] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1220.780026][T16088] usb 6-1: Using ep0 maxpacket: 8 [ 1220.785961][T16088] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1220.797962][T16088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.817949][T16088] usb 6-1: config 0 descriptor?? [ 1220.841421][T16088] usb 6-1: probing VID:PID(0424:012C) [ 1220.852530][T16088] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 1220.860601][T16088] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1220.867440][T16088] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 1220.876812][T16088] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1220.883891][T16088] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1221.241448][T16088] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1221.442151][T16088] usb 6-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1221.577994][T22869] block nbd9: server does not support multiple connections per device. [ 1221.588044][T22869] block nbd9: shutting down sockets [ 1221.820731][ T122] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1221.857254][T22875] netlink: 'syz.6.5322': attribute type 1 has an invalid length. [ 1221.915232][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5322'. [ 1221.917140][T22875] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1221.990076][ T122] usb 2-1: Using ep0 maxpacket: 8 [ 1221.996027][ T122] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1222.006736][ T122] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1222.012026][T22875] bridge8: entered promiscuous mode [ 1222.028851][ T122] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1222.035324][T22875] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 1222.048280][ T122] usb 2-1: Product: syz [ 1222.048337][ T122] usb 2-1: Manufacturer: syz [ 1222.048364][ T122] usb 2-1: SerialNumber: syz [ 1222.156343][T22884] syzkaller0: entered promiscuous mode [ 1222.156405][T22884] syzkaller0: entered allmulticast mode [ 1222.289333][ T122] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 1222.289387][ T122] usb 2-1: Handspring Visor / Palm OS: port 231, is for unknown use [ 1222.289432][ T122] usb 2-1: Handspring Visor / Palm OS: port 193, is for Debugger use [ 1222.289462][ T122] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1222.379965][ T5745] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1222.511152][ T122] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 1222.511258][ T122] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 1222.534841][ T5745] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1222.535250][ T122] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1222.538255][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.567723][ T122] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1222.586187][ T122] usb 2-1: USB disconnect, device number 114 [ 1222.608803][ T122] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1222.625284][ T122] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1222.645953][ T122] visor 2-1:1.0: device disconnected [ 1223.333998][T22912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.336532][T22912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.532238][T22916] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5332'. [ 1223.550185][ T5745] usb 3-1: NFC: Unable to get FW version [ 1223.590847][ T5745] pn533_usb 3-1:1.0: probe with driver pn533_usb failed with error -71 [ 1223.612913][ T5745] usb 3-1: USB disconnect, device number 8 [ 1224.155273][ T10] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1224.158596][ T10] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1224.169598][ T10] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 1224.181018][ T5781] usb 6-1: USB disconnect, device number 11 [ 1224.295699][T22935] block nbd9: server does not support multiple connections per device. [ 1224.297783][T22935] block nbd9: shutting down sockets [ 1224.777523][T22948] netlink: 'syz.2.5338': attribute type 1 has an invalid length. [ 1224.823425][T22948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1224.828143][T22947] syzkaller0: entered promiscuous mode [ 1224.828168][T22947] syzkaller0: entered allmulticast mode [ 1224.835567][T22948] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5338'. [ 1224.855411][T22948] bridge4: entered promiscuous mode [ 1224.862682][ T5781] USB vub300 remote SDIO host controller[0] now disconnected [ 1224.873288][T22948] bond3: (slave bridge4): Enslaving as an active interface with an up link ** replaying previous printk message ** [ 1225.202570][ C0] ------------[ cut here ]------------ [ 1225.202622][ C0] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait_exclusive+0x88/0x230 [ 1225.202678][ C0] WARNING: kernel/sched/core.c:9161 at __might_sleep+0x92/0xf0, CPU#0: syz.1.5330/22906 [ 1225.235107][ C0] Modules linked in: [ 1225.241472][ C0] CPU: 0 UID: 0 PID: 22906 Comm: syz.1.5330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.252650][ C0] Tainted: [L]=SOFTLOCKUP [ 1225.257060][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1225.267402][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 1225.272822][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 5e 96 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 7f 06 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 1225.292710][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 1225.298886][ C0] RAX: 0000000000000000 RBX: ffff8880351498a8 RCX: ffffffff81a005a8 [ 1225.307006][ C0] RDX: ffffffff81a005a8 RSI: 0000000000000001 RDI: ffffffff907d1460 [ 1225.315123][ C0] RBP: 0000000000000001 R08: 0000000000000100 R09: 1ffffffff20f42cf [ 1225.323330][ C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: 1ffff11006a29315 [ 1225.331463][ C0] R13: 00000000000011d1 R14: ffffffff907d1460 R15: dffffc0000000000 [ 1225.339544][ C0] FS: 00007fbb1ed056c0(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 1225.348628][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1225.355351][ C0] CR2: 00002000003dc030 CR3: 000000004feeb000 CR4: 0000000000350ef0 [ 1225.363504][ C0] Call Trace: [ 1225.366883][ C0] [ 1225.369809][ C0] __cancel_work_sync+0x6d/0x110 [ 1225.374856][ C0] mmc_free_host+0x19/0x30 [ 1225.379392][ C0] call_timer_fn+0x18d/0x5f0 [ 1225.384098][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1225.390918][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1225.395699][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1225.400941][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1225.406229][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1225.413057][ C0] __run_timer_base+0x652/0x8b0 [ 1225.418008][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.423783][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1225.429341][ C0] ? ktime_get+0x1f5/0x220 [ 1225.433865][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.439602][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.445366][ C0] run_timer_softirq+0xb7/0x170 [ 1225.450370][ C0] handle_softirqs+0x226/0x860 [ 1225.455238][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1225.460172][ C0] __irq_exit_rcu+0xcb/0x220 [ 1225.464887][ C0] irq_exit_rcu+0x9/0x30 [ 1225.469226][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1225.475011][ C0] [ 1225.478036][ C0] [ 1225.481038][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1225.487111][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1225.493669][ C0] Code: f7 e8 5d d5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 12 e9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 ee ad f5 65 48 8b 05 9c 81 ad 07 48 85 c0 74 18 5b 41 5e e9 [ 1225.513558][ C0] RSP: 0018:ffffc9000d797598 EFLAGS: 00000206 [ 1225.519800][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 8000000000000002 [ 1225.527869][ C0] RDX: 0000000000000006 RSI: ffffffff8e4744cc RDI: 0000000000000001 [ 1225.536031][ C0] RBP: 000000004e93ed01 R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 1225.544123][ C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff888035148000 [ 1225.552229][ C0] R13: ffffffff81a005a8 R14: ffff88804e93ed00 R15: ffff8880351498a8 [ 1225.560359][ C0] ? prepare_to_wait_exclusive+0x88/0x230 [ 1225.566209][ C0] prepare_to_wait_exclusive+0xe2/0x230 [ 1225.571897][ C0] unix_wait_for_peer+0x108/0x2f0 [ 1225.577027][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1225.582711][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1225.588884][ C0] ? apparmor_unix_may_send+0x2f5/0x340 [ 1225.594589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.600368][ C0] unix_dgram_sendmsg+0xaf4/0x17b0 [ 1225.605611][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1225.611298][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.617029][ C0] ? aa_sock_msg_perm+0x129/0x210 [ 1225.622185][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.627920][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 1225.633626][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.639366][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1225.645047][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 1225.650199][ C0] ____sys_sendmsg+0x54e/0x850 [ 1225.655075][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.660510][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.666249][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.672039][ C0] ? import_iovec+0x73/0xa0 [ 1225.676638][ C0] ___sys_sendmsg+0x2a5/0x360 [ 1225.681463][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.686783][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1225.691884][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.697607][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.703382][ C0] __sys_sendmmsg+0x273/0x4d0 [ 1225.708151][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1225.713489][ C0] ? do_futex+0x3e7/0x4e0 [ 1225.717914][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.723679][ C0] ? __sys_connect+0x3a1/0x450 [ 1225.728571][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.734336][ C0] ? rcu_is_watching+0x16/0xb0 [ 1225.739202][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 1225.744185][ C0] do_syscall_64+0x166/0x520 [ 1225.748907][ C0] ? trace_irq_disable+0x3b/0x140 [ 1225.754302][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.760529][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.766518][ C0] RIP: 0033:0x7fbb1dd9e159 [ 1225.771154][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.791530][ C0] RSP: 002b:00007fbb1ed05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1225.800114][ C0] RAX: ffffffffffffffda RBX: 00007fbb1e025fa0 RCX: 00007fbb1dd9e159 [ 1225.808312][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 1225.816454][ C0] RBP: 00007fbb1de35024 R08: 0000000000000000 R09: 0000000000000000 [ 1225.824574][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1225.832701][ C0] R13: 00007fbb1e026038 R14: 00007fbb1e025fa0 R15: 00007fff3a1a2068 [ 1225.840852][ C0] [ 1225.843945][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1225.851252][ C0] CPU: 0 UID: 0 PID: 22906 Comm: syz.1.5330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1225.862218][ C0] Tainted: [L]=SOFTLOCKUP [ 1225.866545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1225.876607][ C0] Call Trace: [ 1225.879900][ C0] [ 1225.883186][ C0] vpanic+0x56d/0xa60 [ 1225.887186][ C0] ? __pfx__printk+0x10/0x10 [ 1225.891786][ C0] ? __pfx_vpanic+0x10/0x10 [ 1225.896296][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1225.901625][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1225.906847][ C0] panic+0xc5/0xd0 [ 1225.910608][ C0] ? __pfx_panic+0x10/0x10 [ 1225.915239][ C0] __warn+0x315/0x4c0 [ 1225.919230][ C0] ? __might_sleep+0x92/0xf0 [ 1225.923898][ C0] ? __might_sleep+0x92/0xf0 [ 1225.928495][ C0] __report_bug+0x276/0x570 [ 1225.933014][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1225.937831][ C0] ? __might_sleep+0x92/0xf0 [ 1225.942438][ C0] ? __pfx___report_bug+0x10/0x10 [ 1225.947474][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.953112][ C0] ? prepare_to_wait_exclusive+0x88/0x230 [ 1225.958840][ C0] ? prepare_to_wait_exclusive+0x88/0x230 [ 1225.964571][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.970206][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1225.975326][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1225.981140][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1225.986771][ C0] ? debug_object_assert_init+0x20d/0x380 [ 1225.992758][ C0] report_bug_entry+0x19b/0x290 [ 1225.997710][ C0] ? __might_sleep+0xac/0xf0 [ 1226.002309][ C0] ? __might_sleep+0xb1/0xf0 [ 1226.006907][ C0] handle_bug+0xce/0x200 [ 1226.011147][ C0] exc_invalid_op+0x1a/0x50 [ 1226.015650][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1226.020495][ C0] RIP: 0010:__might_sleep+0xac/0xf0 [ 1226.025699][ C0] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 5e 96 e6 0e 43 80 3c 3c 00 74 08 48 89 df e8 7f 06 a1 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 1226.045304][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 1226.051415][ C0] RAX: 0000000000000000 RBX: ffff8880351498a8 RCX: ffffffff81a005a8 [ 1226.059386][ C0] RDX: ffffffff81a005a8 RSI: 0000000000000001 RDI: ffffffff907d1460 [ 1226.067356][ C0] RBP: 0000000000000001 R08: 0000000000000100 R09: 1ffffffff20f42cf [ 1226.075335][ C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: 1ffff11006a29315 [ 1226.083311][ C0] R13: 00000000000011d1 R14: ffffffff907d1460 R15: dffffc0000000000 [ 1226.091381][ C0] ? prepare_to_wait_exclusive+0x88/0x230 [ 1226.097139][ C0] ? prepare_to_wait_exclusive+0x88/0x230 [ 1226.102965][ C0] __cancel_work_sync+0x6d/0x110 [ 1226.107922][ C0] mmc_free_host+0x19/0x30 [ 1226.112349][ C0] call_timer_fn+0x18d/0x5f0 [ 1226.116947][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1226.123621][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1226.128305][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1226.133425][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1226.138626][ C0] ? __pfx_vub300_inactivity_timer_expired+0x10/0x10 [ 1226.145306][ C0] __run_timer_base+0x652/0x8b0 [ 1226.150158][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.156182][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1226.161733][ C0] ? ktime_get+0x1f5/0x220 [ 1226.166263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.176253][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.182012][ C0] run_timer_softirq+0xb7/0x170 [ 1226.186873][ C0] handle_softirqs+0x226/0x860 [ 1226.191648][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1226.196548][ C0] __irq_exit_rcu+0xcb/0x220 [ 1226.201145][ C0] irq_exit_rcu+0x9/0x30 [ 1226.205394][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1226.211220][ C0] [ 1226.214149][ C0] [ 1226.217159][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1226.223176][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1226.229607][ C0] Code: f7 e8 5d d5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 12 e9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 ee ad f5 65 48 8b 05 9c 81 ad 07 48 85 c0 74 18 5b 41 5e e9 [ 1226.249261][ C0] RSP: 0018:ffffc9000d797598 EFLAGS: 00000206 [ 1226.255440][ C0] RAX: 0000000000000002 RBX: 0000000000000202 RCX: 8000000000000002 [ 1226.263452][ C0] RDX: 0000000000000006 RSI: ffffffff8e4744cc RDI: 0000000000000001 [ 1226.271468][ C0] RBP: 000000004e93ed01 R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 1226.279441][ C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff888035148000 [ 1226.287445][ C0] R13: ffffffff81a005a8 R14: ffff88804e93ed00 R15: ffff8880351498a8 [ 1226.295429][ C0] ? prepare_to_wait_exclusive+0x88/0x230 [ 1226.301188][ C0] prepare_to_wait_exclusive+0xe2/0x230 [ 1226.306774][ C0] unix_wait_for_peer+0x108/0x2f0 [ 1226.311808][ C0] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 1226.317436][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1226.323535][ C0] ? apparmor_unix_may_send+0x2f5/0x340 [ 1226.329128][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.334778][ C0] unix_dgram_sendmsg+0xaf4/0x17b0 [ 1226.339989][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1226.345541][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.351176][ C0] ? aa_sock_msg_perm+0x129/0x210 [ 1226.356265][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.361906][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 1226.367495][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.373161][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1226.378733][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 1226.383792][ C0] ____sys_sendmsg+0x54e/0x850 [ 1226.388700][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1226.393993][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.399632][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.405348][ C0] ? import_iovec+0x73/0xa0 [ 1226.409860][ C0] ___sys_sendmsg+0x2a5/0x360 [ 1226.414558][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 1226.419754][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1226.424730][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.430454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.436095][ C0] __sys_sendmmsg+0x273/0x4d0 [ 1226.440778][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1226.445992][ C0] ? do_futex+0x3e7/0x4e0 [ 1226.450346][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.455977][ C0] ? __sys_connect+0x3a1/0x450 [ 1226.460765][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.466399][ C0] ? rcu_is_watching+0x16/0xb0 [ 1226.471175][ C0] __x64_sys_sendmmsg+0xa0/0xc0 [ 1226.476035][ C0] do_syscall_64+0x166/0x520 [ 1226.480637][ C0] ? trace_irq_disable+0x3b/0x140 [ 1226.485659][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.491815][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.497704][ C0] RIP: 0033:0x7fbb1dd9e159 [ 1226.502114][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.521722][ C0] RSP: 002b:00007fbb1ed05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1226.530188][ C0] RAX: ffffffffffffffda RBX: 00007fbb1e025fa0 RCX: 00007fbb1dd9e159 [ 1226.538186][ C0] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000005 [ 1226.546156][ C0] RBP: 00007fbb1de35024 R08: 0000000000000000 R09: 0000000000000000 [ 1226.554300][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.562262][ C0] R13: 00007fbb1e026038 R14: 00007fbb1e025fa0 R15: 00007fff3a1a2068 [ 1226.570249][ C0] [ 1226.573574][ C0] Kernel Offset: disabled [ 1226.577885][ C0] Rebooting in 86400 seconds..